CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

Gmail mobile client-side encryption expands to Android and iOS with native E2EE support

First reported
Last updated
2 unique sources, 2 articles

Summary

Hide ▲

Google has enabled native end-to-end encryption (E2EE) for Gmail on Android and iOS mobile devices, allowing users with Enterprise Plus licenses and Assured Controls add-ons to compose, read, and send encrypted emails directly within the Gmail app without additional tools. Encrypted messages are delivered as regular emails to recipients, regardless of their email service or device, and are accessible via a web browser if the recipient lacks the Gmail app. This implementation leverages client-side encryption (CSE), where encryption keys are controlled by the organization and stored externally, ensuring Google and third parties cannot access message content, aligning with compliance requirements such as HIPAA and data sovereignty mandates. The feature is now available immediately to eligible users after administrator configuration via the Admin Console CSE interface. Administrators must enable the feature for their organizations, and users can then compose encrypted messages by selecting the "Additional encryption" option via the lock icon in the Gmail mobile app. The rollout applies to Google Workspace Enterprise Plus customers with Assured Controls or Assured Controls Plus add-ons, supporting compliance with regulatory requirements while maintaining a user-friendly experience across recipient platforms.

Timeline

  1. 10.04.2026 13:44 2 articles · 3d ago

    Gmail E2EE expands to mobile with native client-side encryption support

    Gmail E2EE on Android and iOS mobile apps is now immediately available to eligible users (Enterprise Plus with Assured Controls or Assured Controls Plus) after admin configuration via the Admin Console CSE interface. Users can compose encrypted messages by selecting the "Additional encryption" option via the lock icon in the Gmail app. Encrypted messages remain accessible in the Gmail app or any web browser for recipients without the app, aligning with compliance mandates such as HIPAA and data sovereignty.

    Show sources
    Open in new tab

Information Snippets

Similar Happenings

Google Workspace E2EE for Gmail Extended to External Recipients

Google has expanded its end-to-end encryption (E2EE) feature for Gmail to support encrypted emails to any email service. This update allows Gmail enterprise users to send encrypted emails to recipients using any email platform. The new feature leverages client-side encryption (CSE) to ensure that data is encrypted on the client before being sent to Google's cloud storage. Recipients receive a link to view and reply to the encrypted message using a guest Google Workspace account. The rollout began in April 2025 as a beta test and is expected to reach general availability over the next two weeks.

Open in new tab