Google Expands Gmail Client Encryption to More Users

Google is rolling out client-side encryption for all users of some Workspace plans, which is a very welcome addition to security.

Google says client-side encryption (CSE) is now available to many more Gmail users than it was first included in Drive, Docs, Slides, Sheets and Meet last year and Calendar a few weeks ago. Mountain View launched the CSE open beta for Gmail and Calendar late last year, but now all companies with a Google Workspace Enterprise Plus, Education Plus, or Education Standard plan can turn on this privacy protection feature. Please note that this feature is not yet available on Workspace plans for individuals or Google Accounts.

Google is rolling out client-side encryption for all users of some Workspace plans.

While Workspace “encrypts data on machine and in transit with secure cryptographic libraries,”CSE gives organizations full control over their encryption keys. “Starting today, users can send and receive emails or create events with internal colleagues and third-party participants, knowing that their sensitive data (including images and attachments) is encrypted before reaching Google’s servers,” the giant writes in a blog post.

Workspace administrators must enable the CSE, which is not enabled by default. Once this is done at your organization level, you can add NGN to any message in Gmail by clicking the padlock icon to the right of the To field and activating the Advanced Encryption option. The email compose window will turn blue and you can read “New Encrypted Message”. In Calendar, you can click the shield icon next to the event name to add “additional encryption”to the description, attachments, and Google Meet invocation.

A very nice addition to safety

Encrypting Drive files and other calendar events in this way is certainly a welcome addition, but CSE protections are probably the most effective in Gmail. Organizations may be more inclined to send outbound emails rather than share files or calendar invitations with third parties. Anyway, Google explains that all major Workspace apps are now covered by the CSE.