FlowCrypt

FlowCrypt is an email encryption service for individuals and organizations that need to protect messages to both OpenPGP users and other recipients. It suits people who want a free starting point or larger domains that need centrally managed security rules. Its broad delivery options are a strength; enterprise buyers must contact FlowCrypt for pricing.

Overview

FlowCrypt offers two ways to send protected email: encrypted messages to OpenPGP users and password-protected messages to anyone else. Recipients can reply securely without installing a plugin, making it practical when correspondents do not use the same encryption software.

The service is operated by FlowCrypt a.s., headquartered in Prague, Czech Republic. The company is reported as founded in 2015 and as having existed since 2016.

Key features

Flexible protected delivery: OpenPGP encryption serves recipients with compatible keys, while password-protected messages extend protected delivery to other recipients. That flexibility is useful for mixed audiences, though the password route differs from OpenPGP messaging.

Secure replies: Recipients can respond securely without installing a plugin, which lowers the adoption burden for occasional correspondents.

Email support: Gmail and Outlook integration are supported. Message expiry and password-based recipient verification are also included.

Enterprise administration: Administrators can set domain-wide settings and restrictions, including rules for passphrases, keys, and signing. This makes the enterprise offer more relevant to organizations that need consistent controls than to individuals seeking only message protection.

Enterprise infrastructure: Enterprise supports SSO through Google, OIDC providers, and delegated identity providers, and can integrate with public key servers, HSMs, and internal systems. Its DPA is described as GDPR-compliant, and an SLA covers availability and response times for fixes and patches.

Pricing

FlowCrypt is freemium. The Free plan costs nothing and is for fewer than 100 users, with a 5 MB attachment threshold in the plan terms. Product information gives free users an attachment limit of up to 25 MB, so the stated free-tier attachment allowance is inconsistent. That difference matters if large files are part of the normal workflow; confirm the applicable cap before relying on the free plan.

Enterprise has custom pricing: organizations must contact FlowCrypt. It supports domains with more than 100 users and attachments up to 25 MB. This is the relevant tier for larger organizations needing domain-wide controls, custom security rules, SSO, integrations, and an SLA, but buyers cannot assess its cost without requesting a quote.

Platforms

FlowCrypt is offered as a Chrome extension, with other platforms and a mobile application also available. Gmail and Outlook integration provide email compatibility across two widely used services, while the extension-oriented offering may not suit readers seeking a product centered on a standalone desktop application.

Who it's for

FlowCrypt is a sensible fit for individuals and small groups who want encrypted email to OpenPGP users alongside password-protected delivery to other recipients. The free tier makes it possible to start without a subscription, but the conflicting attachment figures make it a less certain choice for attachment-heavy use.

Larger domains should consider Enterprise when they need administrator-enforced security, identity integration, internal-system connections, and formal support commitments. Buyers who need a firm budget before contacting a vendor should look elsewhere.

Pros and cons

Pro: Two protected delivery routes and secure replies without a plugin help users communicate with recipients who do not share their software.

Pro: Enterprise offers domain-wide restrictions, security rules, SSO, integrations, a GDPR-compliant DPA, and an SLA for organizations with more demanding administration needs.

Con: Free-plan attachment limits differ: plan terms give a 5 MB threshold, while product information says up to 25 MB for free users.

Con: Enterprise has custom pricing, so organizations must contact FlowCrypt to establish the cost.

Alternatives

For broader category comparisons, browse Email Encryption Software or File encryption tools.

Send It Secure is worth considering if you want a free guest tier with 25 MB files and up to 10 lifetime message sends to non-paid users, or need its broader set of API, extension, iOS, web, and Windows platforms.

DataMotion Secure Email Exchange is an alternative for buyers who prefer an enterprise secure-email offering with Android, API, iOS, and web platforms and are prepared to contact sales for pricing.

Mailvelope is a relevant alternative for extension and web users who want a stated Mailvelope Business price of €3 a month for 1–49 users.

Lockbin may suit a single user who wants a free plan with a 25 MB attachment allowance and six months of inbox storage, or a paid option at $10 a month.

c.Email is another free extension option, with support for existing email addresses and unlimited email addresses.

SecureMyEmail may be preferable if you need native Windows, macOS, iOS, or Android platforms and a free plan for one email address.

Virtru Email Encryption is a paid alternative for buyers seeking web, desktop, and mobile platforms, with listed annual-billed plans starting at $119 a month for five users.

Mimecast Secure Messaging is another paid alternative.

Verdict

Choose FlowCrypt if you need protected email for both OpenPGP users and recipients outside that ecosystem, especially when secure replies and enterprise controls matter. Its principal advantage is combining flexible recipient access with centrally enforceable rules at larger scale. Look elsewhere if a predictable enterprise price is essential, or verify the free attachment cap before making it part of an attachment-heavy workflow.