Google brings E2EE to mobile

Google has added end-to-end encrypted Gmail to Android and iPhone apps, letting eligible Workspace users read and send protected email inside the mobile app. (workspaceupdates.googleblog.com) End-to-end encryption means the message is scrambled so only people with the right key can open it. In Google Workspace, that key is controlled through client-side encryption, which keeps Google’s servers from decrypting the content. (support.google.com) Google said on April 9, 2026 that mobile support is available now for both Rapid Release and Scheduled Release domains. The feature is limited to Enterprise Plus customers with the Assured Controls or Assured Controls Plus add-on. (workspaceupdates.googleblog.com) The mobile change removes a big gap in how encrypted Gmail worked away from a laptop. Google said users can now compose and read these messages natively in the Gmail app on Android and iPhone without extra apps or web portals. (workspaceupdates.googleblog.com) Google has been building this system in steps. It expanded Gmail client-side encryption to Android and iPhone in September 2023, then let administrators make client-side encryption the default mode on web and mobile in February 2024. (workspaceupdates.googleblog.com 1) (workspaceupdates.googleblog.com 2) The setup is still aimed at organizations with compliance rules, not ordinary consumer Gmail accounts. Google’s admin documentation says companies must connect Workspace to an external key service and an identity provider before users can encrypt or open protected content. (support.google.com) Google also said users with a Gmail end-to-end encryption license can send encrypted mail to any recipient, even outside Gmail. If the recipient has the Gmail app, the message appears as a normal thread; if not, Google says they can read and reply in a browser. (workspaceupdates.googleblog.com) For companies that already turned on client-side encryption, the update means the phone is no longer the weak link in the workflow. Administrators still have to enable the Android and iPhone clients before employees can use it. (workspaceupdates.googleblog.com)