Gmail’s end-to-end encryption for enterprises now works with external email providers

Google has announced the general availability of client-side encryption in Gmail, allowing users to send end-to-end encrypted emails to recipients on any email service. Previously, encryption in Gmail was limited by ecosystem constraints, but this update means emails remain fully protected in transit, regardless of the recipient’s provider.

In addition to broad compatibility, Google has streamlined recipient access. Recipients without a Google account are notified and can read encrypted messages through a guest account portal, removing the need for key exchanges or external decryption tools. Building on this, the new capability also minimizes setup and administration overhead. IT teams and end users do not have to manage complex configuration or new software, while benefiting from improved privacy, data sovereignty, and security.

While this end-to-end encryption is now available to eligible organizations, it is currently targeted at Google Workspace Enterprise Plus customers with the Assured Controls add-on. The feature is being introduced gradually, so access will expand over time as the rollout continues.