---
title: Understanding Encryption and Authentication
description: Virtru encrypted authentication uses a trusted CA like PGP, but without the weaknesses. Read how it works and what you can do to strengthen security.
image: https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/Zero%20Trust%20Fast%20Z.webp
---

[Skip to Main Content](https://www.virtru.com/blog/file-encryption/authentication#main-content)

[Sign In](https://secure.virtru.com/dashboard) [I received a Virtru email](https://www.virtru.com/data-protection-platform/email-encryption/send)

[![Virtru](https://www.virtru.com/hubfs/assets/images/logos/virtru/blue/virtru_LOGOMASTER_BLUE.svg) ](https://www.virtru.com/)

- Products
- Solutions
- Developers
- Company
- Resources
- [Support](https://support.virtru.com)
- [Pricing](https://www.virtru.com/data-security-platform/pricing-packages)
- Book a Demo
- Search all Virtru content
  
  ![](https://www.virtru.com/hubfs/assets/images/icons/link-arrow-black.svg)

Email Workflows

Protect data shared via email

- [Virtru for Gmail 
  
  ](https://www.virtru.com/data-security-platform/email-encryption/gmail)
- [Virtru for Outlook 
  
  ](https://www.virtru.com/data-security-platform/email-encryption/outlook)
- [Virtru Gateway 
  
  ](https://www.virtru.com/data-security-platform/virtru-data-gateway)
- [Email Integrations 
  
  ](https://www.virtru.com/products/integrations?product=data_protection_gateway&category=email)

File Workflows

Protect files shared across your workflows

- [Virtru Secure Share 
  
  ](https://www.virtru.com/data-security-platform/virtru-secure-share)
- [Virtru for Desktop 
  
  ](https://www.virtru.com/data-security-platform/desktop)
- [File Integrations 
  
  ](https://www.virtru.com/products/integrations?category=file_sharing)

Collaboration Workflows

FedRAMP authorized file storage and collaboration

- [Virtru Collaborate 
  
  ](https://www.virtru.com/data-security-platform/virtru-collaborate)

Manage Private Encryption Keys

Maintain complete sovereignty and governance

- [Virtru Private Keystore 
  
  ](https://www.virtru.com/data-security-platform/virtru-private-keystore)
- [Google Client Side Encryption (CSE) 
  
  ](https://www.virtru.com/data-security-platform/google-workspace-client-side-encryption)

Develop Data Security Solutions

Data-centric security, built on open standards

- [Virtru Data Security Platform 
  
  ](https://www.virtru.com/data-security-platform)
- [Developer Experience 
  
  ](https://www.virtru.com/data-security-platform/developer-experience)
- [Platform Integrations 
  
  ](https://www.virtru.com/partners/technology)

6,100+ Customers Trust Virtru for Data Security and Privacy Protection

![Omada Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/omada-logo.webp) ![UC Berkley Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/ucberkley-logo.webp) ![Associated Press Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/associatedpress-logo.webp) ![US Department of Defense Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/dod-logo.webp)

- Compliance
  
    - [CJIS 
      
      ](https://www.virtru.com/compliance/cjis)
    - [CMMC / NIST / DFARS 
      
      ](https://www.virtru.com/compliance/cmmc)
    - [FERPA 
      
      ](https://www.virtru.com/compliance/ferpa)
    - [FTC Safeguards Rule 
      
      ](https://www.virtru.com/compliance/data-encryption-ftc-safeguards-rule)
    - [GDPR 
      
      ](https://www.virtru.com/compliance/gdpr)
    - [HIPAA 
      
      ](https://www.virtru.com/compliance/hipaa-email)
    - [ISO 27001 
      
      ](https://www.virtru.com/compliance/iso-27001)
    - [ITAR 
      
      ](https://www.virtru.com/compliance/itar)
    - [PCI / GLBA / FINRA / SOX 
      
      ](https://www.virtru.com/compliance/financial)
- Commercial
  
    - [Aerospace 
      
      ](https://www.virtru.com/industry-solutions/aerospace-and-defense/)
    - [Education 
      
      ](https://www.virtru.com/industry-solutions/education/)
    - [Finance 
      
      ](https://www.virtru.com/industry-solutions/financial-services/)
    - [Healthcare 
      
      ](https://www.virtru.com/industry-solutions/healthcare/)
    - [Legal 
      
      ](https://www.virtru.com/industry-solutions/legal)
    - [Technology & Telecom 
      
      ](https://www.virtru.com/industry-solutions/telecom-it-and-software)
    - [Threat Intelligence 
      
      ](https://www.virtru.com/industry-solutions/threat-intelligence)
- Global Public Sector
  
    - [Federal - Defense 
      
      ](https://www.virtru.com/global-public-sector/defense)
    - [Federal - Intelligence 
      
      ](https://www.virtru.com/global-public-sector/intelligence)
    - [State & Local Government 
      
      ](https://www.virtru.com/industry-solutions/state-local-government)
    - [Systems Integrators 
      
      ](https://www.virtru.com/global-public-sector/systems-integrators)
    - [Mission Partner Environments 
      
      ](https://www.virtru.com/industry-solutions/mission-partner-environments)

[View All Solutions](https://www.virtru.com/compliance)

[![Three rings forming three overlaps in a triangle formation](https://www.virtru.com/hubfs/assets/images/icons/rings-navicon.svg)

Virtru for Global Mission Partners

Data-centric security aligned with ACP-240 and TDF

Learn More ](https://www.virtru.com/industry-solutions/mission-partner-environments) [![Microsoft Icon](https://www.virtru.com/hubfs/assets/images/icons/microsoft-navicon.svg)

Virtru for Microsoft 365

Protect data stored and shared via Microsoft 365

Learn More ](https://www.virtru.com/data-security-platform/microsoft-365) [![Google Icon](https://www.virtru.com/hubfs/assets/images/icons/google-navicon.svg)

Virtru for Google Workspace

Protect data stored and shared via Google Workspace

Learn More ](https://www.virtru.com/data-security-platform/google-workspace)

- Developers
  
    - [Virtru Data Security Platform The Security Standard that Powers Our Products 
      
      ](https://www.virtru.com/data-security-platform)
    - [Trusted Data Format Secure Collaboration and Policy Enforcement 
      
      ](https://www.virtru.com/data-security-platform/trusted-data-format)
    - [Virtru Developer Experience Build Secure Solutions from the Ground Up 
      
      ](https://www.virtru.com/data-security-platform/developer-experience)
- Developer Community
  
    - [OpenTDF: Open Source Project Open Standard Now Available on GitHub 
      
      ](https://opentdf.io/)
    - [Technology Partners Building integrations with the Virtru Platform 
      
      ](https://www.virtru.com/partners/technology)
    - [Partner Training Bootcamp Request training on the Virtru Data Security Platform 
      
      ](https://www.virtru.com/data-security-platform/training-request)

![Looking over the shoulder of somebody on their smart phone. ](https://www.virtru.com/hubfs/assets/images/stock%20photos/People%20On%20Device/person-on-phone.webp)

A trusted platform for secure data sharing

Built on the open TDF standard, the Virtru Data Security Platform provides persistent control over the information you share with others.

[Virtru Data Security Platform](https://www.virtru.com/data-security-platform)

- About Virtru
  
    - [About Us 
      
      ](https://www.virtru.com/about-us)
    - [Leadership 
      
      ](https://www.virtru.com/leadership/)
    - [Careers & Culture 
      
      ](https://www.virtru.com/careers)
    - [Contact Us 
      
      ](https://www.virtru.com/contact-us)
- In the News
  
    - [Headlines & Press Releases 
      
      ](https://www.virtru.com/newsroom)
    - [Decrypted Blog 
      
      ](https://www.virtru.com/blog)
    - [Hash It Out Podcast 
      
      ](https://www.virtru.com/hash-it-out)

Award-winning security solutions for every organization

![Cyber Security Breakthrough Award Logo for 2023](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/cybersecurity-breakthrough-award-badge-2023.webp) ![Virtru wins a G2 Top 50 Security Products Award for 2024](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/G2-Leader-2025.webp) ![Washington Post Top Work Places 2023 Award](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/twp-washington-2023.webp) ![Inc Power Partner 2024](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/IncPowerPartner-2024.webp) 

[Read Customer Reviews](https://www.virtru.com/why-virtru/reviews)

- Resources
  
    - [Decrypted Blog Tips, Takes, and Expertise 
      
      ](https://www.virtru.com/blog)
    - [Hash It Out Podcast Join us as we talk about cybersecurity 
      
      ](https://www.virtru.com/hash-it-out)
    - [Voice of the Customer Case Studies, Webinars, and Videos 
      
      ](https://www.virtru.com/resources?type=webinar,case-study)
    - [Events & Webinars Upcoming Events, Conferences, and Digital Webinars 
      
      ](https://www.virtru.com/events-and-webinars/)
    - [Resource Library Whitepapers, Guides, and Videos 
      
      ](https://www.virtru.com/resources)
    - [DMV Rising Our annual event bringing together the cyber community in the DMV 
      
      ](https://dmvrising.com/)
    - [Headlines & Press Virtru in the News 
      
      ](https://www.virtru.com/newsroom)
    - [Product Updates The latest on new products, features, and fixes 
      
      ](https://www.virtru.com/products/updates)
    - [Virtru Academy Live Helpful how-to content for admins and end users 
      
      ](https://www.virtru.com/virtru-academy-live)

![Professional on a laptop](https://www.virtru.com/hubfs/assets/images/stock%20photos/business/Business-3.webp)

![Wealthforge Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/Wealthforge%20Logo.webp)

100% Increase in delivery rate for a broker-dealer working to comply with SEC regulations.

[Read the Case Study](https://www.virtru.com/case-studies/wealthforge-sec-compliance-gateway)

- Products 
  
    - Email Workflows
      
      Protect data shared via email
      
          - [Virtru for Gmail 
            
            ](https://www.virtru.com/data-security-platform/email-encryption/gmail)
          - [Virtru for Outlook 
            
            ](https://www.virtru.com/data-security-platform/email-encryption/outlook)
          - [Virtru Gateway 
            
            ](https://www.virtru.com/data-security-platform/virtru-data-gateway)
          - [Email Integrations 
            
            ](https://www.virtru.com/products/integrations?product=data_protection_gateway&category=email)
    - File Workflows
      
      Protect files shared across your workflows
      
          - [Virtru Secure Share 
            
            ](https://www.virtru.com/data-security-platform/virtru-secure-share)
          - [Virtru for Desktop 
            
            ](https://www.virtru.com/data-security-platform/desktop)
          - [File Integrations 
            
            ](https://www.virtru.com/products/integrations?category=file_sharing)
    - Collaboration Workflows
      
      FedRAMP authorized file storage and collaboration
      
          - [Virtru Collaborate 
            
            ](https://www.virtru.com/data-security-platform/virtru-collaborate)
    - Manage Private Encryption Keys
      
      Maintain complete sovereignty and governance
      
          - [Virtru Private Keystore 
            
            ](https://www.virtru.com/data-security-platform/virtru-private-keystore)
          - [Google Client Side Encryption (CSE) 
            
            ](https://www.virtru.com/data-security-platform/google-workspace-client-side-encryption)
    - Develop Data Security Solutions
      
      Data-centric security, built on open standards
      
          - [Virtru Data Security Platform 
            
            ](https://www.virtru.com/data-security-platform)
          - [Developer Experience 
            
            ](https://www.virtru.com/data-security-platform/developer-experience)
          - [Platform Integrations 
            
            ](https://www.virtru.com/partners/technology)
- Solutions 
  
    - Compliance
      
          - [CJIS 
            
            ](https://www.virtru.com/compliance/cjis)
          - [CMMC / NIST / DFARS 
            
            ](https://www.virtru.com/compliance/cmmc)
          - [FERPA 
            
            ](https://www.virtru.com/compliance/ferpa)
          - [FTC Safeguards Rule 
            
            ](https://www.virtru.com/compliance/data-encryption-ftc-safeguards-rule)
          - [GDPR 
            
            ](https://www.virtru.com/compliance/gdpr)
          - [HIPAA 
            
            ](https://www.virtru.com/compliance/hipaa-email)
          - [ISO 27001 
            
            ](https://www.virtru.com/compliance/iso-27001)
          - [ITAR 
            
            ](https://www.virtru.com/compliance/itar)
          - [PCI / GLBA / FINRA / SOX 
            
            ](https://www.virtru.com/compliance/financial)
    - Commercial
      
          - [Aerospace 
            
            ](https://www.virtru.com/industry-solutions/aerospace-and-defense/)
          - [Education 
            
            ](https://www.virtru.com/industry-solutions/education/)
          - [Finance 
            
            ](https://www.virtru.com/industry-solutions/financial-services/)
          - [Healthcare 
            
            ](https://www.virtru.com/industry-solutions/healthcare/)
          - [Legal 
            
            ](https://www.virtru.com/industry-solutions/legal)
          - [Technology & Telecom 
            
            ](https://www.virtru.com/industry-solutions/telecom-it-and-software)
          - [Threat Intelligence 
            
            ](https://www.virtru.com/industry-solutions/threat-intelligence)
    - Global Public Sector
      
          - [Federal - Defense 
            
            ](https://www.virtru.com/global-public-sector/defense)
          - [Federal - Intelligence 
            
            ](https://www.virtru.com/global-public-sector/intelligence)
          - [State & Local Government 
            
            ](https://www.virtru.com/industry-solutions/state-local-government)
          - [Systems Integrators 
            
            ](https://www.virtru.com/global-public-sector/systems-integrators)
          - [Mission Partner Environments 
            
            ](https://www.virtru.com/industry-solutions/mission-partner-environments)
- Developers 
  
    - Developers
      
          - [Virtru Data Security Platform The Security Standard that Powers Our Products 
            
            ](https://www.virtru.com/data-security-platform)
          - [Trusted Data Format Secure Collaboration and Policy Enforcement 
            
            ](https://www.virtru.com/data-security-platform/trusted-data-format)
          - [Virtru Developer Experience Build Secure Solutions from the Ground Up 
            
            ](https://www.virtru.com/data-security-platform/developer-experience)
    - Developer Community
      
          - [OpenTDF: Open Source Project Open Standard Now Available on GitHub 
            
            ](https://opentdf.io/)
          - [Technology Partners Building integrations with the Virtru Platform 
            
            ](https://www.virtru.com/partners/technology)
          - [Partner Training Bootcamp Request training on the Virtru Data Security Platform 
            
            ](https://www.virtru.com/data-security-platform/training-request)
- Company 
  
    - About Virtru
      
          - [About Us 
            
            ](https://www.virtru.com/about-us)
          - [Leadership 
            
            ](https://www.virtru.com/leadership/)
          - [Careers & Culture 
            
            ](https://www.virtru.com/careers)
          - [Contact Us 
            
            ](https://www.virtru.com/contact-us)
    - In the News
      
          - [Headlines & Press Releases 
            
            ](https://www.virtru.com/newsroom)
          - [Decrypted Blog 
            
            ](https://www.virtru.com/blog)
          - [Hash It Out Podcast 
            
            ](https://www.virtru.com/hash-it-out)
- Resources 
  
    - Resources
      
          - [Decrypted Blog Tips, Takes, and Expertise 
            
            ](https://www.virtru.com/blog)
          - [Hash It Out Podcast Join us as we talk about cybersecurity 
            
            ](https://www.virtru.com/hash-it-out)
          - [Voice of the Customer Case Studies, Webinars, and Videos 
            
            ](https://www.virtru.com/resources?type=webinar,case-study)
          - [Events & Webinars Upcoming Events, Conferences, and Digital Webinars 
            
            ](https://www.virtru.com/events-and-webinars/)
          - [Resource Library Whitepapers, Guides, and Videos 
            
            ](https://www.virtru.com/resources)
          - [DMV Rising Our annual event bringing together the cyber community in the DMV 
            
            ](https://dmvrising.com/)
          - [Headlines & Press Virtru in the News 
            
            ](https://www.virtru.com/newsroom)
          - [Product Updates The latest on new products, features, and fixes 
            
            ](https://www.virtru.com/products/updates)
          - [Virtru Academy Live Helpful how-to content for admins and end users 
            
            ](https://www.virtru.com/virtru-academy-live)
- [Support](https://support.virtru.com)
- [Pricing](https://www.virtru.com/data-security-platform/pricing-packages)
- Book a Demo
- Search all Virtru content
  
  ![](https://www.virtru.com/hubfs/assets/images/icons/link-arrow-black.svg)

Virtru Data Security Platform

June 20, 2017

# Understanding Encryption and Authentication

![Editorial Team](https://www.virtru.com/hubfs/assets/images/logos/virtru/logomark/blue/virtru_LOGOMARKMASTER_BLUE_FINAL.svg)

By Editorial Team

Share post:

[![Share on Facebook](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-facebook.png?noresize&width=24&name=icon-blog-facebook.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.virtru.com%2Fblog%2Ffile-encryption%2Fauthentication%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-linkedin.png?noresize&width=24&name=icon-blog-linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Ffile-encryption%2Fauthentication%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://www.virtru.com/hs-fs/hubfs/opentdf/assets/images/icons/x-logo.webp?width=24&name=x-logo.webp)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.virtru.com%2Fblog%2Ffile-encryption%2Fauthentication%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Ffile-encryption%2Fauthentication%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Understanding%20Encryption%20and%20Authentication)

## TABLE OF CONTENTS

See Virtru In Action

Book a Demo

Share post:

[![Share on Facebook](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-facebook.png?noresize&width=24&name=icon-blog-facebook.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.virtru.com%2Fblog%2Ffile-encryption%2Fauthentication%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-linkedin.png?noresize&width=24&name=icon-blog-linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Ffile-encryption%2Fauthentication%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://www.virtru.com/hs-fs/hubfs/opentdf/assets/images/icons/x-logo.webp?width=24&name=x-logo.webp)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.virtru.com%2Fblog%2Ffile-encryption%2Fauthentication%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Ffile-encryption%2Fauthentication%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=Understanding%20Encryption%20and%20Authentication)

![Blurred car lights on a city street](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/Zero%20Trust%20Fast%20Z.webp)

Encryption protects data by scrambling it with a randomly generated passcode, called an encryption key. Without the key, third parties will be unable to view your data. However, hackers can attempt to steal access by impersonating an authorized user. Encryption authentication helps protect the key from bad actors.

## IT Authentication Basics

Authentication is the process of determining if a claim is true — usually a claim about someone or something’s identity — using a secret or piece of evidence called a “factor.” When you sign onto an email account, you’re asserting a statement (“I am <Username>”), and proving it with a secret (your password). Authentication is followed by authorization. For example, once your Gmail login is authenticated, Google authorizes you to access your email and [Google Workspace files](https://www.virtru.com/data-security-platform/google-workspace), and those shared with you by other users.

Because secrets can be stolen or guessed, users can use multiple factors to make it harder for a bad actor to gain access. For example, Google Workspace two-factor authentication requires users to input a password and a one-time code, texted to their phone before they can login. Similarly, an organization might require employees to present both an ID card and fingerprint scan to access a sensitive area.

## How Encryption Authentication Works

If you’re protecting a file on a computer that isn’t connected to anything, encrypted authentication is pretty easy. [Encrypt the file](https://www.virtru.com/data-security-platform/file-encryption), keep the key somewhere safe (ideally, protected by a password) and you’ll be secure.

But in cloud applications such as email encryption, authentication is harder. These applications use public-key encryption, which uses two keys: one to encrypt the data, and one to decrypt it. As the name implies, the public key is often publicly available, but the private key has to be kept secret. In [PGP email encryption](https://www.virtru.com/blog/email-encryption/pgp) and similar methods, you obtain the recipient’s public key, and use it to encrypt a message to them. Because they keep their private key confidential, only they can decrypt it.

Attackers can read your data by stealing your private key, but they can also do it by tricking the sender into using the wrong public key with a Man-in-the-Middle (MitM) attack. For example, imagine Sara wants to send you a secret message and Andy wants to steal it. If Andy tricks Sara into using his public key instead of yours, he can decode your message with his private key, then send it on to you, using your real public key. He can even alter it if he wants to, and you’ll be none the wiser.

Encryption authentication prevents these attacks with digital signatures — special codes unique to each party. An authority confirms that the signature and key are authentic. With PGP, the community as a whole is the authority. Users can vouch for each other by signing each other’s keys — either in-person at key signing parties, or using the Web of Trust (WoT). So if you and Sara trust Becky, and Becky has signed both of your public keys, you can trust Sara’s public key and vice versa.

Unfortunately, WoT doesn’t scale well once you start adding extra degrees of separation. For example, let’s say Becky has not signed your key, but has signed Tim’s key. To trust your public key, Sara has to believe that:

1. Becky’s key is authentic.
2. Becky can be trusted to authenticate keys.
3. Tim’s key is authentic.
4. Tim can be trusted to only sign authentic keys.
5. Your key is authentic.

There are all kinds of ways this could fail. Becky could have been tricked into signing the wrong key, Tim could maliciously pass off Andy’s key as yours, or a hacker could have compromised someone’s private key after signing, and so on. All it takes is one person making a bad decision or losing control of their key, and the whole chain collapses.

To make encryption authentication more secure, **SSL/TLS** uses a trustworthy Certificate Authority (CA) to verify each party, and handles encryption key management automatically. When you send an email with TLS, your client creates an encrypted connection with your mail server, and sends your message.

The process is repeated from your server to your recipient’s server, and from their server to their client. The main problem is, you have no way to know if one of these servers has been hacked or is using a compromised version of TLS. Because data is decrypted at each stage of the process, there are multiple opportunities for a MitM attack.

## How Virtru Handles Encryption Authentication

Virtru Encryption authentication uses a trusted CA like PGP, but does not suffer from its weaknesses. When a user sends an encrypted email, the Virtru client on their device encrypts the message using a one-time key, and the key is sent to Virtru’s secure server using an encrypted connection. Meanwhile, the encrypted email is sent by the sender’s email client to recipient’s email server in the normal way.

When the recipient clicks the email, their Virtru client conducts a three-way session with the Virtru server and a 3rd party identity provider such as OAuth or OpenID, which enables the encryption authentication and authorization process. First, the client confirms the recipient is who they claim to be, and checks the email’s access policies to ensure the recipient is still authorized to access it. If the recipient is permitted, the Virtru server securely transfers the key to the recipient’s Virtru client.

This averts the unreliability of PGP-like encryption authentication, because it doesn’t depend on a whole chain of parties. And unlike SSL/TLS, messages aren’t encrypted or decrypted by arbitrary servers on the open Internet, which may be improperly configured. 

![](https://fast.wistia.com/embed/medias/dp6iwms0h8/swatch)

## Virtru Authenticated Encryption and Government Surveillance

Virtru is dedicated to user privacy from government surveillance. We have never disclosed user keys, and are in a strong legal position to resist FISA and other broad surveillance orders if we’re ever asked to in the future.

## Awareness is Key

No tool can replace security awareness. Virtru protects users against attacks and the dangers of unencrypted email, but it doesn’t stop you from reusing passwords, or other unsafe practices that already put you at risk. You should use a strong, unique passwords, and enable two-factor authentication so that a hacker can’t access your account if they manage to gain access to your password.

![Editorial Team](https://www.virtru.com/hubfs/assets/images/logos/virtru/logomark/blue/virtru_LOGOMARKMASTER_BLUE_FINAL.svg)

### Editorial Team

The editorial team consists of Virtru brand experts, content editors, and vetted field authorities. We ensure quality, accuracy, and integrity through robust editorial oversight, review, and optimization of content from trusted sources, including use of generative AI tools.

[View more posts by Editorial Team](https://www.virtru.com/blog/author/editorial-team)

See Virtru In Action

Book a Demo

Sign Up for the Virtru Newsletter

## Dive Deeper

![](https://www.virtru.com/hubfs/assets/images/icons/left-arrow-circle-blue.webp)

[![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20cyera%20oasis/cyera-oasis.webp)

Commentary

July 29, 2026

### The Coin Has Two Sides: What Cyera's Acquisition of Oasis Tells Us About the Future of Security

](https://www.virtru.com/blog/data-centric-security/cyera-oasis) [![](https://www.virtru.com/hubfs/26-Competitor-Blog%20-%20Virtru%20vs%20Box%20copy.webp)

File Encryption

July 28, 2026

### Virtru Collaborate vs. Box: Secure File Sharing for Businesses of Any Size

](https://www.virtru.com/blog/virtru-collaborate-vs-box-enterprise) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20william%20mcborrough%20recap/cmmc-compass-will-mcborrough.webp)

Compliance

July 22, 2026

### The $600,000 Problem: What the CMMC Pause Actually Revealed About the Defense Industrial Base

](https://www.virtru.com/blog/compliance/mcglobaltech-cmmc-compass) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20three%20stories/three-stories.webp)

Zero Trust

July 21, 2026

### Last Week in Critical Infrastructure: Three Stories You Should Read as One

](https://www.virtru.com/blog/data-centric-security/three-stories-converge) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20cmmc%20on%20hold/CMMC-Pause-CUI-Not.webp)

Public Sector

July 14, 2026

### CMMC Phase II Is Officially on Hold. NIST and DFARS aren't.

](https://www.virtru.com/blog/compliance/cmmc-phase-2-on-hold-nist-dfars) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/2026%20Newsletter%20Assets/jk-HIO.png)

Zero Trust

July 10, 2026

### We Asked Kindervag: Why Are So Many Organizations Still Getting Zero Trust Wrong?

](https://www.virtru.com/blog/zero-trust/kindervag-yeske) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20ShareFile%20Takedown/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20Sharefile.jpg)

File Encryption

July 10, 2026

### Looking for a ShareFile Alternative? Here's What Regulated Organizations Need to Know.

](https://www.virtru.com/blog/file-encryption/citrix-progress-sharefile) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20sendsafely%20takedown/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20SendSafely%20(1).jpg)

File Encryption

July 08, 2026

### SendSafely vs. Virtru: Which Secure File Sharing Platform Protects Your Data After Download?

](https://www.virtru.com/blog/file-encryption/sendsafely) [![](https://www.virtru.com/hubfs/assets/images/blog/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20Dropbox.webp)

File Encryption

July 07, 2026

### Dropbox Alternatives for Secure File Sharing: What IT Teams Are Missing

](https://www.virtru.com/blog/dropbox-alternatives-secure-file-sharing) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20alex%20karp/alex-karp.jpg)

Commentary

July 07, 2026

### Alex Karp Is Right About the AI Problem. He's Missing the Solution.

](https://www.virtru.com/blog/zero-trust/alex-karp-palantir-data-sovereignty) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20SACR%20Report/anna-perrone-commentary%20copy.webp)

Email Encryption

June 29, 2026

### The Email Security Report Every CISO Should Read, And the Questions It Should Inspire

](https://www.virtru.com/blog/email-security/sacr-anna-perrone-report-2026)

![](https://www.virtru.com/hubfs/assets/images/icons/right-arrow-circle-blue.webp)

## Book a Demo

## Become a Partner

Contact us to learn more about our partnership opportunities.

## Become a Compliance Champion

Contact us to learn more about our partnership opportunities.

- Products
  
    - [Product Overview](https://www.virtru.com/data-security-platform/product-overview)
    - [Virtru for Google Workspace](https://www.virtru.com/data-security-platform/google-workspace)
    - [Virtru for Microsoft 365](https://www.virtru.com/data-security-platform/microsoft-365)
    - [Data Protection Gateway](https://www.virtru.com/data-security-platform/virtru-data-gateway)
    - [Pricing](https://www.virtru.com/data-security-platform/pricing-packages)
- Compliance
  
    - [HIPAA](https://www.virtru.com/compliance/hipaa-email)
    - [ITAR](https://www.virtru.com/compliance/itar)
    - [GDPR](https://www.virtru.com/compliance/gdpr)
    - [CJIS](https://www.virtru.com/compliance/cjis)
    - [NIST CUI](https://www.virtru.com/compliance/nist)
    - [CCPA](https://www.virtru.com/compliance/ccpa)
    - [FERPA](https://www.virtru.com/compliance/ferpa)
    - [CMMC](https://www.virtru.com/compliance/cmmc)
- Industries
  
    - [Healthcare](https://www.virtru.com/industry-solutions/healthcare/)
    - [Education](https://www.virtru.com/industry-solutions/education/)
    - [IT & Software](https://www.virtru.com/industry-solutions/telecom-it-and-software)
    - [Federal Government](https://www.virtru.com/global-public-sector)
    - [State & Local Government](https://www.virtru.com/industry-solutions/state-local-government)
    - [Manufacturing](https://www.virtru.com/industry-solutions/manufacturing)
    - [Financial Services](https://www.virtru.com/industry-solutions/financial-services/)
- Platform
  
    - [Email Encryption](https://www.virtru.com/data-security-platform/email-encryption)
    - [File Encryption](https://www.virtru.com/data-security-platform/file-encryption)
    - [Platform Architecture](https://www.virtru.com/data-security-platform/saas)
    - [Trusted Data Format](https://www.virtru.com/data-security-platform/trusted-data-format)
    - [Secure Reader](https://www.virtru.com/data-security-platform/secure-collaboration)
    - [Audit and Control](https://www.virtru.com/data-security-platform/audit-and-control)
    - [Encryption Key Management](https://www.virtru.com/data-security-platform/virtru-private-keystore)
- Resources
  
    - [About Virtru](https://www.virtru.com/about-us)
    - [Blog](https://www.virtru.com/blog)
    - [Careers](https://www.virtru.com/careers)
    - [Leadership & Investors](https://www.virtru.com/leadership/)
    - [News & Press](https://www.virtru.com/press)
    - [Partners](https://www.virtru.com/partners/)
    - [Intellectual Property](https://www.virtru.com/intellectual-property/)
    - [Security Certifications](https://www.virtru.com/data-security-platform/compliance)
    - Resource Library
- Contact Us
  
    - [Contact Us](https://www.virtru.com/contact-us)
    - [Support](https://support.virtru.com/)
    - [Sales](https://www.virtru.com/contact-us)
    - [Become a Partner](https://www.virtru.com/blog/file-encryption/authentication#footer)
    - [Report a Vulnerability](https://www.virtru.com/responsible-disclosure/)

[![Virtur Logo](https://www.virtru.com/hubfs/assets/images/logos/virtru/white/tagline/virtru_TAGLINE_LOGOMASTER_WHITE-01.svg)](https://www.virtru.com/)

Subscribe to Our Newsletter

[![X Icon](https://www.virtru.com/hubfs/assets/images/icons/x-white.svg)](https://x.com/virtruprivacy) [![LinkedIn Icon](https://www.virtru.com/hubfs/assets/images/icons/linkedin-white.svg)](https://www.linkedin.com/company/virtru) [![Youtube Icon](https://www.virtru.com/hubfs/assets/images/icons/youtube-white.svg)](https://www.youtube.com/@Virtru)

© 2026 Virtru · 1801 Pennsylvania Ave NW, 5th Floor, Washington, DC 20006

[Terms](https://www.virtru.com/terms-of-service) & [Privacy](https://www.virtru.com/privacy-policy) | [Cookie Policy](https://www.virtru.com/cookie-policy) & [Preferences ![Pivacy Options logo](https://oag.ca.gov/sites/all/files/agweb/images/privacy/privacyoptions.svg)](https://www.virtru.com/blog/file-encryption/authentication#footer) | [Do Not Sell My Personal Information](https://www.virtru.com/blog/file-encryption/authentication#footer) | [Virtru Trust Center](https://trust.virtru.com/?_ga=2.215796503.1200908638.1747067694-1753239414.1744322796&_gac=1.175361302.1744660048.EAIaIQobChMIppzvranJjAMVN0pHAR3F7gNdEAAYAiAAEgL4qfD_BwE)

```json
{
  "@context" : "https://schema.org",
  "@id" : "https://www.virtru.com/#organization",
  "@type" : "Organization",
  "description" : "Virtru is a data security platform delivering end-to-end encryption and access control for email, files and apps. Trusted by enterprise and defense leaders",
  "logo" : "https://www.virtru.com/hubfs/assets/images/logos/virtru/blue/virtru_LOGOMASTER_BLUE_HighRes.png",
  "name" : "Virtru",
  "sameAs" : [ "https://www.facebook.com/virtruprivacy", "https://www.x.com/virtruprivacy", "https://www.linkedin.com/company/virtru", "https://www.reddit.com/user/virtru_privacy", "https://www.youtube.com/@Virtru" ],
  "url" : "https://www.virtru.com/"
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Editorial Team",
    "url" : "https://www.virtru.com/blog/author/editorial-team"
  },
  "dateModified" : "2025-02-21T20:28:16.773Z",
  "datePublished" : "2017-06-20T16:29:27.000Z",
  "headline" : "Understanding Encryption and Authentication",
  "image" : [ "https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/Zero%20Trust%20Fast%20Z.webp" ],
  "mainEntityOfPage" : {
    "@id" : "https://www.virtru.com/blog/file-encryption/authentication",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "url" : "https://www.virtru.com/hubfs/virtru2022/images/Virtru%20Logo%20Blue%20(2).svg"
    },
    "name" : "Virtru"
  }
}
```

```json
{
  "@context" : "https://schema.org",
  "@type" : "ItemList",
  "itemListElement" : [ {
    "@type" : "SiteNavigationElement",
    "name" : "Products",
    "position" : 1
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Solutions",
    "position" : 2
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Developers",
    "position" : 3
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Company",
    "position" : 4
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Resources",
    "position" : 5
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Support",
    "position" : 6,
    "url" : "https://support.virtru.com"
  }, {
    "@type" : "SiteNavigationElement",
    "name" : "Pricing",
    "position" : 7
  } ],
  "name" : "Main Navigation"
}
```