How to Encrypt an Email in Outlook: Your Guide for Secure Communication

Email encryption protects your messages from unauthorized access. When you encrypt an email in Outlook, only the intended recipient can read it. This guide shows you exactly how to encrypt emails in Outlook using built-in tools and third-party options.

Why Email Encryption Matters

Regular emails travel across the internet like postcards. Anyone with the right access can read them. Encryption scrambles your message into unreadable code. Only someone with the correct key can decode it.

You need encryption when sending:

• Financial information
• Medical records
• Legal documents
• Business contracts
• Personal identification numbers
• Confidential company data

Outlook Encryption Options

Outlook offers two main encryption methods:

S/MIME (Secure/Multipurpose Internet Mail Extensions)

• Built into Outlook
• Requires digital certificates
• Works across different email platforms
• Industry standard for businesses

Microsoft 365 Message Encryption (OME)

• Cloud-based solution
• Requires Microsoft 365 subscription
• Recipient doesn’t need special software
• Works with any email provider

The method you choose depends on your Outlook version, subscription, and recipient’s capabilities.

How to Encrypt Email in Outlook Using S/MIME

Step 1: Obtain a Digital Certificate

Before encrypting with S/MIME, you need a digital certificate. Think of it as a digital ID card.

Getting a Certificate:

1. Purchase from a Certificate Authority like DigiCert or GlobalSign
2. Request from your IT department (if corporate email)
3. Use a free certificate from Comodo or similar providers

Most organizations provide certificates to employees. Contact your IT team first.

Step 2: Install Your Digital Certificate

On Windows:

1. Open the certificate file you received (usually .p12 or .pfx format)
2. Click “Install Certificate”
3. Choose “Current User”
4. Select “Automatically select the certificate store”
5. Click “Next” then “Finish”

On Mac:

1. Double-click the certificate file
2. Enter your Mac password when prompted
3. The certificate installs in Keychain Access
4. Verify it appears under “My Certificates”

Step 3: Configure Outlook for S/MIME

Outlook Desktop (Windows/Mac):

1. Open Outlook
2. Go to File > Options > Trust Center
3. Click “Trust Center Settings”
4. Select “Email Security“
5. Under “Encrypted email,” click “Settings”
6. Name your security setting (example: “My Encryption”)
7. Choose your certificate from the dropdown
8. Click “OK” to save

Outlook Web (Outlook.com):

1. Click the gear icon (Settings)
2. Select “View all Outlook settings”
3. Go to Mail > S/MIME
4. Toggle “Encrypt messages” to On
5. Select your certificate

Step 4: Send an Encrypted Email

Desktop Version:

1. Click “New Email”
2. Write your message
3. Click “Options” tab in the ribbon
4. Click “Encrypt” button
5. Choose “Encrypt with S/MIME”
6. Add recipient and send

Web Version:

1. Start composing a new email
2. Click the lock icon (encryption) at the top of the message
3. Select “Encrypt”
4. Complete and send your message

The recipient needs your public key to read the message. Outlook exchanges keys automatically when you first email someone without encryption.

How to Encrypt Email Using Microsoft 365 Message Encryption

This method works if you have a Microsoft 365 Business or Enterprise subscription.

Setting Up OME

Your administrator must enable OME first. Most business accounts have it pre-configured.

To Check if OME is Available:

1. Compose a new email
2. Click “Options” tab
3. Look for “Encrypt” button
4. If present, OME is enabled

Sending an Encrypted Email with OME

Method 1: Using the Encrypt Button

1. Create new email
2. Click “Options” tab
3. Click “Encrypt”
4. Choose “Encrypt-Only” or “Do Not Forward”
5. Send your message

Method 2: Using Sensitivity Labels

1. Compose new email
2. Click “Sensitivity” button in the ribbon
3. Select a label with encryption (example: “Confidential”)
4. Send the email

What Recipients See

When someone receives your OME-encrypted email:

Microsoft 365 Users:

• Open normally in their inbox
• Automatic decryption

Gmail/Yahoo/Other Providers:

• Receive email with instructions
• Click “Read the message”
• Sign in with email account or use one-time passcode
• Read message in secure portal

Encrypting Emails in Outlook Mobile App

iOS and Android:

1. Open Outlook app
2. Tap compose (pen icon)
3. Tap three dots (more options)
4. Select “Switch to Outlook”
5. Tap shield icon
6. Choose encryption level
7. Complete and send

S/MIME works in mobile apps if your certificate is installed on the device. OME works automatically if enabled on your account.

Comparing Encryption Methods

Feature	S/MIME	Microsoft 365 OME
Cost	Certificate fee (varies)	Included with Microsoft 365
Setup Complexity	Moderate	Easy
Recipient Requirements	Must have certificate	Any email address
Cross-Platform	Yes	Yes
Business Use	Excellent	Excellent
Personal Use	Good	Limited (needs subscription)
Offline Access	Yes	No
Best For	Regular secure communication	Occasional sensitive emails

Troubleshooting Common Encryption Issues

Problem: Encrypt Button is Grayed Out

Solution:

• Verify certificate is installed correctly
• Check certificate hasn’t expired
• Ensure you have recipient’s public key
• Try restarting Outlook

Problem: Recipient Can’t Open Encrypted Email

Solution:

• Confirm they have required certificate (S/MIME)
• Send instructions for one-time passcode (OME)
• Check their email provider supports encryption
• Verify certificate matches email address exactly

Problem: Certificate Not Appearing in Outlook

Solution:

• Reinstall certificate
• Import to correct certificate store
• Check certificate is for email use
• Contact certificate provider

Problem: Encryption Works But Signing Fails

Solution:

• Install both encryption and signing certificates
• Verify certificate includes signing capability
• Check certificate trust chain
• Update Outlook to latest version

Best Practices for Email Encryption

Exchange Public Keys First

Send a regular (unencrypted) email to your recipient first. This exchanges public keys automatically. Future encrypted emails work smoothly.

Verify Recipient Email Addresses

Encryption ties to specific email addresses. Double-check addresses before sending. A typo means the wrong person might get the decryption key.

Keep Certificates Updated

Certificates expire. Mark calendar reminders 30 days before expiration. Renew promptly to avoid disruption.

Test Before Important Messages

Send yourself an encrypted test email. Verify you can decrypt and read it. This confirms everything works correctly.

Use Encryption Selectively

Don’t encrypt every email. Save it for sensitive information. Overuse frustrates recipients and wastes time.

Backup Your Certificates

Export and securely store your private key. If you lose device access, you can still decrypt old emails.

Combine with Other Security

Encryption protects email content. Also use:

• Strong passwords
• Two-factor authentication
• Updated antivirus software
• Secure internet connections

Alternative Email Encryption Tools

If built-in Outlook encryption doesn’t meet your needs, consider these options:

ProtonMail

End-to-end encrypted email service. Works with Outlook through ProtonMail Bridge. Requires subscription. Good for maximum privacy.

Virtru

Plugin for Outlook. Easy encryption with access controls. You can revoke access after sending. Works across platforms. Learn more about email security best practices from CISA.

Mailvelope

Free browser extension. Uses OpenPGP standard. Works with Outlook Web. Open-source option for basic encryption needs.

GPG (GNU Privacy Guard)

Free encryption tool. More technical setup. Maximum control and security. Best for tech-savvy users.

Legal and Compliance Considerations

Certain industries must encrypt emails by law:

Healthcare (HIPAA)

• Encrypt patient information
• Use HIPAA-compliant encryption
• Document encryption practices

Finance (GLBA, SOX)

• Protect customer financial data
• Encrypt transaction details
• Maintain encryption audit logs

Legal (Attorney-Client Privilege)

• Encrypt sensitive case information
• Protect client communications
• Use verified encryption methods

Check your industry regulations. Your organization’s compliance team can guide specific requirements.

Quick Encryption Reference

Scenario	Recommended Method	Setup Time	Cost
Corporate email	S/MIME	30 minutes	Employer-provided
Microsoft 365 user	OME	5 minutes	Subscription included
Maximum security needed	S/MIME	30 minutes	$20-$200/year
Occasional sensitive emails	OME	5 minutes	Subscription included
Cross-platform regular use	S/MIME	30 minutes	$20-$200/year
No Microsoft 365	S/MIME or third-party	30-60 minutes	Varies

Frequently Asked Questions

Can I Encrypt Emails in Free Outlook Accounts?

Yes, but with limitations. Outlook.com (free) supports S/MIME if you have a digital certificate. You cannot use Microsoft 365 Message Encryption without a paid subscription. Purchase a certificate from a provider like DigiCert or use alternative encryption tools like Mailvelope for free options.

Does the Recipient Need Outlook to Read Encrypted Emails?

Not always. S/MIME recipients need compatible email software with certificates installed, but most modern email clients support it. OME recipients can read messages through any web browser using a one-time passcode. They don’t need Outlook specifically. The Microsoft support documentation explains compatibility in detail.

What Happens If My Certificate Expires?

Expired certificates stop working immediately. You cannot send encrypted emails with an expired certificate. Recipients cannot decrypt messages you sent earlier with that certificate. Renew certificates before expiration. Set calendar reminders 60 days and 30 days prior. Most certificate providers send expiration warnings.

Is Email Encryption Legal Everywhere?

Email encryption is legal in most countries including the United States, Canada, European Union, and Australia. Some countries restrict or monitor encryption use. China, Russia, and some Middle Eastern countries have regulations. Check local laws if sending internationally to restricted regions. Business travelers should verify laws before using encryption abroad.

Can Encrypted Emails Be Hacked?

Strong encryption (AES-256 used in S/MIME and OME) is extremely difficult to break. Hackers typically attack weak points like stolen certificates, compromised passwords, or social engineering. Protect your private key. Use strong passwords. Enable two-factor authentication. Keep software updated. Encryption itself remains secure, but overall security depends on good practices.

Conclusion

Email encryption in Outlook protects sensitive information from unauthorized access. You have two main options: S/MIME for regular secure communication with certificate-based encryption, or Microsoft 365 Message Encryption for simpler cloud-based protection.

Start with these steps:

1. Determine which encryption method fits your needs
2. Obtain and install required certificates or verify OME access
3. Configure Outlook settings for encryption
4. Test with a sample message
5. Train yourself and recipients on proper use

Encryption adds seconds to your workflow but provides significant security benefits. Use it whenever sending financial data, medical information, legal documents, or confidential business details.

The initial setup takes 30 minutes or less. After that, encrypting emails becomes second nature. Your sensitive information deserves this protection. Start encrypting today.