e-mail Encryption Procedures Using File Compression Software
In order to protect potentially sensitive agency information, the IRS Office of Safeguards requests agencies to adhere to the following when transmitting electronic documentation:
- Compress files in .zip or .zipx formats.
- Encrypt the compressed file using Advanced Encryption Standard (AES).
- Use a strong 256-bit encryption key string.
- Ensure a strong password or pass phrase is generated to encrypt the file.
- Communicate the password or pass phrase with the Safeguards Office through a SEPARATE e-mail or via a telephone call to your IRS contact person. Do NOT provide the password or pass phrase in the same e-mail containing the encrypted attachment.
Refer to your specific file compression software user guide for instructions on how to compress and encrypt files. Known compatible products with IRS include, but are not limited to WinZip and SecureZip.
Please remember, while the attachment is encrypted, the content of the e-mail message will not be encrypted so it is important that any sensitive information be contained in the attachment (encrypted document).