- <b>--decrypt</b>
- Decrypt any MIME encrypted parts found in the selected con‐
- tent (ie. "multipart/encrypted" parts). Status of the decryp‐
- tion will be reported (currently only supported with --for‐
- mat=json and --format=sexp) and on successful decryption the
- multipart/encrypted part will be replaced by the decrypted
- content.
+ <b>--decrypt=(false|auto|true)</b>
+ If <b>true</b>, decrypt any MIME encrypted parts found in the selected con‐
+ tent (i.e., "multipart/encrypted" parts). Status of the decryption
+ will be reported (currently only supported with <b>--format=json</b> and
+ <b>--format=sexp</b>), and on successful decryption the multipart/encrypted
+ part will be replaced by the decrypted content.
+
+ If <b>auto</b>, and a session key is already known for the message, then it
+ will be decrypted, but notmuch will not try to access the user's
+ secret keys.
+
+ Use <b>false</b> to avoid even automatic decryption.
+
+ Non-automatic decryption expects a functioning <b>gpg-agent</b>(1) to pro‐
+ vide any needed credentials. Without one, the decryption will likely
+ fail.