Verified senders

Know an email is really from them

A hijacked mailbox can send a perfect-looking invoice. It can’t sign one with a key it doesn’t have. When a contact signs with Fromensics and you’ve confirmed their key, their emails show as verified.

What you’ll see

Verified

It’s really Sterling Cooper.

Signed with the key you confirmed on 12 March. Nothing in it changed after it was signed.

To
GB82 •••• 5432Covered by their signature · Same account as 6 signed emails from Sterling Cooper

A signature proves who sent it, not that the payment is due. If it’s unexpected, call them.

When you see it: the email is signed with a key you confirmed, and nothing it covers changed after it was signed.

Verified

You signed this.

When you see it: you open an email you signed yourself, in Sent or in a reply thread.

In Gmail and Outlook the answer also shows under the sender, and in the inbox if trust badges are on:

Verified · Sterling CooperYou signed this

Trusted senders

Trusted senders are the people you pay or deal with often. Add them from a report that shows Nothing looks off, or from the More menu. Fromensics then warns you when someone imitates their address. Find the list in Settings → Trusted senders. It stays in this browser.

A trusted sender who also signs their emails becomes a verified sender once you’ve confirmed their key.

In Settings, Share my verification link copies a link to your contact card on fromensics.com. “People you email add it once. After that, your signed emails show as verified.” When someone opens it with Fromensics installed, they get a button to add you. The key stays pending until they confirm your four words.

Questions

Is Verified the same as safe?

No. A signature proves who sent the email and that it wasn’t changed. It doesn’t prove the payment is due. If it’s unexpected, call them.

What if their key changes?

Fromensics shows Don’t pay. This email was changed. and asks you to call them. A new key has to be confirmed again. See changed after signing.

Sign your emailsA quiet line that proves an email came from you.Confirm a new keyFour words, one phone call, and their emails show as verified.Changed after signingWhat “Don’t pay. This email was changed.” means.