How to Encrypt Email Messages

Step by step

1. 2 min

   Enable two-factor authentication on your email account

   Log into your email provider's security settings and activate two-factor authentication. This strengthens your account security before adding encryption. For Gmail, go to Security > 2-Step Verification. For Outlook, navigate to Security dashboard > Advanced security options.

   Note: Use an authenticator app instead of SMS for stronger protection against SIM swapping attacks.
2. 1 min

   Access encryption settings in your email client

   In Gmail, click Settings > See all settings > General > Confidential mode. In Outlook, go to File > Options > Trust Center > Trust Center Settings > E-mail Security. In Apple Mail, open Mail > Preferences > Accounts > Advanced.

3. 3 min

   Configure S/MIME certificates for automatic encryption

   Download an S/MIME certificate from your organization or purchase one from a certificate authority. Install it in your email client's certificate store. This enables automatic encryption when both sender and recipient have compatible certificates.

   Note: Many organizations provide free S/MIME certificates through their IT departments.
4. 1 min

   Compose a new encrypted message

   Create a new email and add your recipient. In Gmail, click the lock icon and select 'Confidential mode.' In Outlook, click Options > Encrypt > Encrypt-Only. In Apple Mail, click the encryption icon in the message toolbar.

   Note: The encryption icon typically appears as a lock or shield symbol in the compose window.
5. 1 min

   Set expiration and access controls

   Choose when the encrypted message expires and whether recipients need additional authentication to open it. Set expiration dates from one day to five years. Enable SMS passcode verification for extra security on sensitive messages.

   Note: Shorter expiration times provide better security but may inconvenience recipients who don't check email frequently.
6. 30 sec

   Verify encryption before sending

   Look for the encryption indicator in your compose window before clicking Send. The message should show a lock icon or encryption badge. If encryption fails, you'll see an error message explaining the issue.

   Note: Screenshot the encryption indicator as proof of secure transmission for compliance purposes.
7. 2 min

   Share decryption instructions with recipients

   Send first-time encrypted email recipients instructions for opening encrypted messages. Include steps for any required authentication methods like SMS codes or secondary passwords. Test the process with a colleague before sending sensitive information.

   Note: Create a standard template with decryption instructions to send alongside your first encrypted message to new contacts.