Adding a layer of security to your Outlook messages involves configuring encryption options within the program. Understanding how to encrypt in Outlook is essential for protecting sensitive information like financial data, legal documents, or personal details. This guide walks you through the process step by step, covering both desktop and web versions.
Email encryption ensures that only the intended recipient can read your message. Without encryption, your email travels across the internet in plain text, vulnerable to interception. Outlook offers built-in encryption tools, but they require proper setup. Let’s get started.
What Is Email Encryption In Outlook?
Email encryption scrambles your message content so that only someone with the correct decryption key can read it. Outlook supports two main encryption methods: S/MIME (Secure/Multipurpose Internet Mail Extensions) and Office 365 Message Encryption (OME). S/MIME uses digital certificates, while OME relies on Azure Rights Management.
For most users, OME is simpler because it doesn’t require certificates. However, S/MIME offers stronger end-to-end security. Your choice depends on your organization’s policies and your technical comfort level.
How To Encrypt In Outlook
This section covers the exact steps for encrypting emails in Outlook. Whether you use Outlook 365, Outlook 2019, or Outlook on the web, the process is similar but with slight variations.
Prerequisites For Encryption
Before you encrypt, ensure you have the following:
- A Microsoft 365 subscription (for OME)
- A digital certificate (for S/MIME) – often provided by your IT department
- Outlook configured with your email account
- The recipient’s email address and their encryption capability
If you’re using a work or school account, your administrator may already have encryption enabled. For personal accounts, you might need to purchase a certificate or use a third-party service.
Encrypting With Office 365 Message Encryption (OME)
OME is the easiest method for most users. Here’s how to use it:
- Open Outlook and create a new email message.
- Click the “Options” tab in the message window.
- Look for the “Encrypt” button in the “Permission” group.
- Click “Encrypt” and select the appropriate option (e.g., “Encrypt-Only” or “Do Not Forward”).
- Compose your message and send it as usual.
The recipient will receive a link to view the encrypted message in a secure web portal. They may need to sign in with a Microsoft account or a one-time passcode.
Encrypting With S/MIME Digital Certificates
S/MIME requires a digital certificate installed on your computer. Follow these steps:
- Obtain a digital certificate from a trusted authority (like GlobalSign or DigiCert) or your IT department.
- Install the certificate on your computer.
- In Outlook, go to File > Options > Trust Center > Trust Center Settings.
- Click “Email Security” and under “Encrypted email,” select your certificate.
- When composing a message, click the “Options” tab and then the “Encrypt” button (it may show a lock icon).
- Send the message. The recipient must also have a valid certificate to read it.
S/MIME encryption is more secure but less convenient because both parties need certificates. It’s commonly used in corporate environments.
Encrypting In Outlook On The Web
If you use Outlook in a browser, encryption is also available:
- Sign in to Outlook.com or your work webmail.
- Click “New message” to compose an email.
- Click the three dots (More options) in the toolbar.
- Select “Show message options.”
- Under “Permission,” choose “Encrypt” or “Do Not Forward.”
- Send your message.
Note that encryption in Outlook on the web uses OME by default. You cannot use S/MIME in the browser version.
Common Encryption Issues And Fixes
Encryption sometimes fails or causes confusion. Here are frequent problems and solutions:
Recipient Cannot Open Encrypted Email
If the recipient sees an error or blank message, try these fixes:
- Ensure they have a compatible email client (Outlook, Gmail, etc.)
- For OME, check that they received the secure link and can access it
- For S/MIME, verify they have your public certificate installed
- Ask them to try a different browser or device
Encrypt Button Is Grayed Out
This usually means encryption isn’t enabled for your account. Solutions include:
- Contact your IT administrator to enable OME
- Install a digital certificate if using S/MIME
- Update Outlook to the latest version
- Check if your email account supports encryption
Certificate Errors
If you see certificate warnings, the issue might be:
- The certificate has expired – renew it
- The certificate is not trusted by the recipient – use a widely trusted authority
- The certificate is not properly installed – reinstall it
Best Practices For Email Encryption
To make encryption work smoothly, follow these guidelines:
- Always encrypt sensitive data like passwords, financial info, or legal documents
- Test encryption with a colleague or friend before sending critical messages
- Keep your digital certificate private and secure
- Update your certificate before it expires
- Use strong passwords for your email account
- Consider using two-factor authentication for extra security
Encryption doesn’t protect against all threats. It only secures the message content, not metadata like subject lines or attachments in some cases. For maximum security, combine encryption with other practices like secure file sharing.
Advanced Encryption Options
For power users, Outlook offers additional encryption features:
Digital Signatures
A digital signature verifies that the email came from you and wasn’t altered. It’s often used with encryption. To add a signature:
- In the message window, click “Options” > “Sign” (or “Digital Signature”).
- Select your certificate if prompted.
- Send the message. The recipient will see a signed icon.
Rights Management
Office 365 includes Azure Information Protection, which lets you restrict actions like forwarding, printing, or copying. To use it:
- Click “Options” > “Permission” > “Manage Credentials.”
- Select a template (e.g., “Confidential” or “Do Not Forward”).
- Send the email. The recipient’s actions are controlled by the template.
Third-Party Encryption Tools
If Outlook’s built-in options don’t meet your needs, consider third-party add-ins like:
- Virtru – easy-to-use encryption with tracking
- Proofpoint – enterprise-grade security
- Zix – popular in healthcare and finance
These tools often integrate directly into Outlook and provide additional features like expiration dates and revokation.
Frequently Asked Questions
How Do I Encrypt An Email In Outlook 365?
In Outlook 365, click “Options” in the message window, then “Encrypt.” Choose your encryption level and send. The recipient will get a secure link to view the message.
Can I Encrypt Emails In Outlook Without A Certificate?
Yes, if you have a Microsoft 365 subscription. Use Office 365 Message Encryption (OME), which doesn’t require certificates. Just click the Encrypt button.
Why Is My Outlook Encrypt Button Missing?
The encrypt button may be hidden if your account doesn’t have encryption enabled. Contact your IT administrator or check your subscription. In some versions, you need to enable it in settings.
Does Outlook Encryption Work With Gmail?
OME encryption works with any email provider because the recipient views the message in a web portal. S/MIME requires both parties to have certificates, which is less common with Gmail.
How Do I Know If My Outlook Email Is Encrypted?
Look for a lock icon or “Encrypted” label in the message header. You can also check the message properties: open the email, click File > Properties, and look for “Security” details.
Final Thoughts On Outlook Encryption
Encrypting your emails in Outlook is a straightforward process once you understand the options. Start with OME if you have a Microsoft 365 account, as it requires no certificates. For higher security, use S/MIME with digital certificates. Always test your encryption before sending important messages.
Remember that encryption is just one part of email security. Keep your software updated, use strong passwords, and be cautious with attachments. By following the steps in this guide, you can protect your communications from prying eyes.
If you encounter issues, refer to the troubleshooting section or contact your IT support. With practice, encrypting emails will become second nature, giving you peace of mind when sharing sensitive information.