Gmail brings native end-to-end encryption to Android and iOS

If you work in an industry that handles highly sensitive data such as healthcare, finance, or the public sector, you’re likely familiar with the hurdles of secure mobile communication. Often, reading or sending an encrypted email on your phone meant jumping through hoops, downloading third-party apps, or logging into clunky web portals.

Google is finally ending that friction. In a new Workspace update, Google is bringing native Client-side encryption (CSE) directly into the Gmail app for mobile devices.

What is Client-side encryption?

Unlike standard encryption, where Google still holds the keys to help with things like spam filtering and search, CSE ensures that only your organization controls the encryption keys. This means the data is encrypted before it even reaches Google’s servers, making it virtually impossible for anyone outside your company to read the content of your messages.

How it works on your phone

The best part of this update is the integration. You don’t have to change how you use Gmail.

• Native Composition: When you start a new email, you simply click the lock icon to enable “additional encryption.”
• Attachment Support: You can add attachments just as you normally would, and they will be included in the end-to-end encrypted wrap.
• Recipient Flexibility: You can send these encrypted messages to anyone. If the recipient is also using the Gmail app, it appears as a standard thread. If they aren’t, they are directed to a secure, mobile-friendly browser view where they can read and reply without needing a Google account.

Who is this for?

This isn’t a feature for every casual Gmail user. Native E2EE for mobile is currently available for Enterprise Plus customers who have the Assured Controls or Assured Controls Plus add-on. Admins will need to manually enable the Android and iOS clients in the CSE admin interface before users can see the new lock icon in their apps.

As more “Pro” features like this migrate from the desktop to our pockets, it’s becoming clear that Google is determined to make the mobile workspace every bit as secure as the office.