Back
Technology

Google Expands Gmail End-to-End Encryption to Mobile Apps for Enterprise Users

Generated on: Last updated: 1 sources
View source

Google Expands Gmail End-to-End Encryption to Mobile Apps for Enterprise

Google has announced the expansion of its Gmail end-to-end encryption feature to Android and iOS mobile applications for enterprise customers. The update allows users to read and compose encrypted emails directly within the Gmail app, with encrypted messages delivered as regular emails to recipients.

Feature Availability and Requirements

The feature is available for client-side encryption (CSE) users with specific Google Workspace licenses. Access requires an Enterprise Plus license along with either the Assured Controls or Assured Controls Plus add-on. Organization administrators must enable the Android and iOS clients within the CSE admin interface via the Admin Console.

To send an end-to-end encrypted message, a user must activate the "Additional encryption" option by clicking the lock icon when composing an email.

Technical Implementation and Access

The encryption is powered by client-side encryption technology. This system allows Google Workspace organizations to use encryption keys they control, which are stored outside of Google's infrastructure.

  • Messages and their attachments are encrypted on the user's device before being transmitted to Google's servers.
  • Google states this approach helps organizations meet various regulatory requirements, including those related to data sovereignty, HIPAA, and export controls.
  • According to Google, the company and third parties cannot read the encrypted data.

Encrypted messages are delivered directly to the inbox of recipients who use the Gmail app. Recipients who do not use the Gmail mobile app can access and read encrypted messages through a web browser on any device, regardless of their email service provider.

Development Timeline

The rollout of client-side encryption for Gmail has occurred in several phases:

  • December 2022: Gmail CSE was introduced on the web as a beta test.
  • February 2023: The feature reached general availability for Google Workspace Enterprise Plus, Education Plus, and Education Standard customers.
  • April 2025: Google began a beta rollout of a new end-to-end encryption model for Gmail enterprise users.
  • October 2024/2025: Google announced that Gmail enterprise users could send end-to-end encrypted emails to recipients on any email service or platform. Sources differ on whether this announcement occurred in October 2024 or October 2025.