Gmail adds mobile E2EE

Google has started rolling out end-to-end encrypted Gmail on Android and iPhone, but only for a narrow slice of paid Workspace customers. (workspace.google.com) (workspaceupdates.googleblog.com) Google said on April 9 that eligible users can now read and compose those messages inside the Gmail app on Android and iOS, without separate mail apps or web portals. The company’s update applies to Gmail client-side encryption users, which is Google’s term for email encrypted with keys the customer controls. (workspaceupdates.googleblog.com) (knowledge.workspace.google.com) The mobile feature is gated behind Google Workspace Enterprise Plus and the Assured Controls or Assured Controls Plus add-on, and administrators have to turn it on. Google’s help pages say the broader “send encrypted email to anyone” option is still in beta for Gmail users with Assured Controls. (pcmag.com) (knowledge.workspace.google.com) (support.google.com) End-to-end encryption means the message is scrambled so the service provider cannot read it in plain text; in Google’s version, the encryption and decryption happen with customer-held keys rather than Google-held keys. That is different from the standard transport encryption most email already uses while messages move between servers. (knowledge.workspace.google.com) (csoonline.com) Google first announced in April 2025 that it planned to bring easier Gmail end-to-end encryption to business customers, including messages sent to people outside Gmail. The mobile rollout extends that system to phones a year later, which matters for companies whose staff handle regulated email away from desktops. (workspace.google.com) (workspaceupdates.googleblog.com) Google says recipients outside Gmail can open encrypted messages through a restricted version of Gmail in a guest Google Workspace account, or through a one-time passcode if an administrator allows that route. That design is meant to avoid the certificate setup used by Secure/Multipurpose Internet Mail Extensions, the older enterprise email encryption standard. (support.google.com) (workspace.google.com) The catch is price and packaging. CSO Online reported that customers need the Premium Workspace Enterprise Plus tier with Assured Controls, which keeps the feature focused on large organizations with compliance and sovereignty requirements rather than ordinary Gmail users. (csoonline.com) (knowledge.workspace.google.com) That leaves Gmail with native encrypted email on mobile at the same moment Google is pitching Workspace as a platform for governments, healthcare groups, finance teams, and other regulated customers. For everyone else, Gmail on phones still works the usual way unless an employer pays for the add-on and switches the controls on. (workspace.google.com) (workspaceupdates.googleblog.com)