OpenPGP
For end-to-end encryption, generate or import an OpenPGP key in webmail settings after login.
Encrypted message bodies are protected from the mail server, but sender, recipient, subject, time, and message size can still be visible to mail systems.
WKD
Public keys can be published through WKD so other clients can find them automatically.