Gmail's built-in encryption works only with other Gmail users
Gmail does not offer end-to-end encryption for regular email the way some other services do. What Gmail does offer is TLS encryption, which scrambles your message while it travels between your computer and Google's servers, and between Google's servers and the recipient's email provider. This protects your message from being read while it moves across the internet, but Google can still read it once it arrives at their servers, and so can your recipient's email provider.
If you need stronger protection — where only you and the recipient can read the message, and not even Google can — you need to use Gmail's confidential mode. This feature lets you set an expiration date on a message and remove the ability to forward, copy, or read it. The recipient still cannot see the message content unless they have access to your Gmail account, but confidential mode adds a layer of control you do not get with regular email.
Confidential mode works best when both you and the recipient have Gmail accounts. If you send a confidential message to someone with a different email provider, they will see a link to the message instead of the message itself, and they will need to sign in or receive a passcode to read it.
Key Takeaways
- Gmail's standard TLS encryption protects messages in transit but not from Google or your recipient's email provider once delivered.
- Confidential mode adds expiration dates and prevents forwarding, copying, and downloading, giving you more control over who can access the message.
- To turn on confidential mode, click the lock icon when composing a message and set an expiration date and optional passcode.
- Confidential mode works across email providers, but recipients outside Gmail may need to enter a passcode to view the message.
How to turn on confidential mode for a single message
Open Gmail and click the Compose button to start a new message. Type the recipient's address, subject line, and message body as you normally would. At the bottom of the compose window, look for a lock icon with a clock next to it — this is the confidential mode button. Click it.
A panel will open asking you to set an expiration date and time. Choose how long the recipient can access the message: options typically range from one day to five years. You can also set a passcode that the recipient must enter to read the message, though this is optional. If you set a passcode, Gmail will send it to the recipient separately so they can unlock the message. Once you have set these options, click Save and then send the message as usual.
The recipient will receive an email with a link to your message. If they have a Gmail account, they can click the link and read it directly. If they use a different email provider, they will be prompted to enter the passcode you set, or to sign in with a Google account. After the expiration date and time you chose, the message will no longer be readable, even if the recipient saved the link.
What happens when you use confidential mode
Once you send a message in confidential mode, the recipient cannot forward it, copy text from it, read it, or print it. If you set an expiration date, the message will become unreadable after that time passes — the recipient will see a message saying the content is no longer available. This is useful if you are sending sensitive information like passwords, financial details, or temporary access codes that should not remain readable indefinitely.
Keep in mind that confidential mode does not prevent the recipient from taking a screenshot of the message before it expires. It also does not prevent them from reading the message aloud to someone else or writing down the information by hand. Confidential mode is a control tool, not a may provide that only the intended person will see the content.
If you need to revoke access to a confidential message before the expiration date, you can do so from your Sent folder. Open the message, click the three-dot menu, and select Turn off confidential mode. The recipient will no longer be able to access the message, even if they have not read it yet.
The difference between confidential mode and standard Gmail encryption
Standard Gmail uses TLS encryption automatically for all messages. This means that when you send an email to another Gmail user, the message is encrypted while it travels from your computer to Google's servers and from Google's servers to the recipient's Gmail account. However, once the message arrives, it sits in Google's data centers in plain text, where Google's systems can read it for purposes like spam filtering and content analysis.
Confidential mode adds a second layer: the message content itself is encrypted on Google's servers, so even Google cannot read the full message. The recipient must unlock it with the passcode or by signing into a Google account. This is why confidential mode is stronger than standard TLS encryption, but it also means the recipient has to take an extra step to read your message.
Neither method is the same as end-to-end encryption offered by services like ProtonMail or Signal. Those services encrypt messages before they leave your device, so even the email provider cannot read them. Gmail's confidential mode is a middle ground: it gives you more control than standard email, but it still relies on Google to handle the encryption and decryption process.
When confidential mode does not work well
Confidential mode requires the recipient to have internet access to read your message, since they must click a link and either sign in or enter a passcode. If you are sending to someone who checks email infrequently or on a slow connection, the extra step may frustrate them. It also does not work if the recipient's email system blocks links or requires them to read attachments instead of viewing them in the browser.
If you are sending to a large group, confidential mode becomes cumbersome because you have to set the same expiration date and passcode for everyone. If one person needs access longer than others, you cannot adjust the settings per recipient — you would have to send separate messages.
For highly sensitive information that multiple people need to access for different lengths of time, or for messages that need to remain encrypted even after they arrive, consider using a dedicated encryption service instead of Gmail's built-in tools. Gmail's confidential mode is best for one-off messages to individuals or small groups where you want to prevent forwarding and set a time limit.
How to check if confidential mode is on before sending
Before you click Send, look at the bottom of the compose window. If confidential mode is active, you will see the lock icon highlighted in blue, and it will show the expiration date and time you selected. If the lock icon is gray or not visible, confidential mode is off and the message will be sent as a standard Gmail message with only TLS encryption.
You can toggle confidential mode on and off at any time while composing a message, even after you have typed the full message. If you change your mind and want to send a regular message instead, click the lock icon again and select Turn off. The message will then send with standard encryption only.
Frequently Asked Questions
Can I use confidential mode if the recipient does not have a Gmail account?
Yes. The recipient will receive an email with a link to your message. They can click the link and either sign in with any Google account or enter a passcode you set. If they do not have a Google account and you did not set a passcode, they will not be able to read the message.
What happens if I turn off confidential mode after sending?
The recipient will when ready lose access to the message, even if they have not read it yet. They will see an error message if they try to click the link. This is useful if you send a message by mistake or need to revoke access before the expiration date.
Does confidential mode work with attachments?
Yes. Attachments are encrypted along with the message body. The recipient cannot read the attachment unless they can unlock the message with the passcode or by signing in. After the message expires, they cannot access the attachment either.
Can the recipient forward a confidential message?
No. The forward button is disabled for confidential messages. The recipient can read the message and take a screenshot, but they cannot forward it to someone else through email.
Is confidential mode the same as end-to-end encryption?
No. End-to-end encryption scrambles the message on your device before it leaves, so the email provider never sees the content. Confidential mode encrypts the message on Google's servers, so Google handles the encryption process. Confidential mode is stronger than standard Gmail encryption but not as strong as true end-to-end encryption.