Google adds E2E Gmail for mobiles
Google has extended end‑to‑end Gmail encryption to Android and iOS for enterprise customers, but the feature is gated behind a high‑tier Workspace plan. The rollout targets organisations with strict compliance needs—it's only available to Enterprise Plus customers who subscribe to Assured Controls—so stronger privacy is being sold as a premium add‑on rather than a default. That reinforces a broader trend where advanced governance features come with higher price tags for regulated buyers. (csoonline.com)
Google’s Gmail app on Android and iPhone can now read and write encrypted work email without sending people to a separate portal or extra app, but Google shipped it only for organizations already using Gmail client-side encryption. (workspaceupdates.googleblog.com) Client-side encryption means the customer, not Google, controls the keys that lock and unlock the message, like keeping the office safe combination in your own building instead of handing it to the landlord. Google says Gmail already encrypts mail in transit and at rest by default, and client-side encryption adds a second layer for sensitive mail. (support.google.com) Google has been building this system in pieces for years. It added mobile support for Gmail client-side encryption in September 2023, then let administrators make encrypted mode the default on mobile in February 2024, and in April 2025 it launched a simpler Gmail end-to-end encryption flow for business users on the web. (workspaceupdates.googleblog.com 1) (workspaceupdates.googleblog.com 2) (csoonline.com) The new April 2026 step is about where people can use it. Before this update, the protected workflow was much easier on a laptop than on a phone, which is a problem for sales teams, executives, and healthcare staff who answer mail away from a desk. (workspaceupdates.googleblog.com) Google is not giving this to every Workspace customer. Its admin documentation says turning on client-side encryption requires the Assured Controls or Assured Controls Plus add-on, and setup pages list Enterprise Plus among the supported editions. (knowledge.workspace.google.com) (support.google.com) That pricing tells you who this is for. Assured Controls is Google’s compliance bundle for organizations dealing with rules on data location, access controls, and audit needs, so the target buyer is a bank, hospital, government supplier, or big multinational, not a five-person startup. (cloud.google.com) (workspaceupdates.googleblog.com) Google also draws a line between its product and the kind of end-to-end encryption people know from Signal or WhatsApp. In Google’s own admin help, true end-to-end encryption means keys live on user devices and administrators cannot control them, while client-side encryption keeps company control and auditability in the loop. (support.google.com) So this is less a consumer privacy move than an enterprise control move. Google is making secure mobile email easier for regulated customers, while keeping the strongest governance features inside its most expensive Workspace tier and add-on stack. (csoonline.com) (knowledge.workspace.google.com)
