{ "slug": "gmail", "name": "Gmail", "maker": "Google", "category": "email", "competitor": true, "verdict": "n", "answer": "No. Google can read your Gmail. It's encrypted on the way and on Google's servers, but Google holds the keys, and personal accounts can't change that.", "title": "Is Gmail encrypted? Who can read your email", "description": "Google can read your Gmail. It's encrypted on the way and on Google's servers, but Google holds the keys. Confidential mode doesn't change that.", "parts": [ { "key": "mail", "status": "n", "words": "Google can read it", "note": "Mail between Gmail users is encrypted on the way and on Google's servers, but with keys Google holds.", "sources": [ 1, 3 ], "label": "Between its own users" }, { "key": "mailout", "status": "n", "words": "Google can read it", "note": "Gmail uses TLS with other providers when it can, which protects mail on the way, but Google and the other provider can each read their copy.", "sources": [ 1, 3 ], "label": "To other services" }, { "key": "tray", "status": "n", "words": "Google can read it", "note": "Stored mail is encrypted with keys Google holds, and Google says its automated systems analyze your content, for example to catch spam.", "sources": [ 1, 2 ], "label": "Stored mailbox" }, { "key": "pq", "status": "x", "words": "Not yet", "note": "No post-quantum protection announced as of 25 October 2026.", "sources": [], "label": "Post-quantum" } ], "extra_parts": [], "keys": "Google holds them, and personal accounts have no option to keep your own.", "can_see": "Everything in your mailbox: messages, attachments, subject lines, and who you write to and when.", "business": "On business plans, admins on some Google Workspace editions, such as Enterprise Plus, can turn on client-side encryption, which seals the body and attachments with keys the organization holds, but not the subject line or recipient list.", "fix": null, "fix_line": null, "sections": [ { "id": "can-google-read-my-gmail", "q": "Can Google read my Gmail?", "a": "Yes. Google's privacy policy says it collects the email you write and receive, and that automated systems analyze your content, for example to catch spam and malware [2]. Gmail encrypts messages on Google's servers and between its data centers [1], but Google holds those keys, so this keeps outsiders out, not Google.\n\nPersonal Gmail accounts have no setting that seals mail so only you can read it. Google's extra options, S/MIME and client-side encryption, are only for work or school accounts [3]." }, { "id": "does-google-scan-gmail-for-ads", "q": "Does Google scan Gmail for ads?", "a": "Not by default. In 2017 Google said it would stop using personal Gmail content to personalize ads, matching the rule it already had for paid business accounts [4]. Gmail's ads help page says Gmail does not scan or read your messages to show you ads, and that Google doesn't use the content you store in Gmail for ads \"unless you choose to make data from these services available to other Google services that support ads\" [5].\n\nOn 16 October 2026, Google added that same exception to its privacy policy [2][12] and a note to its 2017 announcement. The note says that if users choose to connect apps like Gmail to other Google services, \"data from Workspace Apps will be processed to personalize other Google experiences, and depending on a user's settings, that same subset of data can also be used to show ads\" [4].\n\nGoogle's help page for connecting Gmail to its search services says ads \"will not be based directly on your Gmail inbox\", but that summaries, excerpts and inferences from your email may be used to show you ads [6]. It says advertisers don't get access to your inbox, and that connecting is your choice and can be undone at any time [6]." }, { "id": "is-gmail-confidential-mode-encrypted", "q": "Is Gmail confidential mode end-to-end encrypted?", "a": "No. Confidential mode lets you set an expiry date, turn off forwarding, copying and printing, and ask for a passcode sent by text [7]. Recipients can still take screenshots [7].\n\nIt doesn't seal the message from Google. Google's admin help says Gmail removes the body and attachments from the recipient's copy and replaces them with a link to the content, and that organizations can still keep, search and export the confidential messages their users send [8]." }, { "id": "does-gmail-have-end-to-end-encryption", "q": "Does Gmail have end-to-end encryption?", "a": "Only on some business plans. Google started a beta for Workspace business users in April 2025, and on 2 October 2025 made it possible for them to send end-to-end encrypted email to anyone, even on other providers [9][10]. It needs Enterprise Plus with the Assured Controls add-on, and an admin has to turn it on [10].\n\nIt's built on client-side encryption, where the organization keeps the keys and Google's servers can't decrypt the mail [11]. The subject line, timestamps and recipient list are not covered [11]. Personal Gmail accounts can't use it [3]." } ], "sources": [ { "title": "Gmail Email Security & Privacy Settings", "publisher": "Google", "url": "https://safety.google/products/gmail/", "read": "2026-10-25" }, { "title": "Google Privacy Policy (effective 16 October 2026)", "publisher": "Google", "url": "https://policies.google.com/privacy?hl=en-US", "read": "2026-10-25" }, { "title": "Learn how Gmail encrypts your emails", "publisher": "Google", "url": "https://support.google.com/mail/answer/6330403?hl=en", "read": "2026-10-25" }, { "title": "As G Suite gains traction in the enterprise, G Suite’s Gmail and consumer Gmail to more closely align (23 June 2017, updated 16 October 2026)", "publisher": "Google", "url": "https://blog.google/products/gmail/g-suite-gains-traction-in-the-enterprise-g-suites-gmail-and-consumer-gmail-to-more-closely-align/", "read": "2026-10-25" }, { "title": "How Gmail ads work", "publisher": "Google", "url": "https://support.google.com/mail/answer/6603?hl=en", "read": "2026-10-25" }, { "title": "Connect your Google content apps to get a Search services experience that's tailored to you", "publisher": "Google", "url": "https://support.google.com/websearch/answer/16859283?hl=en", "read": "2026-10-25" }, { "title": "Send & open confidential emails", "publisher": "Google", "url": "https://support.google.com/mail/answer/7674059?hl=en", "read": "2026-10-25" }, { "title": "Protect Gmail messages with confidential mode", "publisher": "Google", "url": "https://knowledge.workspace.google.com/admin/gmail/advanced/protect-gmail-messages-with-confidential-mode?hl=en", "read": "2026-10-25" }, { "title": "New in Gmail: Making end-to-end encrypted emails easy to use for all organizations (1 April 2025)", "publisher": "Google", "url": "https://workspace.google.com/blog/identity-and-security/gmail-easy-end-to-end-encryption-all-businesses", "read": "2026-10-25" }, { "title": "Send Gmail end-to-end encrypted emails to anyone (2 October 2025)", "publisher": "Google", "url": "https://workspaceupdates.googleblog.com/2025/10/send-gmail-end-to-end-encrypted-emails-in-gmail.html", "read": "2026-10-25" }, { "title": "Protect your organization's data with CSE", "publisher": "Google", "url": "https://knowledge.workspace.google.com/admin/security/protect-your-organizations-data-with-cse?hl=en", "read": "2026-10-25" }, { "title": "Google Privacy Policy (archived version, effective 12 October 2026)", "publisher": "Google", "url": "https://policies.google.com/privacy/archive/20261012?hl=en-US", "read": "2026-10-25" } ], "changes": [ { "date": "2026-10-25", "text": "First published." } ], "related": [ "outlook", "icloud-mail", "yahoo-mail", "proton-mail", "google-calendar" ], "url": "https://isitencrypted.com/gmail/", "checked": "2026-10-25" }