Getting started — Optional but useful

None of these are required for the first encrypt/decrypt test. Turn them on when you start using the program every day.

Settings → Security

  • Idle lock — lock the workstation after a set number of minutes with no keyboard or mouse in this program. The lock screen is not a full Windows lock.
  • Explorer — add Encrypt / Decrypt to the right-click menu for this user. If Encrypt3 is running but locked, Explorer asks you to sign in.

Settings → Key store

  • Note the .ngw3 path.
  • Change location only when you intend to move the vault; the program copies the file and remembers the new path.

Settings → Software update & license

  • Check Authorize checking for an update every 30 days if you want a notice after sign-in when that interval has passed.
  • Check for update runs the same check immediately (needs Internet).
  • License / About — machine code for a per-PC license; one replacement per purchase.

Keys and the grid

  • Set Verified on keys whose fingerprint you have checked.
  • Use Groups so the grid filter can show Financial, Technical, Sales, and similar labels (group names are not case-sensitive).
  • QR on a key shows the public key for comparison.
  • Backup the vault after you have keys you care about; test a restore before you need it.

Automation and lookup

  • Watch folder — drop files in an inbox folder; they encrypt to the key you select (files only).
  • Keyserver / WKD lookup — find public keys on the network (the program checks for Internet first).
  • Bulk import — many keys at once; use dry-run first.
  • Expiration dashboard — see what is expiring, including keys with no name (Key ID hex) and revoked keys.

Help

  • Help opens the help file in the program folder.
  • Support opens the help desk site.

When these are set the way you want, daily work is: select recipients, File / Folder / Text Task, and keep a current vault backup.