Google adds E2E encryption to Gmail for iOS and Android enterprise users

Source: Engadget

Overview

Google has announced that end‑to‑end encryption (E2EE) for Gmail on Android and iOS is now rolling out for its enterprise users. Emails that require E2EE in Workspace can be composed and read within the Gmail app, so eligible users won’t need additional apps or portals.

The new feature expands Google’s client‑side encryption (CSE) offering, a little more than a year after E2EE was introduced to Gmail on the web. According to a Google blog post, any encrypted message sent to a recipient who uses the Gmail app will appear in their inbox as any email thread would. If the recipient doesn’t have the app, they can still read and reply to the email securely in their browser, regardless of their email address.

How it works

• An admin must first enable Android and iOS clients in the CSE admin interface, which is available in the Admin Console.
• When composing an email, click the lock icon and select additional encryption before sending.
• Attachments can be added as normal.

Availability

• E2EE is available immediately in the Rapid Release and Scheduled Release domains.
• Enterprise users need the Assured Controls or Assured Controls Plus add‑on, which provides extra security and compliance tools for organizations handling sensitive data.

Scope

Google states the functionality “combines the highest level of privacy and data encryption with a user‑friendly experience for all users, enabling simple encrypted email for all customers from small businesses to enterprises and public sector.” In practice, “all users” refers to Enterprise Plus members; personal Gmail accounts do not currently have access to this highest level of privacy and data protection.