At times, I send emails with attached documents that contain sensitive data. I learned recently that the policy is to create an encrypted archive that contain such documents. As a result, I have seen three different ways such emails are sent:
- Send archive with the archive password in the same email.
- Same as #1, but with the password on the very bottom of the email.
- Send archive and archive password in separate emails...typically the email containing the archive is sent before the one containing the archive password.
I currently practice #1 by policy, and I'm not sure if this is the best approach.
I use Outlook Express. I have no admin privileges on my computer and the only way (company approved) software is installed on my computer is through a request procedure.
What is the best practice for sending encrypted archives over email?