What this does
An emailed pay stub is a PDF. You can protect it with a password, so a person who gets the email by mistake cannot open it without knowing the rule.
How it works
- In Settings › Stub template, tick Password-protect emailed PDFs.
- Pick the rule: Date of birth, DDMMYYYY, Date of birth, YYYYMMDD or Employee number and birth year.
- The PDF is encrypted with AES-256.
- The email tells the employee how the password is formed. It never says the password.
What it does not do
- A birth date is easy to guess for someone who knows the employee. The protection is meant for a stub sent to the wrong address, not for a determined attacker.
- An employee with no date of birth (or no employee number) is not emailed. There is no weaker fallback.
- The SIN is never used as a password.
What is recorded
Each email send is recorded in the audit log, without the password.
Good to know
- Stubs that you print or save to a folder are not password protected by this setting.
- The stub shows a masked SIN.
- Under a trial licence, the PDF carries the trial mark and the email subject starts "[TRIAL]".