Create and send a report on demand

Step 1: Log in to the XQ Dashboard and click Communications.

Step 2: On the Communications page, click Generate Report.

Step 3: Under Generate Report Now, choose one of the following time periods:

• One Week: The report emailed to you will cover your team's activity for the last week.
• One Month: The report emailed to you will cover your team's activity for the last month.
• One Quarter: The report emailed to you will cover your team's activity for the last quarter.

Step 4: Click Email Report. The report is emailed to the team member who generated the report.

Schedule reports

Step 1: Log in to the XQ Dashboard and click Communications.

Step 2: On the Communications page, click Generate Report.

Step 3: Click the Schedule Report toggle to enable the setting.

Step 4: Choose one of the following frequencies for the scheduled report:

• Weekly: The report emailed to you will cover your team's activity for the last week.
• Monthly: The report emailed to you will cover your team's activity for the last month.
• Quarterly: The report emailed to you will cover your team's activity for the last quarter.

Step 5: Set the recipients for the scheduled reports. The textbox is pre-filled with all team members.

• Remove a recipient: Click the X symbol on the recipient's email address.
• Add a recipient: Type the recipient's email address in the textbox and press Enter on your keyboard. Recipients must be members of your team.

Step 6: Click Save Settings.

With this setting enabled, reports are sent on a recurring basis. You can disable this setting by clicking the Schedule Report toggle.

For tips on interpreting reports, see Understanding Reports.

Step 1: Open the encrypted email from your inbox.

Step 2: If there is an attached .xqf file, download the file directly onto your computer.

Step 3: Click Unlock Message.

Step 4: You will be redirected to the XQ Login page. Enter the email address that the message was sent to, then click Send me a magic link to receive login access to the XQ Dashboard.

Step 5: You will receive an email from XQ with the subject 'Magic link for Personal Dashboard'. Click the Sign-In button in the email to open the XQ Dashboard.

Step 5: After signing in with a magic link, you will immediately be able to view your decrypted message. If an .xqf file was included in the email, click Decyrpt File from the navigation bar.

Step 6: Drag and drop or browse for your file to upload the file attachment.

Step 7: Click DOWNLOAD DECRYPTED FILE to download the file to your computer.

• Quantum server
• Subscription server 
• Validation server

Each is important to the XQ security model and these three servers work in concert to ensure that only authorized devices and users can encrypt and decrypt the data within the scope of the expiration policy that is set for the data. These servers can be hosted in any cloud service or on a locally hosted server in containers either in shared or dedicated instances. 

The Quantum server delivers quantum-generated entropy to the edge devices. This quantum random number can be used as a key or can be used to seed keys that are generated on the device. Using a quantum random number substantially reduces the risk of the key being broken.  The subscription server stores identities for token authorization and the validation server stores keys. It is important to keep the identity and key store separate so that not even the host of the servers can match data with identity and tokens to enable decryption. This ensures that only authorized identities and devices can decrypt the data. 

A further benefit of decoupling the services as XQ does and storing them in the cloud is that even in the case that a device is stolen, the data can (1) not be exfiltrated from the device alone, (2) the authorization can be revoked remotely by an authorized user, and (3) the policy can geo-restrict access to the keys, so data intercepted in flight is safe from unauthorized users. 

Optionally, the cloud deployment can be managed with the XQ dashboard, which is also cloud deployable. This dashboard allows an administrator to manage identities and revoke access to data. These functions can also be done via an API.

Are your email links suddenly in this pattern: https://nam01.safelinks.protection.outlook.com?

If so, then Yep, you've got a case of Safelinks.

Safelinks " is a feature in Office 365 Advanced Threat Protection that provides URL scanning and rewriting of inbound email messages in mail flow, and time-of-click verification of URLs and links in email messages and other locations." So basically, Microsoft scan your emails and replaces the links with links to their servers which get redirected. You can learn more about all things Safelinks here.

Unfortunately, sometimes these new links don't play well with others. This is the case with XQ. XQ users need to turn Safelinks off. Fortunately, that is pretty straight forward.

1. You can turn them off by signing in to https://outlook.live.com.
2. Then select Settings > Premium > Security.
3. There's a toggle under Advanced Security that you can use to turn off Safelinks.
4. Note that turning off Safelinks will only affect future messages you receive.

And you're set! It may take a bit to take effect.

If you are looking to set the Safelinks policy for your entire organization, you can find instructions here.

Keep using XQ and let us know if you have further trouble with Safeljnks.

XQ Dashboard

How to Log In to the XQ Dashboard

Creating and Managing Teams

How to Add Team Members

How to Send an Encrypted Message from the XQ Dashboard

How to Encrypt a File

How to Decrypt a File

G Suite, Chrome, and Gmail

How to install the G Suite Add-On

G Suite Documentation landing page

How to Install the Google Chrome Extension

Google Chrome Documentation landing page

Outlook

How to Install the XQ Secure Outlook Add-In

Outlook Documentation landing page

Secure Chat

Understanding Secure Chat

How to Use Secure Chat

Secure Forms

Understanding Secure Forms

Secure Forms landing page

Step 1: Login to your Google Admin console (at admin.google.com) and select “Apps”.

Step 2: Click “G Suite Marketplace apps”.

Step 3: Click “Add app to Domain Install list”.

Step 4: Search G Suite Marketplace for XQ.

Step 5: Install app to your domain.

Step 6: The app is added to domain.

Step 7: The XQ app will appear in all domain accounts.

Drop down menu: log out and link to user profile.

Notifications

Account notifications

Set team wide policies for encrypted data.

1. Applications
   1. Applications that the team supports.
2. Files
   1. Do you allow encrypted files?
3. Expiry
   1. What are the expiry options at the end clients for sent messages
4. Key Retention
   1. How long should the organization's keys be kept on the XQ servers before being archived to the client.

Client App Tracking

Links to client apps which the dashboard will track.

Settings

Maintain Organization info and customize the  XQ emails that the organization supports.

Own your data by exporting and owning your keys.

1. Date Selection
   1. Date range for output
2. Output Selection
   1. Filter Role
   2. Output format
3. User filter
   1. Input user contact or ID to filter output

Unlocking With Exported Keys

Decrypt messages and files with exported keys. Messages and files may be expired. Search filters search decrypted messages for  matching messages.

1. Form
   1. Add individual files or zips
   2. Add CSV of Keys from export
2. Search
   1. AND / OR modifier for comma delimited search
   2. Input comma delimited list of search terms

Recover

List successful and failed messages available for download

1. Form
   1. Clicking on each message will take the user to message preview.
   2. Download will download a zip of all selected files.

Previewing Decrypted Messages

Preview of decrypted message before downloading

 Monitor lets you see real time threat detection on XQ messages sent by your team. 

1. Analytics
   1. Messages
      1. Messages indicates the number of encrypted messages sent or received by your team.
   2. Verified
      1. Verified indicates the total number of encrypted messages sent between verified team members.
   3. Warnings
      1. Warnings indicate the number of encrypted messages which have suspicious behavior associated with them.
   4. Alerts
      1. Alerts are the number of encrypted messages which highly indicate they may have been compromised.
2. Filters
3. Activities
   1. Chart Legend
      1. Verified

1. Green dots indicate verified messages between confirmed team members.

1. External
   1. Empty blue circle dots indicate messages between confirmed team members and external parties.
2. Success
   1. Indicates a successful encryption activity.
3. Warnings
   1. Indicates a suspect activity such as too many decrypt attempts.
4. Alerts
   1. Indicates a reliable threat.

1. Items
   1. Click into any activity report to learn more and manage.
2. Activities Nav
   1. Export and format

Monitoring an Item

From monitor each item can be accessed for detailed inspection.

1. Section Menu
   1. Resolve
      1. Only available if item has been assigned to you
   2. Revoke
      1. Remove end client’s ability to decrypt this message associated with this item key
   3. Export Key
      1. Download the key for this activity in CSV format.
2. Item
   1. Item specifics
3. Team members
   1. All team members provisioned for this message
4. Assign
   1. Assign this event to a team member. They will receive a notification.
5. Access Key Activity
   1. History of all activities for the same encryption key as this item

Build a network of trusted members! You can invite co-workers, vendors and customers to your team.

1. Team Provisioning
   1. Team Display
      1. List  of each team member including

1. Name
2. Login date
3. Contact
4. Role
5. Status
6. Session count
7.  ID

1. Team Nav
   1. Export
   2. Fields
   3. Format
   4. Refresh
   5. Order

1. Section Nav
   1. Sort by role
   2. Add single user
   3. Import list

Creating New User

1. Form
   1. Select Role
      1. Admin

1. Receives Dashboard login information

1. Other roles
   1. Receive confirmation email to join
2. Telephone optional

Import List of Users

1. Form
   1. Drop CSV of select file
2. Template
   1. Download template
      1. Format for correct import

Team Member Profile

1. Profile Form
   1. Profile Image
      1. Modal Form
   2. Forgot Password?
      1. Reset Email sent to user
   3. Update
      1. Model confirms for password update
   4. Disable
      1. Modal Prompt
      2. De-provisions team member for Team messages
2. Activity Panel
   1. Shows all data encryption activity for this user

Invitation Confirmation Email

1. Team invitation
   1. Received by users after being added to a team
   2. User’s team actions are tracked after they click confirm
   3. User’s may join many teams

Monitor

The Monitor section contains tools for managing communication activities and team members.

• Communications: This tool provides a record of all communications and has built-in communication management features. See How to monitor communication for more information. 
• Activity: This tool is a running log of all security events for your communications. See Activity Overview for more information.
• Team: This tool is for team member management. To get started, see How to Create a New Team.

Product Hub

The Product section contains the XQ Gateway, Secure Forms, and Customer Support Chat products. 

• XQ Gateway: The XQ Gateway product lets users configure trusted devices for automatic data encryption/decryption before transmission to its final destination. A single gateway can handle multiple TCP/UDP routes, devices, and team configurations.
• Secure Forms: The Secure Forms product allows you to create forms for your website and collect secure, compliant data. To install Secure Forms or schedule a demo, see the Secure Forms product page.
• Customer Support Chat: The Customer Support Chat product allows you to create a customer support application and embed the application in your website. To get started, see How to Create a Customer Support Application.

Secure Messaging

The Secure Messaging section has tools to encrypt messages and encrypt/decrypt files. 

• Encrypt Message: This tool allows you to send encrypted messages. See How to Send an Encrypted Message from the XQ Dashboard for more information.
• Encrypt File: This tool allows you to encrypt files. See How to Encrypt a File Using the XQ Dashboard for more information.
• Decrypt File: This tool allows you to decrypt files. See How to decrypt an encrypted file for more information. 

Audit Tools

The Audit Tools section has tools for exporting message keys and unlocking archived communications. 

• Export: This tool allows you to export message encryption keys belonging to team members. See Audit Tools for more information.
• Unlock: This tool allows you to unlock archived communications using encryption keys. See Audit Tools for more information.

Developers

The Developers section has tools for creating applications, monitoring event logs, and managing trusted IP ranges. This section also has built-in developer documentation.

• Applications: This tool allows you to create your own applications.
• Event Logs: This tool is a detailed ledger for all XQ Dashboard activities. 
• Trusted Ranges: This tool contains data on IP ranges that are secure.  
• Documentation: Access built-in Developer Documentation to help developers get started. 

Step 1: To send messages while logged into XQ, you first need to be signed into the website. Enter an email that you wish to utilize for authentication purposes.

Step 2: You (the sender) will receive an email with your authentication code. Enter the code in the prompt on the XQ website.

Step 3: After authentication, enter your message into the text box and click the arrow.

Step 4: Skip this step unless you wish to define an authorized recipient (see “Defining an Authorized Recipient” for more information).

Step 5: The message will be encrypted via a secure stream of random numbers. 

Step 6: Click the email button below the textbox to open the message in your email client. Alternatively, you can copy and paste the message.

Step 7: The recipient will receive a link to the XQ website to decrypt the message.

Step 8: The message is decrypted on the XQ website.

Step 1: Navigate to the XQ website and enter your message into the text box and click “encrypt.”

Step 2: The message will be encrypted via a secure stream of random numbers. 

Step 3: Click the email button below the textbox to open the message in your email client. Alternatively, you can copy and paste the message.

Step 4: The recipient will receive a link to the XQ website to decrypt the message.

Step 5: The message will be decrypted on the XQ website.

Step 1: Click the three dots and then click “XQ Secure Outlook” and the “Encrypt File.”

Step 2: The XQ dialogue box will appear next to the message. Drag a file into the encrypt box or click “browse” and select the file.

Step 3: The encrypted file will be attached to your email. Click the three dots, followed by “XQ Secure Outlook” and “encrypt file” to send your encrypted file.

Opening Encrypted Files in Outlook

Step 1: Encrypted XQ files will appear at the top of the message. 

Step 2: Click the XQ logo next to the reply button and then click “decrypt file.” Note: you do not need to follow the link to the XQ website if you have the Outlook add-in installed.

Step 3: The XQ dialogue box will appear next to the email. Download the encrypted file to your device and drag (or click the “browse” button) in the “decrypt” box. The decrypted file will now be downloaded to your device.

Step 1: To begin, initiate an XQ email in Gmail. Remember, when you click the XQ logo slider in the left corner of the draft, the message will turn blue.

Step 2: Click the lock in the upper right corner of the lock and then select the file you want to encrypt. Encrypted files will have a “.xqf” suffix. You’re all set to send your encrypted file!

Opening Encrypted Files in Gmail

Step 1: The email will appear as a standard XQ Gmail message with the encrypted file attached.

Step 2: Save the file to your device. Click the XQ logo in the folder menu and the click “decrypt files.”

Step 3: A pop-up window will appear. Drag the encrypted file into the box or click “browse” and select the file. The decrypted file will be downloaded to your device!

Step 1: Click the three dots in the gray bar. Click “XQ Secure Outlook” and then “encryption settings.”

Step 2: Advanced options are now available.

The advanced options include:

• Ability to change the quantum key 
• Add a message password. Remember, the recipient will need to know the password to decrypt the message
• Change the message’s expiration date 
• Switch the encryption algorithm between Advanced Encryption Standard (AES) and a One Time Pad (OTP)

In message settings you can:

• Change the message expiration date
• Switch encryption between a One Time Pad (OTP) and Advanced Encryption Standard (AES)
• Enter a message password
• Edit the quantum key

Sending Encrypted Messages

Step 1: Start a new Outlook email. 

Step 2: Type your message into the body of the message and enter the recipient in the address bar.

Step 3: To send, click the three dots to the right of send in the grey shaded bar. Click “XQ Secure Outlook” and then “secure send.” 

Step 4: The message will appear as below when it’s received. If they have XQ for Gmail, the message will automatically be decrypted. If not, they’ll have to click “unlock.”

Opening Encrypted Message in Outlook 

Step 1: Messages in Outlook will appear as such

Step 2: Click the XQ icon next to the reply button and then click “read with XQ.”

Step 3: A bar with the decrypted message will open next to the email. 

Sending Encrypted Messages

Step 1: Press “compose” as you normally would to begin.

Step 2: Slide the XQ icon in the top left corner of the message to turn on encryption. The top bar will change from gray to blue. 

Step 3: You’re all set! Enter your message as you normally would and click “secure send.” 

Opening Encrypted Messages in Gmail

The message will be automatically encrypted if the recipient has the XQ G Suite add-in. Recipients without the add-in will have to click “unlock message” and will be navigated to the XQ website. 

Note: The sender may have set a message password. You will be prompted to input the password when you open the encrypted email (click the lock under the reply button). The sender must share the password with you to enable the message to be opened.

Step 1: To install XQ for Outlook click here. Once the window opens, click “get it now” to continue. 

Step 2: Click “continue” on the pop-up.

Step 3: You’ll navigate to Outlook. Click “add” on the pop-up.

Step 4: A window will inform you that installation has been completed. It has a brief tutorial explaining how to use XQ for Outlook. XQ is now enabled!

Step 1: Click here to navigate to the marketplace. Once the window opens, click the install button.

Step 2: Click continue to proceed. 

Step 3: You’ll navigate to this screen. Click allow to give XQ permissions to work in Gmail.

Step 4: Click next to continue. 

Step 5: You’ll need to confirm your XQ account to begin sending encrypted messages. Follow the link to finish set-up.

Step 6: The XQ will now be integrated into G Suite. Click the XQ logo to access encryption functionality.

Step 1: Click here to navigate to the store. Click “Add to Chrome” to begin installing.

Step 2: Click the “add extension” button to continue.

Step 3: The XQ extension will be added and will appear at the top right of the screen next to the address bar. You may need to click the puzzle piece to access it if you have several extensions.

Step 4: Click the XQ icon to create an encrypted message.

Short Answer

• Instant mode is when you encrypt an XQ message without a recipient. So anyone that has the message can open it if they have XQ and the messages hasn't expired yet.
• If you have already added recipients when you encrypt they will be the only people who can read the message.

To understand what instant mode is. Let me lay out the levels of security on an XQ message.

1) Encryption

• Every XQ message is encrypted using quantum entropy for a high degree of security. (Quantum Entropy in this case means an extraordinarily random number.)

2) Expiration

• XQ messages have an expiration date after which they can't be read. You can set when they expire when you send the message.

3) Recipients Added

• When you add recipients and then send the message those messages can only be read by the recipients.
• A forwarded XQ Message can't be opened by the new recipient
• This happens automatically in XQ Slack. Only members of the channel that have been enabled with XQ can read the messages.

4) Additional Password

• Feeling extra jumpy about who might get your message? Add a private password that only you know.
• You'll have to send this password to the recipient for them to open it. We recommend by way of pigeon. :)

You are on your way to a safe internet.

Please let us know if you have other questions!

  Want Key Control? As part of your organizations policies, do you need to have control of the encryption keys used for your messages? XQ Pro and XQ Enterprise have the ability to give you export key control or even have direct ownership. Give us a shout if you'd like to discuss these options at support@xqmsg.com.