Google announced today that client-side encryption (CSE) for Gmail is now available for Android and iOS devices, giving users more control over encryption keys and data access. Client-side encryption was added to Gmail on the web earlier this year. It allows users to read and write encrypted messages directly from the device.
Workspace encrypts data at rest and in transit by using securely designed encryption libraries, while client-side encryption ensures you have sole control over encryption keys and access to your data. Client-side encryption ensures that Google servers cannot decipher sensitive data in email bodies and attachments - you retain control of the encryption keys and the identity services that access those keys.
This feature is available to Google Workspace EnterprisePlus, EducationPlus and EducationStandard users. Other Workspace versions (such as Essentials, BusinessStarter, BusinessStandardPlus, etc.) do not support client-side encryption. In addition, users with personal Google accounts cannot use this feature.
Google says the feature allows "users to work with their most sensitive data anytime, anywhere on their mobile devices while adhering to compliance and regulatory requirements." This feature works by using the S/MIME protocol to encrypt and digitally sign emails before sending them to Google servers.
When composing an email on Gmail for Android or iOS, eligible users can click the blue lock icon in the subject bar to turn on client-side encryption. However, this feature is disabled by default and administrators must enable access through the CSE management interface.
In recent news, search giant Google turned 25 this week and is allowing teenagers aged 13 (and older) to use its generative search experience. Google also announced a new tool called "Google-Extended" that lets webmasters control whether Google can access their content to train its "Bard" artificial intelligence.
Google will also discontinue the basic HTML version of Gmail, which was designed to support legacy browsers or help users with slower connections. Starting early next year, basic Gmail will be discontinued and the standard view will be loaded by default.