Encrypt email messages

When you need to protect the privacy of an email message, encrypt it. Encrypting an email message in Outlook means it's converted from readable plain text into scrambled cipher text. Only the recipient who has the private key that matches the public key used to encrypt the message can decipher the message for reading. Any recipient without the corresponding private key, however, sees indecipherable text. Outlook supports two encryption options:

1. S/MIME encryption - To use S/MIME encryption, the sender and recipient must have a mail application that supports the S/MIME standard. Outlook supports the S/MIME standard

2. Microsoft 365 Message Encryption (Information Rights Management) - To use Microsoft 365 Message Encryption, the sender must have Microsoft 365 Message Encryption, which is included in the Office 365 Enterprise E3 license.

New Encrypt button and updates to email encryption

With the new Office update, email encryption in Outlook got better.

This feature is available only to Microsoft 365 Subscribers for Windows desktop clients.

• The Permissions button is replaced with the Encrypt button .

• The new Encrypt button contains both encryption options (S/MIME and IRM). The S/MIME option is only visible if you have S/MIME certificate configured in Outlook.

  For detailed instructions on adding encryption check Encrypting with S/MIME or Encrypt with Microsoft 365 Message Encryption.

Newer versions Office 2010



Encrypting with S/MIME

Before you start this procedure, you must first have added a certificate to the keychain on your computer. Once you have your signing certificate set up on your computer, you'll need to configure it in Outlook.

1. Under the File menu, select Options > Trust Center > Trust Center Settings.

2. In the left pane, select Email Security.

3. Under Encrypted email, choose Settings.

4. Under Certificates and Algorithms, click Choose and select the S/MIME certificate.

5. Choose OK

6. If you are an Office Insider with Microsoft 365 subscription, here's what is new to you:

   In an email message, choose Options, select Encrypt and pick Encrypt with S/MIME option from the drop down,

   You'll see an Encrypt with S/MIME if you have an S/MIME certificate installed on your computer.

   For Outlook 2019 and Outlook 2016,

   In an email message, choose Options, select Permissions.

7. Finish composing your email and then choose Send.

Encrypt with Microsoft 365 Message Encryption

• If you are a Microsoft 365 subscriber, here is what is new to you:

  In an email message, choose Options, select Encrypt and pick the encryption that has the restrictions you want to enforce, such as Encrypt-Only or Do Not Forward.

  

  Note: Microsoft 365 Message Encryption is part of the Office 365 Enterprise E3 license. Additionally, the Encrypt-Only feature (the option under the Encrypt button) is only enabled for subscribers (Microsoft 365 Apps for enterprise users) that also use Exchange Online.

• For Outlook 2019 and 2016,

  In an email message, select Options > Permissions and pick the encryption option that has the restrictions you'd like to enforce, such as Do Not Forward.

Encrypt a single message

1. In message that you are composing, click File > Properties.

2. Click Security Settings, and then select the Encrypt message contents and attachments check box.

3. Compose your message, and then click Send.

Encrypt all outgoing messages

When you choose to encrypt all outgoing messages by default, you can write and send messages the same as with any other messages, but all potential recipients must have your digital ID to decode or view your messages.

1. On the File tab. choose Options >Trust Center > Trust Center Settings.

2. On the Email Security tab, under Encrypted email, select the Encrypt contents and attachments for outgoing messages check box.

3. To change additional settings, such as choosing a specific certificate to use, click Settings.

Support for Office 2010 ended on October 13, 2020

Upgrade to Microsoft 365 to work anywhere from any device and continue to receive support.

Upgrade now

Encrypt a single message

1. In the message that you're composing, on the Options tab, in the More Options group, click the dialog box launcher in the lower-right corner.

2. Click Security Settings, and then select the Encrypt message contents and attachments check box.

3. Compose your message, and then click Send.

Encrypt all outgoing messages

When you choose to encrypt all outgoing messages by default, you can write and send messages the same as you do with any other messages. All potential recipients, however, must have your digital ID to decode or view those messages.

1. On the File tab, click Options > Trust Center > Trust Center Settings.

2. On the E-mail Security tab, under Encrypted e-mail, select the Encrypt contents and attachments for outgoing messages check box.

3. To change additional settings, such as choosing a specific certificate to use, click Settings.