Article Details
Scrape Timestamp (UTC): 2025-10-03 11:19:05.567
Original Article Text
Click to Toggle View
Gmail business users can now send encrypted emails to anyone. Google says that Gmail enterprise users can now send end-to-end encrypted emails to people who use any email service or platform. To send an end-to-end encrypted email, Gmail users have to turn on the "Additional encription" option when writing the message, which ensures that the email will be automatically decrypted when the recipient is a Google Workspace subscriber. If the recipients are not Gmail users, they will receive a link to sign in and view the email in a restricted version of Gmail. After they click the link, the recipients can view and reply to the encrypted message using a guest Google Workspace account. "Recipients will receive a notification and can easily access the encrypted message via a guest account, ensuring secure communication without the hassle of exchanging keys or using custom software," the company said on Thursday. "This capability, requiring minimal efforts for both IT teams and end users, abstracts away the traditional IT complexity and substandard user experiences of existing solutions, while preserving enhanced data sovereignty, privacy, and security controls." The company started rolling out this new end-to-end encryption (E2EE) model in a beta test for Gmail enterprise users in April 2025. The feature is expected to roll out to all users with an Enterprise Plus subscription and the Assured Controls add-on and reach general availability over the next two weeks. Gmail's new end-to-end encryption (E2EE) capability is powered by the client-side encryption (CSE) technical control, which enables Google Workspace organizations to use encryption keys stored outside Google's servers and under their control to protect sensitive documents and emails. This ensures that the transmitted data is encrypted on the client before being sent to Google's cloud storage, helping meet regulatory requirements, such as data sovereignty, HIPAA, and export controls, by making the sent data unreadable to Google and third-party entities. Gmail CSE was introduced in Gmail on the web as a beta test in December 2022, following an initial rollout to Google Drive, Google Docs, Sheets, Slides, Google Meet, and Google Calendar (also in beta). The feature reached general availability for Google Workspace Enterprise Plus, Education Plus, and Education Standard customers in February 2023. The Security Validation Event of the Year: The Picus BAS Summit Join the Breach and Attack Simulation Summit and experience the future of security validation. Hear from top experts and see how AI-powered BAS is transforming breach and attack simulation. Don't miss the event that will shape the future of your security strategy
Daily Brief Summary
Google has introduced end-to-end encryption for Gmail enterprise users, allowing secure email communication across different email platforms without complex key exchanges.
The feature, initially beta-tested in April 2025, is now rolling out to all Enterprise Plus subscribers with the Assured Controls add-on, expected to be fully available in two weeks.
Gmail's encryption utilizes client-side encryption (CSE), enabling organizations to manage encryption keys outside Google's servers, enhancing data privacy and regulatory compliance.
Non-Gmail recipients can access encrypted emails via a guest Google Workspace account, ensuring secure communication without additional software requirements.
This development aims to simplify IT processes while maintaining robust data sovereignty, privacy, and security controls, addressing regulatory needs like HIPAA and data export controls.
The CSE feature was previously introduced in other Google Workspace services, such as Google Drive and Google Docs, and reached general availability for enterprise customers in early 2023.
By encrypting data on the client-side before transmission, Google ensures that sensitive information remains unreadable to its servers and third parties, bolstering security measures for business communications.