How to encrypt email in Gmail without switching providers

You can add end-to-end encryption to Gmail without moving to a new provider or learning a new inbox. Here is how the options compare, and the fastest way to actually do it.

What Gmail offers on its own

• TLS in transit — automatic, but not end-to-end; Google can still read stored mail.
• Confidential mode — adds expiry and blocks forwarding, but Google can still read the message. It is not encryption in the end-to-end sense.
• S/MIME — real encryption, but only on some Workspace enterprise plans and fiddly to set up.

The simple route: a browser extension

For consumer Gmail, the practical way to get end-to-end encryption is a browser plugin that does the key management and encryption for you, right inside the Gmail interface.

Step by step

1. Install ProtectMyMail from your browser's extension store (Chrome, Firefox or Edge).
2. Connect it to your Gmail account — your address stays the same.
3. Compose as usual; toggle encryption on for messages you want protected.
4. The recipient sees a verified, encrypted message; only they can read it.

When to use it

You don't need to encrypt every newsletter. Reach for encryption when a message contains anything you would not want your provider, a connected app, or an attacker to read — contracts, IDs, health details, credentials, or private conversations.