Encrypting Email Messages in Outlook/Office 365

Summary

How to encrypt email messages in Office 365/Outlook.

Body

Why Encrypt?

When you need to protect the privacy of an email message, encrypt it. To protect sensitive information, LSCPA now blocks unencrypted emails that contain personal data such as:

  • Full name + Social Security Number

  • Driver’s License Number

  • Financial Account Information

Encrypting an email message in Outlook means it's converted from readable plain text into scrambled cipher text. Only the recipient who has the private key that matches the public key used to encrypt the message can decipher the message for reading. Any recipient without the corresponding private key, however, sees indecipherable text.

Send a Protected (Encrypted) Message

Outlook 2016 or Newer (Desktop Version)

  1. Open a new email.

  2. Go to Options > Permissions.

  3. Select Encrypt-Only.

    This ensures the message is encrypted but allows forwarding unless further restrictions are applied.
     

Figure 1: Selecting Encrypt-Only Permissions on Message
Screen capture of how to set encrypt-only setting in Outlook desktop message

Outlook Web App (OWA)

  1. Compose a new email.

  2. Click Options > Encrypt.

  3. Then click Encrypt again.

    Additional options include Do Not Forward and Confidential labels

Figure 2: Selecting Encrypt-Only Permissions on Message
Screen capture of how to set encrypt-only setting in Outlook web app message

Outlook Mobile App

⚠️ Note: Encryption and message protection are not available natively in the Outlook Mobile App.

Reading a Protected Message

When you send an encrypted message, recipients will see a secure message notification (see Figure 3). Only the intended recipients can view the message.

  • Microsoft/Office 365 users (Outlook 2016+, OWA, Outlook Mobile):
    Can open the message directly - no extra steps required.

  • Gmail users:
    Will be prompted to sign into their Google account to view the message.

  • Other email providers:
    Will be redirected to a secure page to enter a single-use verification code.

Figure 3: Protected Message Notification
Screen shot of recipient notification for encrypted message