Keep private files private, and prove who sent them
You have a folder of contracts, tax papers or client data, and you want to send or store it so only the right person can open it. You also want the recipient to know the files really came from you. SafeKuvert handles both jobs. It encrypts files and digitally signs them with the certificate system already built into Windows.
Quick facts
- Version: 1.0.2
- Platform: Windows only
- Price: $29.00 for a single license, with lower per-unit prices for larger quantities
- Trial: a trial version can be downloaded before or after you buy; a license sent by email unlocks the full program
- Output format: standard PKCS#7 messages saved as .pkcs7 files
Key features
Encrypt and sign a file in one step
SafeKuvert turns any file into a standard PKCS#7 message with a .pkcs7 extension. Because the format is a standard one, you aren't locked into a proprietary container. To create an encoded file you don't need the recipient's private key. The file can only be decrypted on the computer that holds the private key of the encryption certificate.
Use certificates you already have
The program works with the Windows certificate stores, standard X-509 certificates and the installed Cryptographic Service Providers. That means certificates from well-known Certification Authorities work, whether they are already on your PC or newly issued.
Pick the encryption algorithm
Depending on the installed CSPs, you can choose among AES, 3DES, DES, RC2 and RC4.
Find colleagues' certificates through a directory
With LDAP directory support, including Active Directory, you can set up central access to the certificates of users in your company or home network.
Compress and securely delete
Besides encryption, SafeKuvert can compress files and securely delete them by overwriting their contents several times, so the originals can't be easily recovered after you encrypt them.
Work from Windows Explorer
The program adds Windows Shell extensions. Encoded files get a small lock overlay icon, and their Properties dialog gets an extra tab showing encryption and signature details. It also supports Unicode file names, so localized names don't cause trouble.
Who it's for
It suits people who already use, or are willing to set up, X-509 certificates: office staff on an Active Directory network, small businesses exchanging sensitive documents, and home users who want local file protection. If you want something that asks nothing about certificates, it will feel like extra work.
Pros and cons
Pros
- Standard PKCS#7 output, not a proprietary format
- Uses certificates and cryptography already in Windows
- Encrypt, sign, compress and shred in one tool
- Small installer, about 1 MB
- Volume pricing for teams
Cons
- Windows only
- Paid license after the trial
- You need a certificate to get started
- Files can only be decrypted where the matching private key is stored
FAQs
What format are the encrypted files?
Standard PKCS#7 messages with a .pkcs7 extension.
Which encryption algorithms can I use?
AES, 3DES, DES, RC2 and RC4, depending on the CSPs installed on your system.
Do I need the recipient's private key to encrypt a file for them?
No. You only need their certificate. Only the holder of the private key can decrypt it.
Can I try it before buying?
Yes. A trial version is available, and a license sent by email unlocks it after purchase.
Does it work with Active Directory?
Yes. It supports LDAP directory services so you can pick certificates from your company directory.
System requirements
Windows, with the Windows Installer and Internet Explorer 4.0 or later. The vendor's pages mention support from Windows 95/98/Me through Windows Vista and Windows 7.