Gmail's built-in encryption works only with other Gmail users

Gmail does not have a single "encrypt everything" button. Instead, Google offers confidential mode, which adds encryption and expiration to messages you send to other Gmail accounts. The recipient cannot forward, copy, print, or read the message, and it disappears after a time you set — anywhere from one hour to five years.

Confidential mode is the closest Gmail comes to standard email encryption. It works only when both sender and recipient use Gmail. If you send a confidential message to a non-Gmail address (like Yahoo or Outlook), the recipient sees a link to a Google page instead of the message itself, and they must sign in with a Google account to read it.

For messages to non-Gmail users, or for encryption that works across all email providers, you will need a separate tool. Gmail itself cannot encrypt messages that way.

Key Takeaways

  • Confidential mode in Gmail encrypts messages and prevents recipients from copying, forwarding, or printing them.
  • You set an expiration date when you send — the message deletes itself after that time passes.
  • Confidential mode works best between Gmail users; non-Gmail recipients see a link instead of the actual message.
  • For encryption that works with any email provider, you need a separate tool like ProtonMail or PGP, which Gmail does not provide.

How to turn on confidential mode for a single message

Open Gmail in your web browser and click Compose to start a new message. Type the recipient's address, subject, and message body as usual. Below the compose box, you will see a row of icons — look for a clock with a lock symbol. Click it.

A window appears asking you to set an expiration date and time. Choose from the dropdown menu: one hour, one day, one week, one month, or five years. You can also set a custom date. Below that, you have the option to require a passcode — the recipient must enter a code you provide separately (by text, phone, or in person) to read the message. Click Set expiration when you are done.

The message now shows a lock icon next to the subject line. Send it as you normally would. The recipient will see the message is confidential and cannot take screenshots or copy text from it.

What happens when the expiration date arrives

When the time you set runs out, the message disappears from both your sent folder and the recipient's inbox. They cannot read it anymore, and no copy remains in either account. This is useful if you are sending sensitive information like passwords, financial details, or temporary access codes that should not exist permanently.

The recipient gets a warning before expiration — usually a few days before, depending on how long you set the timer. If they need to keep the information, they must write it down or save it elsewhere before the message vanishes.

The limits of Gmail's encryption

Confidential mode does not encrypt the message in the way that PGP or ProtonMail do. Google's servers still see the unencrypted content. The encryption protects against the recipient sharing or copying it, not against Google or someone with access to Google's systems reading it.

If you send a confidential message to a non-Gmail address, the recipient must click a link and sign in with a Google account (or create one) to read the message. Many people find this friction annoying, and some will not complete the step. For business communication with non-Gmail users, this can be a problem.

Confidential mode also does not protect the subject line or the sender's address — only the message body itself. If the subject contains sensitive information, confidential mode will not hide it.

When to use confidential mode and when to use something else

Use confidential mode when you are sending sensitive information to another Gmail user and you want to prevent them from forwarding or copying it. Examples include sharing a password, sending a contract draft you do not want circulated, or providing temporary access details.

Do not use confidential mode if you need encryption that works with non-Gmail email providers, or if you need the message to be encrypted on Google's servers themselves. In those cases, consider ProtonMail (which encrypts all messages by default), Tutanota, or a PGP tool like Mailvelope. These services encrypt messages before they leave your device, so even the email provider cannot read them.

For everyday Gmail use — messages that do not contain sensitive information — confidential mode is unnecessary. Standard Gmail messages are encrypted in transit (between your device and Google's servers) but not at rest on Google's servers.

Turning off confidential mode for a message you already sent

You cannot unsend a confidential message or turn off the expiration once it is sent. If you need to revoke access when ready, your only option is to contact the recipient and ask them to delete it. For this reason, double-check the recipient's address and the expiration date before you click send.

If you accidentally sent a confidential message to the wrong person, contact Gmail support as soon as possible. They may be able to revoke it, but this is not may provide and depends on how quickly you report it.

Frequently Asked Questions

Can I use confidential mode on my phone?

Yes. Open the Gmail app on Android or iPhone, compose a message, and tap the lock icon at the bottom of the screen. Set the expiration and passcode the same way you would on the web version. The process is identical.

What if I set a passcode but forget to tell the recipient?

The message will not open without the passcode. You must contact the recipient separately (by text, phone, or another method) and give them the code. There is no way to retrieve or reset a forgotten passcode through Gmail.

Does confidential mode work with Gmail forwarding or filters?

No. If you have set up a filter to forward incoming mail to another address, confidential messages will not forward. The recipient must read them in their Gmail inbox. This is by design — forwarding would defeat the purpose of confidential mode.

Is confidential mode the same as end-to-end encryption?

No. Confidential mode prevents the recipient from copying or forwarding the message, but Google can still read the content. End-to-end encryption (used by ProtonMail and Signal) means only the sender and recipient can read the message — not the email provider. They are different tools for different needs.