It needs to be pretty strong, but I want it to be free. I suppose with good enough server-side encryption, it would work sending it through email, but what do you suggest?