Encrypted Email: How to Send Messages No One Else Can Read

Why Email Encryption Matters

Standard email is sent in plain text across multiple servers. Your ISP, email provider, and any network between you and the recipient can potentially read your messages. For sensitive communications — legal matters, medical information, financial details, or confidential business — this is unacceptable.

Consider how much sensitive information passes through your inbox: tax documents, bank statements, medical results, contracts, private conversations. If any of these messages were intercepted or your email account was breached, the consequences could range from embarrassing to financially devastating. Email encryption eliminates this risk by ensuring only the intended recipient can read your messages.

How Email Encryption Works

At its core, email encryption uses mathematical algorithms to scramble your message into unreadable text. Only someone with the correct decryption key can convert it back into the original message. There are two main approaches: encrypting the connection between email servers, and encrypting the message itself end-to-end.

Types of Email Encryption

Transport Encryption (TLS)

Most email providers now encrypt emails in transit between servers using TLS. This prevents eavesdropping during transmission but does NOT prevent the email provider from reading your messages. Gmail, Outlook, and Yahoo all use TLS. Think of TLS as an armored truck carrying a postcard — the message is protected during delivery, but anyone at the pickup or drop-off point can read it.

End-to-End Encryption (E2EE)

The gold standard. Messages are encrypted on your device and can only be decrypted by the recipient. Not even the email provider can read them. Requires both sender and recipient to use compatible systems. This is the equivalent of sending a locked box where only the recipient has the key — nobody in between can access the contents.

PGP/GPG Encryption

Pretty Good Privacy (PGP) and its open-source implementation GNU Privacy Guard (GPG) are the traditional method for end-to-end email encryption. You create a public/private key pair, share your public key, and others use it to encrypt messages that only your private key can decrypt. PGP has been the standard for decades and remains extremely secure, but it requires technical knowledge to set up and manage keys properly.

Easiest Options for Encrypted Email

ProtonMail

The most user-friendly encrypted email service:

• End-to-end encryption between ProtonMail users automatically
• Can send encrypted messages to non-ProtonMail users via password-protected links
• Based in Switzerland with strong privacy laws
• Open source and independently audited
• Free tier available with 1 GB of storage
• Includes ProtonCalendar, ProtonVPN, and ProtonDrive in paid plans

Tutanota

German-based alternative to ProtonMail:

• End-to-end encryption for all messages between Tutanota users
• Encrypted external messages via shared password
• Encrypted calendar and contacts
• More affordable than ProtonMail
• Also open source and independently audited

Apple Mail Privacy Protection

If you use Apple devices, Mail Privacy Protection hides your IP address and blocks tracking pixels. While not full encryption, it significantly improves email privacy. For actual end-to-end encryption, combine Apple Mail with S/MIME certificates or use a dedicated encrypted email service.

When to Use Encrypted Email

Consider encrypted email for:

• Legal communications
• Medical and health information
• Financial documents and tax information
• Sensitive business discussions
• Journalist-source communications
• Any information that could cause harm if exposed
• Sharing passwords or access credentials (though a password manager is preferable for ongoing sharing)

Encrypted Email for Businesses

Organizations handling sensitive data should consider implementing email encryption at the company level:

• Microsoft 365 Message Encryption — Built into enterprise Microsoft 365 plans, allows sending encrypted messages to anyone
• Google Workspace Client-Side Encryption — Available for enterprise Google Workspace customers
• Gateway encryption services — Solutions like Virtru or Zix that add encryption to existing email systems without changing providers

For businesses in regulated industries like healthcare (HIPAA), finance (SOX, PCI-DSS), or legal services, email encryption may not just be a best practice — it may be a legal requirement.

Common Mistakes to Avoid

• Encrypting the message but not the subject line — Some encrypted email services do not encrypt subject lines. Avoid putting sensitive details in the subject
• Forgetting about attachments — Make sure your encryption covers attachments too, not just the message body. Strip metadata from attached images using our metadata remover before sending
• Weak account passwords — End-to-end encryption is meaningless if your account password is "password123." Use our Password Generator to create a strong, unique password for your encrypted email account
• Not verifying recipient identity — Encryption protects the content in transit, but it does not confirm who is on the other end. Verify the recipient through a separate channel before sending highly sensitive information

Quick Start Guide

The fastest path to encrypted email:

1. Create a ProtonMail account for sensitive communications
2. Enable two-factor authentication immediately
3. Use ProtonMail for important emails — keep your regular email for newsletters and low-sensitivity communication
4. Protect your ProtonMail password with our Password Generator — if this password is compromised, your encrypted email is too
5. Practice sending encrypted emails to a friend or colleague so the process feels natural before you need it for something urgent
6. Back up your recovery phrase in a secure, offline location — if you lose access to your account, encrypted emails cannot be recovered without it

The Bottom Line

Email encryption does not have to be complicated. Even partial adoption dramatically improves your communication privacy. You do not need to encrypt every newsletter subscription or casual conversation — focus on the messages that matter most. Starting with a free ProtonMail or Tutanota account takes minutes and immediately protects your most sensitive communications from interception, data breaches, and unauthorized access.