Cyber Security News

Google Brings End-to-End Encrypted Gmail to Android and iPhone

Google has officially expanded Gmail’s end-to-end encryption (E2EE) feature to Android and iOS devices, empowering organizations and users to protect the confidentiality of email content directly from their mobile devices.

This enhancement is part of Gmail’s client-side encryption (CSE) program, enabling stricter compliance controls and preserving data sovereignty across regulated industries.

With this new rollout, Gmail users can now compose, read, and send encrypted messages natively within the Gmail app without relying on third-party portals or tools.

Previously available only on web browsers, Gmail’s mobile E2EE now ensures seamless security for users who handle sensitive or confidential data while on the move.

According to the report, For users with a Gmail E2EE license, composing an encrypted message is simple click the lock icon, select “additional encryption,” and proceed to write the email and attach files as usual.

Every message and attachment is encrypted on the client side before being transmitted to Google’s servers, which means even Google itself cannot read the message contents.

Seamless Communication for All Recipients

Google has optimized the experience for both Gmail and non-Gmail users.

  • Gmail recipients will receive the encrypted message in their inbox like any other regular email thread, maintaining a familiar and simple interface.
  • Guest recipients those without the Gmail app can securely view and reply via their native browser without needing to install additional software or log into a special portal.
Composing a E2EE message in Gmail (Source : Google).

This universal accessibility is designed to eliminate the typical complexities of encrypted email systems, giving users a frictionless way to stay secure across devices and email platforms.

The new mobile E2EE support aligns with the growing security demands of enterprises and public-sector organizations.

End-to-end encryption ensures message content is inaccessible to unauthorized third parties, thereby strengthening compliance with privacy laws such as GDPR or regional data protection mandates.

Once activated, users within the organization can start sending encrypted messages immediately. Detailed steps and setup instructions are available via Google’s Help Center.

Security Meets Usability

By bringing E2EE directly into the Gmail apps for Android and iPhone, Google bridges the gap between high-level encryption and user experience.

Admins can enable Android and iOS support in the Google Workspace Admin Console under the CSE interface.

This launch simplifies how organizations safeguard sensitive information from financial records to government communications while keeping workflows intuitive and mobile-friendly.

Google’s latest advancement shows a clear move toward making enterprise-grade encryption accessible to everyone, transforming secure email from a specialist feature into a standard expectation across devices and sectors.

Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.

Mayura Kathir

Mayura Kathir is a cybersecurity reporter at GBHackers News, covering daily incidents including data breaches, malware attacks, cybercrime, vulnerabilities, zero-day exploits, and more.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago