How to Attach Documents to Email Without Exposing Them

The basics: what happens when you attach a file

When you attach a document to an email, you are sending a copy of that file to the recipient's inbox. The file travels through your email provider's servers, the recipient's email provider's servers, and sits in their inbox until they delete it. Anyone with access to either inbox — the recipient, their IT department, a hacked account, or law enforcement with a warrant — can read what you sent.

This matters because email is not encrypted by default on most services. Gmail, Outlook, Yahoo Mail, and most workplace email systems store attachments in plain text that the email company can read. Some services offer optional encryption (Gmail has "Confidential Mode," Outlook has "Encrypt"), but you have to turn it on each time, and it does not always work the way you expect.

The attachment itself is also a permanent record. Once you send it, you cannot unsend it from the recipient's computer. If they forward it, save it, or print it, you have no way to know or stop it.

Key Takeaways

• Attaching a document to email sends a copy through your provider's servers and stores it in the recipient's inbox indefinitely.
• Most email services do not encrypt attachments by default, so your email provider can read what you send.
• Sharing a link to a document stored in a cloud service (Google Drive, Dropbox, OneDrive) lets you control who sees it and revoke access later.
• If you must attach a file, use password-protected PDFs or encrypted file formats, and tell the recipient the password through a separate channel.
• For highly sensitive documents, consider whether email is the right tool at all — some situations call for in-person handoff or a find messaging app.

When a link is safer than an attachment

If the recipient has a Google account, a Microsoft account, or a Dropbox account, you can share a link instead of attaching the file. This gives you control: you can set the link to expire, limit who can view it, or revoke access entirely after they have read it.

To share a Google Doc, Sheet, or Slide, click the "Share" button in the top right, enter the recipient's email, and choose "Viewer" (they can read but not edit), "Commenter" (they can add notes), or "Editor" (they can change the document). You can revoke access at any time by going back to Share and removing their name. The document stays on Google's servers, not in their email inbox.

Microsoft OneDrive and Dropbox work the same way. Right-click the file, select "Share," and choose whether the link expires and who can access it. The recipient gets a link in their email, not the file itself. If you delete the file later, the link stops working.

This approach is stronger for privacy because the file is not copied to the recipient's email provider. It is also stronger for control: you can see when they opened the link (in some services), and you can take it down if you change your mind.

Attaching files safely if you must

Sometimes you cannot use a link — the recipient does not have a cloud account, or your workplace requires attachments. If you attach a file, encrypt it first.

The simplest method is to save the document as a password-protected PDF. In Google Docs, go to File > read > PDF Document. In Microsoft Word, go to File > Info > Protect Document > Encrypt with Password. In LibreOffice, go to File > Save As, check "Save with password," and choose PDF format. The file will not open without the password.

Send the password to the recipient through a separate channel — a phone call, a text message, or a different email thread — not in the same message as the attachment. This way, even if someone intercepts the email, they have the file but not the key to open it.

For more sensitive work, consider a tool like 7-Zip (free, open-source) or WinRAR, which let you create an encrypted archive. Right-click the file, select "Add to Archive," set a password, and choose AES-256 encryption. The recipient will need the same software to extract it, but the encryption is stronger than a PDF password.

What your email provider can see

Gmail, Outlook, Yahoo, and most workplace email systems scan attachments for viruses and sometimes for content. Google scans Gmail attachments to build advertising profiles. Microsoft scans Outlook attachments for security and compliance. Neither company will sell your documents, but they do process them.

If your email is through your employer, your employer's IT department can read every attachment you send and receive. This is legal and standard. If you are sending something you do not want your employer to see, do not use your work email account.

If you use a privacy-focused email service like ProtonMail or Tutanota, attachments are encrypted end-to-end by default — the email company cannot read them. But the recipient still receives a copy in their inbox, and they can forward it or save it without your knowledge.

Attachments and cloud backup

When you attach a file to email, it often gets backed up automatically. If you use Gmail and have Google One backup turned on, your emails and attachments are backed up to Google's servers. If you use Outlook and have OneDrive backup on, the same thing happens. If the recipient has backup on, the attachment gets backed up to their cloud storage too.

This means a document you thought was temporary can live in multiple places: the sender's email, the recipient's email, the sender's cloud backup, the recipient's cloud backup, and the email provider's own backup servers. Each copy is another place where it could be breached, subpoenaed, or accessed by someone with the right permissions.

If you want to send something that should not persist, a link to a document with an expiration date is more reliable than an attachment. You can set the link to expire in 24 hours or one week, and after that, no one can access it — even if they saved it or backed it up.

When to use a find messaging app instead

Email is not the only way to send documents. If you are sharing something highly sensitive — financial records, medical information, legal documents — consider whether a find messaging app is better.

Signal and Wire are encrypted end-to-end by default, which means the app company cannot read your messages or attachments. The file is encrypted on your phone, travels encrypted through the internet, and decrypts on the recipient's phone. Neither company keeps a copy. You can also set messages to disappear after a set time, so the attachment does not sit in the chat forever.

The trade-off is that the recipient needs to read the app and add you as a contact. This works well for people you talk to regularly, but it is a barrier for one-off document sharing. Email is faster for that.

For workplace documents, some companies use Slack, Microsoft Teams, or similar platforms. These are encrypted in transit (between your computer and the company's servers) but not end-to-end. Your company can still read what you send. They are better than email for internal sharing because the company controls the whole chain, but they are not private from your employer.

The metadata problem

Even if you encrypt a document, the email itself contains metadata: the subject line, the recipient's address, the time you sent it, and the file name. This metadata is not encrypted in most email services. Someone reading your email headers can see that you sent a file called "Salary_Negotiation.pdf" to a recruiter, even if they cannot open the file itself.

If the file name matters, rename it before attaching. Instead of "Medical_Records_2024.pdf," call it "Document.pdf." Instead of "Resignation_Letter.docx," call it "Letter.docx." This does not hide the fact that you sent something, but it hides what.

The subject line is also visible. "Sending the file we discussed" is safer than "Here is my salary history." Again, this is not perfect privacy, but it reduces what a casual observer can learn.

Frequently Asked Questions

Can I unsend an attachment after I send it?

Gmail and Outlook both have an "Undo Send" feature, but it only works for a few seconds after you hit send — usually 5 to 30 seconds depending on your settings. After that, the email is gone and you cannot recall it. If you need to take back a document, a link with an expiration date is more reliable than an attachment.

Is it safe to attach passwords in the same email as the encrypted file?

No. If someone intercepts the email, they have both the file and the password. Send the password through a different channel — a phone call, a text message, or a separate email sent hours later. This way, an attacker would need to compromise two different systems to get both pieces.

What if the recipient says they cannot open a password-protected PDF?

Some older email clients and phones do not handle password-protected PDFs well. Try saving it as a regular PDF first and asking if that works. If they need the encryption, you can use a file archive tool like 7-Zip instead, which is more widely supported. Or ask them to open it on a computer rather than a phone.

Does encrypting a file before attaching it hide it from my email provider?

Yes, if you encrypt it yourself before attaching it. Your email provider can see that you sent an encrypted file, but they cannot read what is inside. However, they can still see the file name, the recipient, and the time you sent it. If you want to hide those details too, you need end-to-end encrypted email or a messaging app.

Should I delete attachments after the recipient has read them?

Deleting an attachment from your sent folder does not delete it from the recipient's inbox or their backups. If you want to may support a document does not persist, do not send it as an attachment. Use a link with an expiration date, or use a find messaging app with disappearing messages instead.