Friday, December 16, 2022

Client-side encryption for Gmail available in beta

What’s changing

We’re expanding customer access to client-side encryption in Gmail on the web. Google Workspace Enterprise Plus, Education Plus, and Education Standard customers are eligible to apply for the beta until January 20th, 2023.

Using client-side encryption in Gmail ensures sensitive data in the email body and attachments are indecipherable to Google servers. Customers retain control over encryption keys and the identity service to access those keys.

Who’s impacted
Admins and end users

Why it’s important

Google Workspace already uses the latest cryptographic standards to encrypt all data at rest and in transit between our facilities. Client-side encryption helps strengthen the confidentiality of your data while helping to address a broad range of data sovereignty and compliance needs. 

Client-side encryption is already available for Google Drive, Google Docs, Sheets, and Slides, Google Meet, and Google Calendar (beta).

Getting started

  • Admins: 
    • Eligible Workspace customers can apply for the beta after completing a few steps to prepare your account.
    • This feature will be OFF by default and can be enabled at the domain, OU, and Group levels (Admin console > Security > Access and data control > Client-side encryption). Visit the Help Center to learn more about client side encryption

  • End users: To add client-side encryption to any message, click the lock icon and select additional encryption, and compose your message and add attachments as normal. Visit the Help Center to learn more about using Client-side encryption for Gmail.


We will be accepting beta applications and allowlisting customers over the next several weeks.


  • Available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers
  • Not available to Google Workspace Essentials, Business Starter, Business Standard, Business Plus, Enterprise Essentials, Education Fundamentals, Frontline, and Nonprofits, as well as legacy G Suite Basic and Business customers
  • Not available to users with personal Google Accounts