# Nightfall Encryption - Recipient Experience

This document explains the Nightfall encryption process from a recipient's perspective. The recipient can learn how to work with emails that are encrypted with Nightfall.

The recipient experience varies for users who have the Nightfall DLP chrome extension installed and for those who have not installed it. Basically, recipients who have not installed the Nightfall DLP chrome extension can only view the contents of an encrypted email via a secure reader. This reader opens in a new tab. However, recipients who have the Nightfall DLP chrome extension installed, can view the contents on an encrypted email directly without any secure reader. The secured reader is required for these recipients only when viewing the contents of an email attachment on which persistent protection is enabled.&#x20;

## Recipient Experience When Nightfall DLP is not Installed

When the recipient opens an email that is encrypted by Nightfall, initially they can only view the content added under the introduction section. To view the actual content of the email, the recipients must click the **Unlock Message** button. Clicking this button decrypts the message for the recipient.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FDFYfO2dPDRjDZnAuwJyJ%2Fimage.png?alt=media&#x26;token=2a11c00c-4f6e-4fcb-a36b-70ea22d9390f" alt=""><figcaption></figcaption></figure>

Once the recipient clicks the **Unlock Message** button, a new tab is opened. This is the Nightfall **Secure Reader** tab. The recipient is asked to complete login to their gmail again. Once the login process completes, Nightfall decrypts the contents of the email and displays the same in another tab.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FpvgIb0QcprNH95nRSzCB%2Fimage.png?alt=media&#x26;token=4221e09b-d9d6-435a-b89a-6ce887a40a48" alt=""><figcaption></figcaption></figure>

Once the recipient completes the login process, the content of the email is decrypted and they can view it.

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FB1OuCDXEUTXBZdkDUdAE%2Fimage.png?alt=media&#x26;token=a128d13c-58cb-43d0-9dfb-b2686183e7ef" alt=""><figcaption></figcaption></figure>

## Encryption Options When Nightfall DLP is not Installed

If the sender has enabled the **Disable Forwarding, Set Expiration, and Persistent Protection** options, the recipient can view the respective labels for these features at the top of the page as shown in the following image.

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2F5lp8qW8AGNaQObwuHkp7%2Fimage.png?alt=media&#x26;token=ac5807c4-4940-4b99-8d44-a9aa39bd0406" alt=""><figcaption></figcaption></figure>

### Email Expiry When Nightfall DLP is not Installed

When an email expires and the recipient attempts to open it, they receive an email expired message as shown in the following image. The email label also changes to **`Expired`** to indicate that the email is now expired.

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FmJXkr4k8BlWpfKYypjx3%2Fimage.png?alt=media&#x26;token=fcfb66e1-ed50-4465-b00b-87b43ae0ff8e" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Once the email expires, the sender can choose to extend the expiration of the email. In this case, the recipient can view the email again until the next expiration date. The sender can also choose to disable the expiration feature totally. In this case, the recipient always has the access to the email, unless the sender enables the expiration feature again and sets an expiry date.&#x20;
{% endhint %}

### Disable Forwarding When Nightfall DLP is not Installed&#x20;

When the recipient views an encrypted email on which forwarding is disabled, they can see the **Forwarding Disabled** label.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FtYUUOCeuj5ISxGtHpXHP%2Fimage.png?alt=media&#x26;token=c5fb0fcf-a48e-4139-b81a-917c9c5d889b" alt=""><figcaption></figcaption></figure>

Recipients can reply to the email on which forwarding is disabled. If the email was sent to multiple recipients, any recipient can choose to reply all. However, when using the reply all (or even reply option) option, recipients cannot add any new recipients or remove any of the existing recipients.&#x20;

While replying to emails, recipients can use the **Set Expiration** and **Disable Forwarding** options. These options are available only when the reply is sent through the secure reader.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FQH3fJWwgnNhVlLvFRlEy%2Fimage.png?alt=media&#x26;token=87e4216e-48c7-4bef-9082-bb46238da78e" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
The Forward option is available even on emails sent with Disable Forwarding enabled. However, if a recipient attempts to forward such an email, the email is forwarded but the new recipient cannot view the contents of the email. They get an **Access Denied** message.&#x20;
{% endhint %}

### Persistent Protection When Nightfall DLP is not Installed

If the sender has enabled Persistent protection, recipients cannot download attachments, copy attachments, or forward emails that have an attachment. Recipients can only view the contents of the attachment in the secure reader.&#x20;

To view the attachments of an email on which Persistent Protection is enabled, recipients must click the view icon on the attachment.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FjqJAHql5gWjOiReZN90A%2Fimage.png?alt=media&#x26;token=95cb6ff9-9c48-4495-8480-e4e0b09587e4" alt=""><figcaption></figcaption></figure>

## Recipient Experience When Nightfall DLP is Installed

When the recipient opens an email, they can directly view the contents of the email. They need not go to a secure reader to view the email contents, since Nightfall DLP extension is installed. A secure reader is needed only to view the contents of an email.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FQToVGkTOvI4F9NnmKo1G%2Fimage.png?alt=media&#x26;token=cdaba3de-652b-4a67-ac5b-bb1ec69c87f2" alt=""><figcaption></figcaption></figure>

## Encryption Options When Nightfall DLP is Installed

This section describes the recipient experience when encryption options are enabled by the sender.&#x20;

### Email Expiry When Nightfall DLP is Installed

When an email has been sent with an expiry date, the email displays the expiry date and time on top of the email.

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2Fa5ugMFyRemTFfrsCOx2C%2Fimage.png?alt=media&#x26;token=39759667-945a-485d-a632-5254adbf5c95" alt=""><figcaption></figcaption></figure>

When an email expires and the recipient attempts to open it, they receive an email expired message as shown in the following image.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FRidyOv4wOa2gcM2Jc5Gv%2Fimage.png?alt=media&#x26;token=6ada5ee0-e181-4eba-bc0e-366634376269" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Once the email expires, the sender can choose to extend the expiration of the email. In this case, the recipient can view the email again until the next expiration date. The sender can also choose to disable the expiration feature totally. In this case, the recipient always has the access to the email, unless the sender enables the expiration feature again and sets an expiry date.&#x20;
{% endhint %}

### Disable Forwarding When Nightfall DLP is Installed

When the recipient views an encrypted email on which forwarding is disabled, they can see that the **Forward** option is not available in the email options.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FXOWTRuMq0xIbAHJvLiQK%2Fimage.png?alt=media&#x26;token=8fcfc2ce-2cc1-4efb-8c0a-b66728f5c7b9" alt=""><figcaption></figcaption></figure>

### Persistent Protection When Nightfall DLP is Installed

If the sender has enabled Persistent protection, recipients cannot download attachments, copy attachments, or forward emails that have an attachment. Recipients can only view the contents of the attachment in the secure reader.&#x20;

To view the attachments of an email on which Persistent Protection is enabled, recipients must click the view icon on the attachment.&#x20;

### Introduction Section

If the sender has included an Introduction section, recipients can see the contents of the Introduction section and the contents of the actual email as shown in the following image.&#x20;

<figure><img src="https://1076964516-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIIXcFdjOGGBFT01mkPin%2Fuploads%2FXxuNmmXBtQZgfAGIfpiF%2Fimage.png?alt=media&#x26;token=add6d8d7-9a87-4008-9e4f-f89fdab71340" alt=""><figcaption></figcaption></figure>
