Apr 11, 2026 · 5 min read

Gmail Finally Got End to End Encryption on Your Phone—Google Locked It Behind a Paywall

Google expanded Gmail's real encryption to mobile devices. The catch: it costs $22 per user per month and you need an enterprise license to use it.

Smartphone displaying Gmail app with a lock icon symbolizing end to end encryption in an office environment

What Happened

On April 10, 2026, Google announced that Gmail end to end encryption is now available on Android and iOS devices. For the first time, users can compose and read encrypted messages natively within the mobile Gmail app without extra tools or browser workarounds.

The feature uses client side encryption (CSE), where messages encrypt on the device before transmission. Organizations control the encryption keys on infrastructure outside Google's servers, meaning Google cannot read the message content. Recipients using Gmail see encrypted messages as normal email threads. Recipients on other email services access the message through a secure browser portal with no apps to install.

The Catch

The feature requires Google Workspace Enterprise Plus at $22 per user per month, plus the Assured Controls or Assured Controls Plus add on, which requires custom pricing through Google's sales team. Admins must also explicitly enable the mobile clients in the CSE admin interface through the Google Admin Console.

That rules out freelancers, small businesses, nonprofits, journalists, activists, and the roughly 1.8 billion people who use free Gmail. For them, nothing changes.

What Google Can Still See in Your Gmail

For standard Gmail users, Google continues to have full access to email content. Here is what that means in practice:

Data collection. Google processes email content for advertising profiles, smart features like autocomplete, and email categorization. While Google stated in 2017 that it would stop scanning emails for ad targeting, it still processes email data for other purposes.
Law enforcement access. Google received over 181,000 government requests for user data in 2025, complying fully or partially with approximately 82% of them. Standard Gmail messages can be produced in response to valid legal process.
AI processing. Google has incorporated Gmail data into Gemini AI features. Unless users explicitly opt out, their email content may inform AI model behavior.
Tracking pixels. An estimated 68% of marketing emails contain invisible tracking pixels that report when you open a message, your IP address, device type, and approximate location. Gmail's image proxy partially obscures IP addresses, but the open signal still fires.

A Brief History of Google's Encryption Promises

Google has dangled encryption for Gmail users for over a decade:

2014: Google announced a Chrome extension called End to End that would add PGP encryption to Gmail. It was quietly abandoned.
2022: Client side encryption launched for Gmail on the web, restricted to enterprise accounts.
2025: Gmail CSE reached general availability. Still enterprise only.
2026: CSE extends to mobile. Still enterprise only.

Each time, the announcement generates headlines about "Gmail encryption," and each time, the feature excludes the people who need it most.

The Competition Offers It for Free

Several email providers offer end to end encryption at no cost:

Proton Mail: Free tier with E2EE by default since 2014. Over 100 million users.
Tuta (formerly Tutanota): Free tier with automatic encryption. Fully open source.
Skiff Mail: Free encrypted email that launched in 2022.

Apple's iCloud Mail encrypts stored messages under Advanced Data Protection for all users. Even Microsoft offers message encryption for Microsoft 365 Business Basic at $6 per user per month, a fraction of what Google charges.

Why Google Won't Encrypt Everyone's Gmail

The business model explains it. Google generated $264.6 billion in advertising revenue in 2025. Gmail's 1.8 billion users provide an enormous data surface for ad targeting and AI training. A class action lawsuit filed in 2025 alleges that Google even let Gemini scan private Gmail messages without consent. End to end encryption would put that data behind a wall Google cannot see through.

Enterprise customers pay directly, so their data does not need to subsidize an advertising business. For free Gmail users, the product is the data.

What You Can Do

Switch to encrypted email for sensitive communications. Proton Mail and Tuta offer free plans with genuine end to end encryption.
Use encrypted messaging for anything confidential. Signal encrypts everything by default.
Block email tracking. Even encrypted emails can contain tracking pixels when decrypted. Extensions like Gblock strip invisible trackers from Gmail before they report your data.
Enable Gmail's confidential mode as a partial measure. It adds expiration dates to messages but does not encrypt them end to end.
Audit what Gmail knows about you at your Google Account dashboard. Review and delete stored email activity.

The Bottom Line

Gmail getting mobile encryption is genuinely good news for enterprise security teams. For the 1.8 billion people on standard Gmail, the inbox remains an open book, readable by Google, scannable for ads, and loaded with invisible trackers. Real email privacy requires either paying $22 or more per user per month or choosing a provider that does not charge extra for it.