Gmail mobile E2EE rolls out

End-to-end encryption is a lock that only the sender and recipient can open. Google said on April 9 it has added that option inside the Gmail app on Android and iPhone for Gmail client-side encryption users. (workspaceupdates.googleblog.com) The change lets eligible Google Workspace users compose and read protected messages directly in the Gmail mobile app. Google said users no longer need a separate app or a web portal to handle those messages on phones. (workspaceupdates.googleblog.com) Google’s standard Gmail protection uses Transport Layer Security, which is like sealing a letter while it travels between mailrooms. Client-side encryption adds a second lock by encrypting the message before it reaches Google’s servers, with keys the organization controls instead of Google. (support.google.com 1) (support.google.com 2) That setup is aimed at companies and agencies that handle regulated or sensitive data and need tighter control over who can decrypt mail. Google says client-side encryption is available for supported Google Workspace editions and is designed to help with sovereignty, privacy, and compliance requirements. (workspace.google.com) (knowledge.workspace.google.com) This is not Gmail end-to-end encryption for every consumer inbox. Google’s help pages and admin guides describe it as a managed Google Workspace feature that organizations must turn on and configure. (support.google.com) (knowledge.workspace.google.com) Google has been building this system in stages. It expanded client-side encryption to Gmail and Calendar in February 2023, added mobile support in September 2023, and let administrators make encrypted mode the default on mobile in February 2024. (workspace.google.com) (workspaceupdates.googleblog.com 1) (workspaceupdates.googleblog.com 2) Google also said in March 2025 that Gmail end-to-end encryption would expand so enterprise users could send protected messages to any email inbox, not just Gmail or Google Workspace accounts. That broader push reduced the certificate swapping and custom software that older secure email systems often required. (workspace.google.com) The mobile rollout closes a gap for workers who already had encrypted Gmail on the web but still had to leave the native app on phones. Google’s pitch is simple: sensitive email can now stay inside Gmail on mobile, with the organization holding the keys. (workspaceupdates.googleblog.com)