Is Gmail encrypted?
No. Google can read your Gmail. It's encrypted on the way and on Google's servers, but Google holds the keys, and personal accounts can't change that.
Checked on 25 October 2026 against 12 sources.
Made by Secria, which makes Secria Mail. We grade every app by the same rules, our own included. How we check
- Between its own usersGoogle can read itMail between Gmail users is encrypted on the way and on Google's servers, but with keys Google holds.1, 3
- To other servicesGoogle can read itGmail uses TLS with other providers when it can, which protects mail on the way, but Google and the other provider can each read their copy.1, 3
- Stored mailboxGoogle can read itStored mail is encrypted with keys Google holds, and Google says its automated systems analyze your content, for example to catch spam.1, 2
- Post-quantumNot yetNo post-quantum protection announced as of 25 October 2026.
- Who holds the keys
- Google holds them, and personal accounts have no option to keep your own.
- What Google can still see
- Everything in your mailbox: messages, attachments, subject lines, and who you write to and when.
On business plans, admins on some Google Workspace editions, such as Enterprise Plus, can turn on client-side encryption, which seals the body and attachments with keys the organization holds, but not the subject line or recipient list.
Want a mailbox only you can read? Secria Mail, made by us, is locked with a key made from your password, on your device. Create a free encrypted address
Can Google read my Gmail?
Yes. Google's privacy policy says it collects the email you write and receive, and that automated systems analyze your content, for example to catch spam and malware2. Gmail encrypts messages on Google's servers and between its data centers1, but Google holds those keys, so this keeps outsiders out, not Google.
Personal Gmail accounts have no setting that seals mail so only you can read it. Google's extra options, S/MIME and client-side encryption, are only for work or school accounts3.
Does Google scan Gmail for ads?
Not by default. In 2017 Google said it would stop using personal Gmail content to personalize ads, matching the rule it already had for paid business accounts4. Gmail's ads help page says Gmail does not scan or read your messages to show you ads, and that Google doesn't use the content you store in Gmail for ads "unless you choose to make data from these services available to other Google services that support ads"5.
On 16 October 2026, Google added that same exception to its privacy policy2, 12 and a note to its 2017 announcement. The note says that if users choose to connect apps like Gmail to other Google services, "data from Workspace Apps will be processed to personalize other Google experiences, and depending on a user's settings, that same subset of data can also be used to show ads"4.
Google's help page for connecting Gmail to its search services says ads "will not be based directly on your Gmail inbox", but that summaries, excerpts and inferences from your email may be used to show you ads6. It says advertisers don't get access to your inbox, and that connecting is your choice and can be undone at any time6.
Is Gmail confidential mode end-to-end encrypted?
No. Confidential mode lets you set an expiry date, turn off forwarding, copying and printing, and ask for a passcode sent by text7. Recipients can still take screenshots7.
It doesn't seal the message from Google. Google's admin help says Gmail removes the body and attachments from the recipient's copy and replaces them with a link to the content, and that organizations can still keep, search and export the confidential messages their users send8.
Does Gmail have end-to-end encryption?
Only on some business plans. Google started a beta for Workspace business users in April 2025, and on 2 October 2025 made it possible for them to send end-to-end encrypted email to anyone, even on other providers9, 10. It needs Enterprise Plus with the Assured Controls add-on, and an admin has to turn it on10.
It's built on client-side encryption, where the organization keeps the keys and Google's servers can't decrypt the mail11. The subject line, timestamps and recipient list are not covered11. Personal Gmail accounts can't use it3.
How Gmail compares
Sorted by how many parts are sealed by default, then by how many can be. Ties go A to Z.
Sources
- Gmail Email Security & Privacy Settings, Google. Read on 25 Oct 2026.
- Google Privacy Policy (effective 16 October 2026), Google. Read on 25 Oct 2026.
- Learn how Gmail encrypts your emails, Google. Read on 25 Oct 2026.
- As G Suite gains traction in the enterprise, G Suite’s Gmail and consumer Gmail to more closely align (23 June 2017, updated 16 October 2026), Google. Read on 25 Oct 2026.
- How Gmail ads work, Google. Read on 25 Oct 2026.
- Connect your Google content apps to get a Search services experience that's tailored to you, Google. Read on 25 Oct 2026.
- Send & open confidential emails, Google. Read on 25 Oct 2026.
- Protect Gmail messages with confidential mode, Google. Read on 25 Oct 2026.
- New in Gmail: Making end-to-end encrypted emails easy to use for all organizations (1 April 2025), Google. Read on 25 Oct 2026.
- Send Gmail end-to-end encrypted emails to anyone (2 October 2025), Google. Read on 25 Oct 2026.
- Protect your organization's data with CSE, Google. Read on 25 Oct 2026.
- Google Privacy Policy (archived version, effective 12 October 2026), Google. Read on 25 Oct 2026.
Changes to this answer
- First published.