A method for accessing content of an encrypted data item by a terminal device operating in a digital environment, comprising the steps of: a) before said data item is being accessed by said terminal device, a.1) intercepting said data item; a.2) determining whether said data item is encrypted; a.3) if found to be encrypted, modifying or replacing the wrapper of said data item by embedding a URL having a unique identifier and a message into the wrapper of said data item; b) in response to an attempt to access the modified data item, b.1) if a client application supports an encryption engine, allowing the client application to natively consume the data from said modified data item while ignoring its wrapper; b.2) if said client application does not support said encryption engine, displaying said message and said URL on said terminal device; c) in response to browsing said URL by a browser or a web application client, on said terminal device: c.1) authenticating the credentials of the user of said terminal device; c.2) locating, by a web server, said modified data item using said credentials and said unique identifier; c.3) retrieving and decrypting the modified item; d) converting the decrypted modified data item to a format capable of being consumed by said browser or said web application client; and e) if said user has a permission, allowing said user to at least view said data item by rendering it to said browser or to said web application client in said terminal device. a) before said data item is being accessed by said terminal device, a.1) intercepting said data item; a.2) determining whether said data item is encrypted; a.3) if found to be encrypted, modifying or replacing the wrapper of said data item by embedding a URL having a unique identifier and a message into the wrapper of said data item; a.1) intercepting said data item; a.2) determining whether said data item is encrypted; a.3) if found to be encrypted, modifying or replacing the wrapper of said data item by embedding a URL having a unique identifier and a message into the wrapper of said data item; b) in response to an attempt to access the modified data item, b.1) if a client application supports an encryption engine, allowing the client application to natively consume the data from said modified data item while ignoring its wrapper; b.2) if said client application does not support said encryption engine, displaying said message and said URL on said terminal device; b.1) if a client application supports an encryption engine, allowing the client application to natively consume the data from said modified data item while ignoring its wrapper; b.2) if said client application does not support said encryption engine, displaying said message and said URL on said terminal device; c) in response to browsing said URL by a browser or a web application client, on said terminal device: c.1) authenticating the credentials of the user of said terminal device; c.2) locating, by a web server, said modified data item using said credentials and said unique identifier; c.3) retrieving and decrypting the modified item; c.1) authenticating the credentials of the user of said terminal device; c.2) locating, by a web server, said modified data item using said credentials and said unique identifier; c.3) retrieving and decrypting the modified item; d) converting the decrypted modified data item to a format capable of being consumed by said browser or said web application client; and e) if said user has a permission, allowing said user to at least view said data item by rendering it to said browser or to said web application client in said terminal device. <EOS>