{"id":740,"date":"2026-02-09T11:37:22","date_gmt":"2026-02-09T10:37:22","guid":{"rendered":"https:\/\/keypact.com\/?page_id=740"},"modified":"2026-02-17T22:16:22","modified_gmt":"2026-02-17T21:16:22","slug":"hoe-werkt-keypact","status":"publish","type":"page","link":"https:\/\/keypact.com\/en\/hoe-werkt-keypact\/","title":{"rendered":"How does KeyPact work?"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

How does KeyPact work?<\/h1>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u00a0<\/span><\/p>

How does KeyPact work?<\/b><\/h2>

KeyPact is a platform for controlled, end-to-end encrypted communication and file exchange. It consists of four components: <\/span>KeyPact Mail<\/b>, <\/span>File Explorer<\/b>, and integrations with <\/span>Google Mail<\/b> and <\/span>Microsoft Outlook<\/b>.<\/span><\/p>

KeyPact Mail<\/b><\/h3>

KeyPact Mail enables end-to-end encrypted email between KeyPact users. This communication takes place entirely within the KeyPact environment and does not go through the public internet.<\/span><\/p>

Every user has access to:<\/span><\/p>

  • a <\/span>cryptographically generated email address<\/b> (bijv. <\/span>(e.g. 109f+2b9819a3de9ca889bc80b3b080d620b0@keypactmail.com)<\/span>)<\/span><\/li>
  • a <\/span>KeyPact ID<\/b>: a unique cryptographic identity that allows users to explicitly add and accept each other.<\/span><\/li><\/ul>

    Only mutually accepted users can send messages or share files. Emails from outside can be received at the KeyPact address, but internal communication remains strictly shielded.<\/span><\/p>

    File Explorer<\/b><\/h3>

    In the KeyPact File Explorer, all data is encrypted with <\/span>AES-256-GCM<\/b>Files can be viewed and edited directly in the browser, without having to download local copies. This limits unnecessary data duplication and reduces the risk of data leaks, while the platform remains fully device-independent.<\/span><\/p>

    Folders can additionally be secured with a PIN code. Shared files can be revoked at any time.<\/span><\/p>

    When sending or receiving messages via KeyPact Mail, attachments are automatically and structuredly saved in the appropriate folders, such as inbox and outbox.<\/span><\/p>

    Gmail & Microsoft Outlook Integration<\/b><\/h3>

    Users can one or multiple <\/span>Gmail and Microsoft Outlook\/Office 365 accounts<\/b> Linking to KeyPact via OAuth 2.0. This makes the KeyPact protocol available for end-to-end encrypted email communication within these existing mail environments.<\/span><\/p>

    KeyPact exclusively uses <\/span>Native APIs<\/b> from Google and Microsoft and does not store any emails or metadata within the KeyPact environment. Encrypted messages remain visible in the regular Gmail or Outlook mailbox, but can only be decrypted via KeyPact.<\/span><\/p>

    Cryptography and Future-Proofing<\/b><\/h2>

    KeyPact is designed from the ground up as a cryptographic platform, not as an email or file system with \u201cextra encryption\u201d added on. Security is not an addition, but the foundation.<\/span><\/p>

    End-to-end encryptie als uitgangspunt<\/b><\/h3>

    All communication within KeyPact is end-to-end encrypted. This means that only the involved end users have access to the content. Servers, administrators and external parties cannot decrypt messages and files, neither technically nor legally.<\/span><\/p>

    For symmetric encryption KeyPact uses <\/span>AES-256-GCM<\/b>a proven and widely accepted standard that provides both confidentiality and integrity protection. This encryption is applied to email messages, attachments, and files.<\/span><\/p>

    Forward Secrecy and the Double Ratchet Mechanism<\/b><\/h3>

    KeyPact makes use of <\/span>forward secrecy<\/b> in combinatie met het <\/span>double-ratchet-mechanisme<\/b>, vergelijkbaar met moderne secure messaging-protocollen. Dit betekent dat:<\/span><\/p>

    • elke communicatiecontinu\u00efteit werkt met voortdurend vernieuwde sessiesleutels;<\/span><\/li>
    • het compromitteren van \u00e9\u00e9n sleutel geen toegang geeft tot eerdere of toekomstige communicatie;<\/span><\/li>
    • langdurige observatie of latere sleutelonthulling geen historisch datalek oplevert.<\/span><\/li><\/ul>

      Hierdoor blijft communicatie beschermd, zelfs wanneer een individueel apparaat of account op enig moment wordt gecompromitteerd.<\/span><\/p>

      Post-quantum sleuteluitwisseling<\/b><\/h3>

      Voor de sleuteluitwisseling past KeyPact <\/span>ML-KEM-1024<\/b> toe, a post-quantum cryptographic algorithm that is resistant to attacks from future quantum computers.<\/span><\/p>

      This is a fundamental distinction from classical solutions that rely solely on RSA or elliptic curve, which are known to be vulnerable to quantum attacks in the long term. By combining ML-KEM-1024 with existing, robust symmetric encryption, a <\/span>Hybrid and future-proof cryptographic architecture<\/b>.<\/span><\/p>

      What this means in concrete terms<\/b><\/h3>

      For organisations, this means that:<\/span><\/p>

      • confidential communication remains protected in the long term;<\/span><\/li>
      • compliance and policies are not dependent on cloud providers or foreign jurisdictions;<\/span><\/li>
      • encryption is not an optional feature, but structurally enforces that data is only accessible to authorised parties.<\/span><\/li><\/ul>

        KeyPact therefore offers not a temporary security layer, but a cryptographic foundation designed for long-term use in critical and sensitive environments.<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

        Hoe werkt KeyPact \u00a0 Hoe werkt KeyPact KeyPact is een platform voor gecontroleerde, end-to-end versleutelde communicatie en bestandsuitwisseling. Het bestaat uit vier onderdelen: KeyPact Mail, File Explorer, en integraties met Google Mail en Microsoft Outlook. KeyPact Mail KeyPact Mail maakt end-to-end versleutelde e-mail mogelijk tussen KeyPact-gebruikers. Deze communicatie verloopt volledig binnen de KeyPact-omgeving en gaat […]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"slim_seo":{"title":"Hoe werkt KeyPact \u2013 Beveiligde Post-Quantum Data- & E-mailbescherming | KeyPact","description":"Ontdek hoe KeyPact werkt: end-to-end beveiliging met post-quantum cryptografie, forward secrecy en on-premise controle over databeveiliging voor e-mail, bestanden en communicatie."},"footnotes":""},"class_list":["post-740","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/keypact.com\/en\/wp-json\/wp\/v2\/pages\/740","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/keypact.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/keypact.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/keypact.com\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/keypact.com\/en\/wp-json\/wp\/v2\/comments?post=740"}],"version-history":[{"count":5,"href":"https:\/\/keypact.com\/en\/wp-json\/wp\/v2\/pages\/740\/revisions"}],"predecessor-version":[{"id":1074,"href":"https:\/\/keypact.com\/en\/wp-json\/wp\/v2\/pages\/740\/revisions\/1074"}],"wp:attachment":[{"href":"https:\/\/keypact.com\/en\/wp-json\/wp\/v2\/media?parent=740"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}