Gmail’s end-to-end encryption comes to mobile, a year after its web launch

Google has extended Gmail's end-to-end encryption to Android and iOS, a year after the feature launched on the web. Available exclusively to Google Workspace Enterprise Plus users with the Assured Controls add-on, the update lets users compose and read encrypted messages natively in the Gmail mobile app without additional software. The encryption uses client-side key management, meaning Google's servers only see ciphertext. External recipients without Gmail access can read and reply via a secure browser-based portal. Notable constraints include a 5MB attachment limit under encryption and a requirement for administrators to explicitly enable the feature in the Workspace admin console. The rollout closes a competitive gap with Microsoft 365 in regulated industries such as federal contracting, healthcare, and financial services, though end-to-end encryption remains unavailable to consumer and small-business Gmail users.