This option is used to increase security for recipients who do not have modern email platforms.
How Paubox works is when a message gets sent we check if the recipient's email address supports TLS encryption. If the recipient does support TLS the message gets delivered with no action needed on the recipient's side. By default all replies are encrypted as well. This process is end-to-end encrypted.
There are rare occurrences (about 5% of the time) where a recipient does not support TLS. When this occurs there are 3 possible outcomes, which you can choose in the Paubox dashboard under Customer Overview Settings (option is called Message Authentication). You can enable one of the 3 options for non-TLS recipients:
1. Secure Link: This will provide a link for the recipient to click on and they can view message in a secure portal. This is the default option.
2. Secure Message Two-factor Authentication: The recipient must enter a code to view the message.
3. Require Secure Message Login: The recipient must login with a username and password to view the message.
All three options are secure and HIPAA compliant. Secure Link is the easiest to implement and use. Most Paubox customers use Secure Link.