Confidential Mode (All Users): Send emails that expire, require SMS passcodes, and block forwarding or printing—great for basic privacy control
TLS Encryption (Default): Gmail uses TLS by default to protect emails during transit, but it doesn't secure the content after delivery
S/MIME Encryption (Workspace): For Google Workspace users, S/MIME encrypts content with digital certificates—both sender and recipient must enable it
Client-Side Encryption (CSE): Available in select Workspace tiers, CSE encrypts emails before sending—Google can’t see the content at all
Third-Party Tools (All Users): Extensions like Virtru, Mailvelope, and Trustifi add end-to-end encryption, great for standard Gmail users needing extra security
Mobile Encryption: On Android or iOS, use Confidential Mode via the Gmail app by tapping the three-dot menu in compose mode
Limitations to Note: Confidential Mode isn’t true encryption. For stronger privacy, use CSE or trusted third-party plugins with verified recipient tools