Google Workspace admins can now take their Gmail email security to the next level with client-side encryption. Make sure you apply for beta and keep your work emails protected!
With an eligible paid Google Workspace plan, administrators now have a brand new tool to ensure Gmail user security – Client Side Encryption (CSE)! This innovative beta feature is available for testing until January 20th of next year.
Gmail’s newest beta offers users revolutionary levels of security. No longer limited to encrypting data at rest and in transit, this update brings enhanced client-side encryption for added protection – perfect for meeting demanding compliance requirements. Company communications just got a lot more secure! Emails and attachments, along with all images sent within or outside the domain are now fully encrypted on both ends. However, the header information – such as subject titles and recipient addresses – remain unencrypted.
Note: Google Workspace Enterprise Plus, Education Plus and Education Standard editions now feature this exciting new update. But unfortunately, this is not available to consumer accounts with a personal Google Account.
CSE allows clients to take control of their encryption keys and ensure secure communication. With CSE, client access can be easily revoked in the event that a user’s security is compromised – no more worrying about who has access! Furthermore, use activity of encrypted files can be closely monitored for further protection.

To ensure security, it’s imperative that all recipients have client-side encryption enabled and the feature turned on. Obtaining certificates is also a necessary step in this process. IT admins can join the beta program to ensure their organization has access to this feature!
After enabling this feature from the admin, message security is only an option away. Simply click on the right corner of the email compose box and select Message security. Then they just have to turn on additional encryption when sending a message. For further protection, signing in with an identity provider is also available. Your recipient will see an encrypted version of the original with a prompt to sign in and decrypt it within Gmail.
IT admins can join the Google beta to try out the latest feature! With it, they get access to a tailored support page and even more control over settings which enables at Domain, OU or Group levels.
It is not full E2EE but still, Security specialists showed affirmative reception to Google’s new endeavour into increased security for Gmail users.