{"id":24612,"date":"2022-12-20T01:24:00","date_gmt":"2022-12-20T01:24:00","guid":{"rendered":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/20\/google-adds-client-side-encryption-for-some-gmail-users\/"},"modified":"2022-12-20T01:24:00","modified_gmt":"2022-12-20T01:24:00","slug":"google-adds-client-side-encryption-for-some-gmail-users","status":"publish","type":"post","link":"https:\/\/mailinvest.blog\/index.php\/2022\/12\/20\/google-adds-client-side-encryption-for-some-gmail-users\/","title":{"rendered":"Google adds client-side encryption for some Gmail users"},"content":{"rendered":"

<\/a>\n
<\/p>\n

\n

Google LLC said last week that it has added beta support for client-side encryption in Gmail<\/a> for some of its Google Workspace customers.<\/p>\n

CSE in Gmail has been added for customers who subscribe to the Google Workspace Enterprise Plus, Education Plus and Education Standard plans, which means users of lower-priced tiers and personal Google accounts miss out for now.<\/p>\n

For users who can access the feature, they\u2019ll need to switch it on themselves because it remains off by default. It can be enabled via the Admin console by clicking on Security > Access and data control > Client-side encryption.<\/p>\n

Google\u2019s CSE support page<\/a> explains that the feature enables customers to retain control over their security keys, meaning that Google itself won\u2019t be able to access them nor decrypt the content of emails or their attachments. The document goes on to explain that Google Workspace administrators have full power to decide which individuals within an organization can access the encryption keys. As such, they also have the power to monitor the encrypted files of company employees.<\/p>\n

CSE is not to be confused with end-to-end encryption, which is more secure because it doesn\u2019t allow admins to see the contents of encrypted emails. With E2EE, the data is encrypted on the sender\u2019s device and can be decrypted only on the intended recipient\u2019s machine. The encryption keys are generated on the sender\u2019s and receiver\u2019s devices only, so they cannot be accessed by company admins. This way, it prevents anyone not involved in the conversation from being able to see the emails.<\/p>\n

\u201cWith CSE, clients use encryption keys that are generated and stored in a cloud-based key management service, so you can control the keys and who has access to them,\u201d Google said in a statement. \u201cFor example, you can revoke a user\u2019s access to keys, even if that user generated them. Also, with CSE, you can monitor users\u2019 encrypted files.\u201d<\/p>\n

Google said that while CSE support is limited to select users for now, the feature will be rolled out in more services and for more users \u201cin a later release.\u201d<\/p>\n

It\u2019s worth noting that enabling CSE means a lot of advanced Gmail features won\u2019t work, including multisend mode, signatures, Smart Compose, translation, summaries and Confidential mode. In addition, such emails will not be searchable, and third-party add-ons will also be prevented from accessing the plain text contents.<\/p>\n

Google said CSE is aimed at customers in highly regulated industries such as government, defense, aerospace and financial services.<\/p>\n

Image: Google<\/h5>\n
\n
\n

Show your support for our mission by joining our Cube Club and Cube Event Community of experts. Join the community that includes Amazon Web Services and Amazon.com CEO Andy Jassy, Dell Technologies founder and CEO Michael Dell, Intel CEO Pat Gelsinger and many more luminaries and experts.<\/span><\/h3>\n<\/div><\/div>\n