If you opt to send an encrypted message outside of Tutanota, first you set a password, then it sends a link to a special inbox where the user can use the password to log in and reply. The message's contents don't ever get sent in the clear, and only their encrypted contents get stored on Tutanota's servers.