Google is making it easier for businesses to send encrypted emails without the need for special software or encryption certificates. The company has announced a new encryption model for Gmail that simplifies the process, allowing enterprise users to send encrypted messages with just a few clicks.
This new feature, which will roll out in beta starting today, will first be available to Google enterprise users who send emails within the same organisation. Google has confirmed that it will expand to messages sent to any Gmail inbox in the coming weeks and extend to emails sent to third-party providers by the end of the year.
How the new encryption works
Currently, Gmail uses Secure/Multipurpose Internet Mail Extensions (S/MIME) for encryption, which requires both the sender and recipient to have S/MIME configured. This process can be complicated, involving multiple steps before emails can be securely exchanged.
With the new system, sending an encrypted email is much easier. Users can activate “additional encryption” directly from the email draft window. If the recipient does not use Gmail or does not have S/MIME set up, they will receive a link to access the message through a guest Google Workspace account. There, they can securely view and reply to the email using a restricted version of Gmail. For those who already have S/MIME configured, Gmail will continue using the existing encryption process. Emails sent between Gmail business and personal accounts will automatically decrypt in the recipient’s inbox.
What this means for security
While this new encryption system improves security beyond Gmail’s default Transport Layer Security (TLS) encryption, it is not technically end-to-end encryption (E2EE), despite Google referring to it as such. The updated feature uses client-side encryption, meaning encryption keys remain under the control of workspace administrators. According to Google’s help page, this allows administrators to revoke access and monitor encrypted files when necessary.
By simplifying encryption, Google makes secure email communication more accessible for businesses. The new feature eliminates the need for complicated setups and ensures encrypted emails reach a wider range of inboxes. With broader availability planned in the coming months, Gmail’s new encryption system could become a standard for secure business communication.
