I am not an expert, but I posted here a while back that I tried to recreate it with the password given and could not. Also, using the SMTP id as your password seems undependable because it could be changed. What I mean is, when I encrypt the files and set the password, why would I choose a password that I cannot be sure won't be changed by a service provider or from recipient to recipient? Maybe they have dedicated email channels or something and it was only going to one person?