en	[[!meta title="Migrating OpenPGP configuration from Enigmail in Thunderbird 78"]]

en	[[!toc levels=2]]

en	Since Tails 4.13 (November 2020), *Thunderbird* 78 replaces the *Enigmail* extension with built-in support for OpenPGP encryption.

en	If you used *Enigmail* before Tails 4.13, follow the instructions below to migrate from *Enigmail* to *Thunderbird* 78. Tails does not include *Enigmail* 2.2, the last version of the extension, which automates this migration.

en	See also the official [OpenPGP in Thunderbird - HOWTO and FAQ](https://support.mozilla.org/kb/openpgp-thunderbird-howto-and-faq).

en	Migrate your private key

en	Export your private key using

en	From the desktop:

en	Choose **Applications&nbsp;▸ Accessories&nbsp;▸ Kleopatra**.

en	Select the private key that you want to migrate to *Thunderbird*.

en	Choose **File&nbsp;▸ Backup Secret Keys…** and save this private key to your *Home* directory.

en	Close *Kleopatra*.

en	Import your private key in

en	In *Thunderbird*:

en	Choose **[[!img lib/open-menu.png alt="Menu" class="symbolic" link="no"]]&nbsp;▸ Account Settings**.

en	In the left pane, identify the account that corresponds to the private key that you want to import and choose **End-to-End Encryption**.

en	In the right pane, click the **Add Key…** button.

en	In the **Add a Personal OpenPGP Key** dialog, choose **Import an existing OpenPGP Key** and click **Continue**.

en	Click the **Select File to Import…** button and choose the private key that your exported from *Kleopatra*.

en	In the next dialog, make sure that your private key is listed and that the option **Treat this key as a Personal Key** is selected.

en	Click **Continue**, enter the passphrase for your private key (if any), and click **Continue** again.

en	Your private key should now be listed in the **End-to-End Encryption** settings of your account.

en	Select your private key to enable OpenPGP encryption for this account.

en	Set up a Primary Password

en	In *Thunderbird* 78, OpenPGP private keys are not protected by a passphrase. That's why we recommend that you set up a Primary Password.

en	With a Primary Password, your private key is encrypted in your *Thunderbird* profile and is only unlocked while *Thunderbird* is running. If your *Thunderbird* profile is stored in your Persistent Storage, then your private key is encrypted twice: once by *Thunderbird* in your profile and a second time by the encryption of the Persistent Storage.

en	Choose **[[!img lib/open-menu.png alt="Menu" class="symbolic" link="no"]]&nbsp;▸ Settings**.

en	Choose **Privacy & Security**.

en	In the **Passwords** section, select the option **Use a Primary Password**.

en	In the **Change Primary Password** dialog, enter your Primary Password and click **Ok**.

en	Migrate the public keys of your contacts

en	Export the public keys using

en	Select the public keys that you want to migrate to *Thunderbird*.

en	You can use **Shift+click** and **Ctrl+click** to select multiple keys.

en	Choose **File&nbsp;▸ Export…** and save these public keys to your *Home* directory.

en	Import the public keys in

en	Choose **[[!img lib/open-menu.png alt="Menu" class="symbolic" link="no"]]&nbsp;▸ Tools&nbsp;▸ OpenPGP Key Manager**.

en	In the **OpenPGP Key Manager**, choose **File&nbsp;▸ Import Public Key(s) From File.**

en	Choose the file containing the public keys that you exported from *Kleopatra*.

en	If *Thunderbird* fails to import many public keys at once, split these public keys into several smaller files. *Thunderbird* can only import public key files of less than 5 MB.

en	Mark the public keys as accepted

en	By default, new public keys are not marked as "*accepted*" by *Thunderbird* and you cannot encrypt emails to "unaccepted" keys.

en	To mark a public key as accepted:

en	Double-click on the public key that you want to mark as accepted.

en	In the **Your Acceptance** tab of the **Key Properties** dialog, select the option that applies to how much you verified the public key.

en	Turn off the GnuPG feature of your Persistent Storage

en	If you only use OpenPGP in *Thunderbird*, you can turn off the GnuPG feature of the Persistent Storage:

en	Choose **Applications&nbsp;▸ Persistent Storage**.

en	Turn off the GnuPG feature.