Google adds two new features to client-side encryption in Gmail

Google has announced two new features aimed at improving client-side encryption in Gmail. With the latest update, users will be able to easily identify ineligible recipients and detect blocked attachments.

For the unversed, Gmail Client-side encryption (CSE) lets you strengthen the confidentiality of your sensitive or regulated data content by having the encryption handled in your browser before any data is transmitted.

What's new?

When composing a Gmail message using client-side encryption, users will now receive instant visual cues to identify recipients who are unable to receive encrypted messages - these recipients will be marked with a red chip and the email cannot be sent until they are removed. This feature ensures that sensitive information remains protected and inaccessible to unintended recipients.

Gmail automatically block attachments that may spread viruses, such as files containing executable files or scripts. With the latest update, if you receive a client-side encrypted message, Gmail's new functionality will examine the attached files for blocked file types. Should any blocked files be detected, you'll see a warning banner and won't be able to download the file.

If enabled by the Workspace admin, end users can add client-side encryption to any message they compose by simply clicking on the lock icon and selecting additional encryption options. Once activated, users can proceed to compose their message and attach files as usual. If a recipient's email address is added to the "To" or "CC" fields but is ineligible to receive encrypted messages, the address will be highlighted with a red chip.

The improvements for client-side encryption in Gmail are gradually rolling out to both Rapid Release and Scheduled Release domains and it may take up to 15 days for all users to see them. The new features will be available to Google Workspace Enterprise Plus, Education Plus, and Education Standard customers.