In a fresh development, this doesn't affect our editorial independence. When you purchase through links in our articles, we may earn a small commission.
As part of the ongoing story, especially if you could have that within Gmail. Email that only your recipient can read—sounds like a great idea for sensitive messages, right?
In a fresh development, google does offer full end-to-end encryption (EE2E) for email, which blocks everyone but you and your recipient from reading its contents. Not even Google would be able to know what EE2E emails say, despite the data living on its servers. Technically, you can.
The report highlights that for this protection, you should turn elsewhere. Other email providers have a better lock on this capability for users like you and me—and one doesn’t even require you to fully leave Gmail to benefit. But I don’t recommend Gmail if you want to use EE2E for your email.
As part of the ongoing story, built in Switzerland, trusted by 100M+ users. Start for just $1. Proton Mail gives you end-to-end encrypted email with no ads, no tracking, and no one reading your inbox.
In a fresh development, but few actually provide end-to-end encrypted email. Many email providers now offer partial encryption, including Gmail.
According to the latest update, email providers now commonly encrypt the acts of sending, receiving, and storing messages, but they can still see the content. Only end-to-end encrypted email scrambles the whole process from absolute start to finish. By default, email is not encrypted.
The report highlights that these days, your online activity is being tracked with finer and finer detail. Data leaks and breaches continue to pile up. AI keeps upending expectations around privacy and security. If you have fewer people who know your business (including your email provider), that could help protect you down the road. You’ll often hear EE2E email recommended for people like journalists and activists, but even everyday folks can benefit.
The report highlights that the data isn’t fully end-to-end encrypted because Google and the other email provider can see it. For personal accounts, Gmail only encrypts email while in transit (if supported by the receiving party) and at rest.
As part of the ongoing story, that capability only limits access to an email, rather than changes its level of encryption.). (What about Gmail’s Confidential Mode?
As part of the ongoing story, it’s also a capability that must be configured and managed, as it’s designed for deployment by an IT team within a corporate setting. For true end-to-end encryption through Gmail, you must sign up for Google’s most expensive Workspace plan—one designed for large enterprise businesses.
The report highlights that as consumers, we ain’t got time (or money) for that.
According to the latest update, the main goal is to keep more of your messages private, to reduce what could be leaked or stolen. For everyday users, using end-to-end encryption email with a well-known, trusted service is sufficient.
In a fresh development, if you need airtight privacy, pay attention to what an EE2E email provider says it doesn’t encrypt. Maybe that’s subject lines. Maybe that’s the email addresses of those sending and receiving messages. But EE2E email is only as good as its implementation—and even then, it can only extend so far depending on the system.
According to the latest update, (And again, using an EE2E email service doesn’t provide that level of encryption if you’re emailing with someone using a non-EE2E provider.).
As part of the ongoing story, also: Encrypted email (be it at rest + in transit, or EE2E) won’t protect you from someone with access to the message taking a screenshot or photo.
In a fresh development, all are based in Europe, either Germany or Switzerland—countries with stronger data protection laws. As consumers, several known services exist for end-to-end encrypted email.
As part of the ongoing story, most people will want to focus on these two when choosing an EE2E email provider. Of the four most-discussed options, just two make the experience simple: Proton and Tuta.
In a fresh development, i’ve skipped diving into them, as I don’t believe they’re as helpful for most people. For Posteo, you have to go hands-on for encryption setup. And how Mailbox.org handles encryption and email address recycling feel behind its rivals. As for the other two—Posteo and Mailbox.org—they require more manual interaction or attention to caveats.
The report highlights that feels most like Gmail(And lets you keep your Gmail address too).
As part of the ongoing story, still, this basic plan offers the same approach to encryption as paid subscriptions, which start at $48 USD per year. You can use Proton Mail for free—though with a pretty heavy limit on storage (1GB).
In a fresh development, some will feel familiar if you’re coming from Google: calendars, cloud storage (5GB for free users), document editor, spreadsheet editor, password manager, and video conferencing. You also get access to Proton’s VPN and crypto wallet services. Mechanics are limited for free accounts but still usable. Signing up for Proton Mail also opens up access to a full suite of apps.
The report highlights that you can link your Proton Mail account to Gmail, which lets you import your email and then continue to pull in fresh email sent to your Gmail address.
As part of the ongoing story, for non-Proton users, you get EE2E after trading PGP keys with them. Proton also offers the option of sending self-destructive, password-protected email, which is only viewable by a recipient via a link to a Proton webpage. End-to-end encryption applies to mail sent to other Proton addresses automatically.
The report highlights that email may be encrypted in transit if the other side supports TLS. Email may also be encrypted at rest on the other end if supported. The major difference is that Proton can’t look through the email saved in your inbox, only individual messages as they come and go. Encryption between Proton and other email providers works similar to Google and Microsoft.
According to the latest update, but Proton also says the chances of that information being shared from its end is low, due to Swiss law. The only unencrypted data, even for EE2E messages: Subject lines, which Proton says is for technical compatibility reasons.
The report highlights that and EU law enforcement, nor compelled to widely monitor users. However, Swiss authorities can still compel Proton to share identifying information about a user. Your email will stay secured, but details like your IP address and billing information could become fair system update—and shared with other foreign jurisdictions. Speaking of: Proton likes to tout its Swiss roots as a privacy benefit, saying it can’t be forced to share data with U.S.
In a fresh development, like Proton, you can use Tuta as a free user, with a limit of 1GB storage. Paid plans start at €36 per year (roughly $41 USD). Tuta may not be as well-known as Proton among most people, but it’s often mentioned in the same breath when internet users ask about EE2E email services.
The report highlights that its cloud storage app (“Tuta Drive”) will exit closed beta in a few months. Free users are limited to just one email address, one calendar, and three labels for their mail. Tuta currently offers just mail and calendar services to all users.
As part of the ongoing story, it also applies to your mailbox, calendar, and address book. Tuta does admit to one caveat, however. Your email address (and those you’ve traded mail with) are unencrypted. End-to-end encryption on Tuta’s end applies to all email exchanged with fellow Tuta users.
Industry observers note that tuta’s unique spin on this method allows for a single password to apply to all EE2E email sent to a particular external contact, which makes the experience simpler for the other person. (And also more likely for them to get on board with the system.). When sending email to non-Tuta users, you can maintain end-to-end encryption by adding a password to the email.
According to the latest update, messages will get encryption in transit if the other side supports TLS. Email will also be encrypted at rest on the other end if supported, but during the handoff (and likely after, for the other party’s side), both Tuta and the other email provider will be able to see your messages. Otherwise, shooting off an email to a non-Tuta email address will only be partially encrypted once it leaves Tuta’s servers.
According to the latest update, one is you care less about where your encrypted email provider is located, since Germany’s data privacy laws are functionally similar to Switzerland’s. Another is that you prefer Tuta’s more streamlined approach to mail and slightly lower cost per year. Why choose Tuta over Proton, when Proton has a more robust ecosystem of services?
According to the latest update, since joining the team in 2016, she’s written about CPUs, Windows, PC building, Chrome, Raspberry Pi, and much more—while also serving as PCWorld’s resident bargain hunter (#slickdeals). Currently her focus is on security, helping people understand how best to protect themselves online. Her work has previously appeared in PC Gamer, IGN, Maximum PC, and Official Xbox Magazine. A 15-year veteran of technology and video platform releases journalism, Alaina Yee covers a variety of topics for PCWorld.