CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Gmail mobile client-side encryption expands to Android and iOS with native E2EE support

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

Google has enabled native end-to-end encryption (E2EE) for Gmail on Android and iOS mobile devices, allowing users with Enterprise Plus licenses and Assured Controls add-ons to compose, read, and send encrypted emails directly within the Gmail app without additional tools. Encrypted messages are delivered as regular emails to recipients, regardless of their email service or device, and are accessible via a web browser if the recipient lacks the Gmail app. This implementation leverages client-side encryption (CSE), where encryption keys are controlled by the organization and stored externally, ensuring Google and third parties cannot access message content, aligning with compliance requirements such as HIPAA and data sovereignty mandates.

Timeline

  1. 10.04.2026 13:44 1 articles · 2h ago

    Gmail E2EE expands to mobile with native client-side encryption support

    Gmail now supports native end-to-end encryption (E2EE) on Android and iOS mobile apps for Enterprise Plus users with Assured Controls add-ons. Encrypted messages are delivered as standard emails and accessible via the Gmail app or any web browser. The feature uses client-side encryption (CSE) with external key management to meet regulatory compliance requirements such as HIPAA and data sovereignty.

    Show sources
    Open in new tab

Information Snippets

  • Gmail E2EE is now available natively on Android and iOS Gmail mobile apps for users with Enterprise Plus licenses and Assured Controls or Assured Controls Plus add-ons after admin configuration.

    First reported: 10.04.2026 13:44
    1 source, 1 article
    Show sources

  • Encrypted messages are delivered as standard emails to recipient inboxes, visible in the Gmail mobile app or any web browser if the recipient does not use the Gmail app.

    First reported: 10.04.2026 13:44
    1 source, 1 article
    Show sources

  • To send an E2EE message, users must enable the "Additional encryption" option via the Lock icon when composing an email in the Gmail mobile app.

    First reported: 10.04.2026 13:44
    1 source, 1 article
    Show sources

  • Gmail’s E2EE relies on client-side encryption (CSE), where encryption keys are managed by the organization and stored outside Google’s servers, preventing Google or third parties from accessing message content.

    First reported: 10.04.2026 13:44
    1 source, 1 article
    Show sources

  • The feature supports compliance with regulatory requirements such as HIPAA, data sovereignty, and export controls by ensuring messages and attachments are encrypted client-side before transmission.

    First reported: 10.04.2026 13:44
    1 source, 1 article
    Show sources