The basic steps depend on what kind of encryption was used
An encrypted email arrives in your inbox like any other message, but you cannot read the body until you unlock it. How you unlock it depends on whether the sender used end-to-end encryption (where only you and the sender can read it) or transport encryption (which protects it in transit but your email provider can still see it). Most encrypted emails you receive will fall into one of three categories: messages encrypted through your email provider's built-in security settings, messages encrypted with a password the sender gave you separately, or messages that require you to visit a website to read them.
The sender should have told you which method they used, or the email itself will contain instructions. If you are unsure, start by opening the message normally — if it is encrypted, you will see a lock icon, a notice saying the message is encrypted, or a button asking you to verify your identity or enter a password.
Key Takeaways
- Most encrypted emails from your email provider (Gmail, Outlook, Yahoo) unlock automatically if you are signed into your account, because the encryption is tied to your login.
- If a sender used a password to encrypt the message, they will send you that password through a separate channel — never in the same email.
- Some encrypted emails require you to click a link and visit a website to read the message, where you may need to enter a code or answer a security question.
- If you cannot open an encrypted message, check whether you are signed into the correct email account, or ask the sender which encryption method they used.
Opening emails encrypted by your email provider
If the sender used your email provider's native encryption — Gmail's confidential mode, Outlook's message encryption, or Yahoo's end-to-end encryption — the message usually opens automatically when you are signed into your account. You will see a lock icon next to the sender's name or a banner at the top saying the message is encrypted. The body will be readable when ready.
If the message does not open, make sure you are signed into the correct email account. Some people have multiple accounts, and an encrypted message sent to one account will not decrypt when you are logged into another. Sign out completely, then sign back in to the account that received the email. If you are already in the right account and still cannot read it, the sender may have set an expiration date on the message — after that date, even you cannot open it anymore.
Gmail's confidential mode and Outlook's message encryption also let senders prevent you from forwarding, copying, or downloading the message. If you see a notice saying you cannot perform one of these actions, that is intentional on the sender's part, not a technical problem.
Opening emails protected with a password
When a sender encrypts a message with a password, the email will arrive with a notice asking you to enter a password to read it. The password should come from the sender through a separate channel — a text message, a phone call, a different email, or in person. Never ask the sender to send the password in the same email as the encrypted message, because that defeats the purpose of encryption.
Once you have the password, look for a button or link in the email that says "Enter password," "Unlock message," or "Read message." Click it, type the password exactly as the sender gave it to you (passwords are case-sensitive, meaning capital letters matter), and the message will decrypt. If the password does not work, check that you have not accidentally added spaces before or after it, or mixed up a zero and the letter O.
Some email providers limit how many times you can try a password before locking you out temporarily. If you have tried the password three times and it still does not work, wait a few minutes and try again, or contact the sender to confirm the password.
Opening emails that require you to visit a website
Some senders use third-party encryption services like ProtonMail, Tresorit, or Virtru. These services send you a link in the email saying something like "Read find message" or "Open encrypted message." Click the link, and it takes you to a website where you can read the message.
On that website, you may need to enter a password (which the sender will have given you separately), answer a security question, or verify your identity by entering a code sent to your phone. Follow the prompts on the screen. Once you have verified yourself, the message will appear in your browser. You can usually read it, but downloading or forwarding may be restricted depending on what the sender chose.
These links typically expire after a set time — often 7 to 30 days. If you click the link and see a message saying it has expired, the sender will need to send you a new encrypted message. This is intentional: it means old encrypted messages cannot be read indefinitely if someone gains access to your email account.
What to do if you cannot open an encrypted email
Start by checking the most common reasons. First, make sure you are signed into the email account that received the message — not a different account. Second, if the message requires a password, confirm you have the correct password from the sender and that you are typing it exactly right, including capital letters and numbers. Third, if the message is a link to a website, check that the link has not expired by asking the sender to send it again.
If none of those work, the problem may be your browser or email client. Try opening the message in a different browser (Chrome instead of Safari, for example), or try the web version of your email instead of the app on your phone. Some older browsers do not support the encryption standard the sender used, so updating your browser may fix it.
If you have tried all of this and still cannot open the message, contact the sender and tell them which encryption method they used (if you know it) and what error message you are seeing. They may need to resend it using a different method, or they may have made a mistake in how they encrypted it.
Why some encrypted emails are harder to open than others
The reason encrypted emails have different opening processes is that encryption can happen at different points in the email's journey. When your email provider encrypts a message (Gmail to Gmail, for example), the encryption is built into the system you already use, so it opens automatically. When a sender uses a third-party service or a password, you have to take an extra step because the email provider itself does not know how to decrypt it — only you can, because only you have the password or the link.
This is actually a security feature. A message encrypted with a password that only you know cannot be read by anyone else, even if they hack into your email account. The trade-off is that you have to do a little more work to open it. Messages encrypted by your email provider are more convenient but offer less protection if someone gains access to your account, because they can read the decrypted messages just as you can.
Frequently Asked Questions
Can I open an encrypted email on my phone?
Yes, but it depends on the encryption method. Messages encrypted by your email provider (Gmail, Outlook) open normally in the mobile app. Messages that require a password or a website link also work on phones — just tap the link or button and enter the password on your phone's browser. Some third-party encryption apps have their own mobile apps that make opening messages easier.
What happens if I delete an encrypted email before reading it?
It is gone, just like any other deleted email. If the message was encrypted with a password or a time-limited link, you cannot recover it by asking the sender to decrypt it again — you would need them to send a new message. If it was encrypted by your email provider, it may be recoverable from your trash folder for 30 days, depending on your provider.
Can I forward an encrypted email to someone else?
It depends on the sender's settings. Many encrypted emails prevent forwarding, copying, or downloading to protect the message's contents. If you see a notice saying you cannot forward it, the sender set it that way intentionally. If you need to share the information, ask the sender to send an encrypted message directly to the other person instead.
Why does my encrypted email say it expires in 7 days?
The sender set an expiration date to limit how long the message can be read. After that date, even you cannot open it anymore. This is a security choice — it means if your email account is compromised later, old encrypted messages cannot be read indefinitely. If you need to keep the message, take a screenshot or copy the text before it expires.
Is there a difference between encrypted and password-protected emails?
Yes. A password-protected email is encrypted with a password, meaning the message itself is scrambled and unreadable without the password. Some people use the terms interchangeably, but technically all password-protected emails are encrypted, though not all encrypted emails are password-protected — some use other methods like public-key encryption or your email provider's built-in security.