Email that only your recipient can read—sounds like a great idea for sensitive messages, right? Especially if you could have that within Gmail.
Technically, you can. Google does offer full end-to-end encryption (EE2E) for email, which blocks everyone but you and your recipient from reading its contents. Not even Google would be able to know what EE2E emails say, despite the data living on its servers.
But I don’t recommend Gmail if you want to use EE2E for your email. For this protection, you should turn elsewhere. Other email providers have a better lock on this feature for users like you and me—and one doesn’t even require you to fully leave Gmail to benefit.
Proton Mail gives you end-to-end encrypted email with no ads, no tracking, and no one reading your inbox. Built in Switzerland, trusted by 100M+ users. Start for just $1.
Many email providers now offer partial encryption, including Gmail. But few actually provide end-to-end encrypted email.
By default, email is not encrypted. Email providers now commonly encrypt the acts of sending, receiving, and storing messages, but they can still see the content. Only end-to-end encrypted email scrambles the whole process from absolute start to finish.
You’ll often hear EE2E email recommended for people like journalists and activists, but even everyday folks can benefit. These days, your online activity is being tracked with finer and finer detail. Data leaks and breaches continue to pile up. AI keeps upending expectations around privacy and security. If you have fewer people who know your business (including your email provider), that could help protect you down the road.
For personal accounts, Gmail only encrypts email while in transit (if supported by the receiving party) and at rest. The data isn’t fully end-to-end encrypted because Google and the other email provider can see it.
(What about Gmail’s Confidential Mode? That feature only limits access to an email, rather than changes its level of encryption.)
For true end-to-end encryption through Gmail, you must sign up for Google’s most expensive Workspace plan—one designed for large enterprise businesses. It’s also a feature that must be configured and managed, as it’s designed for deployment by an IT team within a corporate setting.
As consumers, we ain’t got time (or money) for that.
For everyday users, using end-to-end encryption email with a well-known, trusted service is sufficient. The main goal is to keep more of your messages private, to reduce what could be leaked or stolen.
But EE2E email is only as good as its implementation—and even then, it can only extend so far depending on the system. If you need airtight privacy, pay attention to what an EE2E email provider says it doesn’t encrypt. Maybe that’s subject lines. Maybe that’s the email addresses of those sending and receiving messages.
(And again, using an EE2E email service doesn’t provide that level of encryption if you’re emailing with someone using a non-EE2E provider.)
Also: Encrypted email (be it at rest + in transit, or EE2E) won’t protect you from someone with access to the message taking a screenshot or photo.