Gmail users can now send an encrypted message to any recipient, even if they use an email service other than Gmail. However, it’s only available to Workspace users with an Enterprise Plus subscription and the Assured Controls or Assured Controls Plus add-on, where admins have enabled the tool.
After rolling out end-to-end encryption (E2EE) for desktop Workspace users just under a fortnight ago, Google is now rolling out the feature for mobile users on iOS and Android. But you’ll need to be part of an organization with an Enterprise Plus subscription, as well as the Assured Controls or Assured Controls Plus add-on, to use the tool.
End-to-end encryption (E2EE) is a method of secure communication where only the communicating users can read the messages, including, in this case, Google itself. It’s a key selling point of services like WhatsApp, Signal, and iMessage.
Google users can now compose and read these E2EE messages natively within the Gmail app on Android and iOS, with no need to download extra apps or use separate mail portals. In addition, Gmail users can now send an encrypted message to any recipient, regardless of the recipient’s email provider—for example, even a competing service like Microsoft Outlook.
Google hasn’t commented on whether a consumer version of the feature could emerge for non-Workspace subscribers.
The feature isn’t available automatically. Your Workspace admin will need to enable the Android and iOS clients via the CSE admin interface in order for users to access it. Once enabled, you’ll need to click the lock icon and then toggle on additional encryption to add E2EE to any message.
Google’s FAQ also notes a few limitations: only the text of the email itself will be encrypted, not the subject line, potentially adding another risk factor for less tech-savvy users. In addition, the Workspace “Super Admin” will have the ability to control access to the encryption keys used for exchanging emails, meaning that Google’s E2EE potentially won’t allow employees to hide email communication from their companies.
If you’re not part of an eligible organization, or you want to use E2EE email in your private life, the service is also offered by privacy-focused hosted email services like Proton Mail and Tuta Mail.
