How to Install and Set up the XQ Add-in from Outlook on the Web

The XQ Outlook Enterprise add-in allows you to encrypt messages and attachments directly from your Outlook account.

---

Install the Add-in

1. Open the following URL in a browser tab:
   https://o365.xqmsg.com/manifest.xml
   In the browser click File and Save Page As to save an .XML file that you’ll upload later.
2. Log in to your Outlook account using Outlook on the web.
3. Open any message in your inbox and click the three-dots icon. In the menu that opens, click Get Add-ins.

Alternatively, or if you are unable to find the options above, navigate to one of the links below to go directly to the next step.
https://outlook.office.com/mail/inclientstore

4. In the pop-up window, click My add-ins. Scroll down and click Add a custom add-in. Select Add from File… from the drop-down menu.

5. Select the .XML file you previously saved.

6. Click Install on the Warning pop-up window. XQ never stores or transfers your data, so you can be confident that it is always safe and secure.

   You will see the add-in under the Custom Add-ins section.

---

Configure Settings

1. Open any message in your inbox and click the XQ logo. Then click Settings.

2. The XQ Outlook Enterprise will open on the right side. Click Get Started, then Login. A browser tab opens with the XQ sign-in page.

3. Sign in with Microsoft, Google, or your email address. If you enter your email address, open the email from XQ and click the link in it to continue.

4. If you belong to more than one XQ team, choose the team to sign in to.

5. If your team admin requires sign-in through your organization’s identity provider, sign in there when asked. See How can I require users to sign-in with SSO?

6. Close the tab and go back to Outlook. You’re now signed in.

7. Open the settings menu by clicking the XQ logo inside an email, then Settings.

Note

Offloading: long messages, messages with images in the body and messages with long signatures are delivered by offloading. The encrypted message is stored in your Microsoft 365 environment and the recipient retrieves it from there. For any enterprise deployment, we strongly recommend that an admin sets up offloading to SharePoint. Use the OneDrive setting below only if your organization is not able to set up SharePoint offloading.

Available settings

• Message expiration – Choose how long recipients can open the message. Your admin sets the default, and can stop you from changing it. See Security settings.

• Viewable By All XQ Users – Choose who can decrypt the message. It’s encrypted with either option. Viewable By All XQ Users: anyone who is signed in to XQ can decrypt it, including people it’s forwarded to. Click the setting to change it to Viewable By Authenticated Users: only you and the people named in the To, CC or BCC fields can decrypt it, after signing in to XQ. See Security settings.

• Use OTP Encryption – By clicking this setting you can change it to Use AES-256 GCM Encryption if needed.

• Never Offload Messages – Use this only if your organization is not able to set up SharePoint offloading. It stores long messages, messages with images in the body and messages with long signatures in your own OneDrive, and sends the recipient a code to retrieve the encrypted message. Only addressed recipients can decrypt messages stored this way.

  To offload messages to your OneDrive, click Never Offload Messages, select Offload Messages To OneDrive, click Connect Account, then Allow and Continue, and sign in to your Microsoft OneDrive account.

• To disable this setting, select Never Offload Messages.
• You can see the connected One Drive account along with one new option in the settings menu.
  • Offload Long Messages Only – When enabled, this setting offload only long messages to OneDrive. Messages with images or long signatures will not offload to OneDrive if you choose to enable this setting.
• Always Confirm Insecure Send – When checked, you’ll get a pop-up box in the middle of the screen when you send a message asking if you want to send the message with or without encryption. When unchecked, it will send messages without encryption (unless there’s a policy that captures some of the content).
• Automatically Encrypt Messages – When checked, this setting automatically encrypts all messages sent via Outlook.
• Dark Mode – When checked, this setting changes the appearance of the add-in to Dark Mode.

Make sure to click Save after changing the settings to ensure your add-in settings are updated.

Now you’re ready to learn how to send a secure email.