Sending a sensitive file to a trusted colleague or family member feels routine, but standard email is like sending a postcard — it can be read along the way. Even with a trusted recipient, the risk isn't the person, it's the process.
Password-Protect The Document Itself
Before you even think
about the email, lock down the file. Most office applications, including Microsoft Word and Adobe Acrobat for PDFs, have built-in encryption tools. You can add a password that will be required to open the document. This means that even if the email is intercepted, the attachment remains unreadable. The crucial second step is to share the password through a different, secure channel. Never send the password in the same email or even a follow-up email. Instead, use a secure messaging app like Signal, or simply call or text the recipient with the password. This separates the key from the lock, making it much harder for an unauthorized person to gain access.
Use Your Email Client’s Built-In Encryption
Major email providers have started offering features to make sending messages more secure. Gmail has 'Confidential Mode,' which allows you to set an expiration date for the message and can require a passcode sent via SMS to the recipient's phone. It also restricts the recipient from forwarding, copying, or downloading the content. Outlook, particularly with a Microsoft 365 subscription, offers an 'Encrypt' option. This uses Microsoft Purview Message Encryption to protect the email's contents, often requiring the recipient to sign in to view the message through a secure web portal. While not true end-to-end encryption, these features add a significant layer of security over a standard email.
Share a Secure Link, Not a File
Attaching a document directly to an email is often less secure than sharing a link from a reputable cloud storage service. Services like Google Drive, Dropbox, and Microsoft OneDrive allow you to upload your document and then share a link with your recipient. This gives you greater control. You can configure the link to be accessible only to specific people, requiring them to log in to their account to view it. You can also set permissions to 'view only,' preventing them from editing or downloading the file. For added security, many services allow you to set an expiration date for the link, after which it will no longer work.
Compress and Encrypt with a ZIP File
A time-tested method is to place your document inside a passwordprotected ZIP file. Most operating systems have builtin tools to create ZIP archives, and free software like 7Zip offers robust encryption options. When creating the archive, you can set a strong password. This bundles and encrypts the file before it is ever attached to the email. As with protecting a document directly, the same rule applies: send the password through a separate communication channel. This method is crossplatform compatible, meaning your recipient will almost certainly be able to open it regardless of their device or operating system.
Consider Endtoend Encrypted Platforms
For maximum security, especially when sharing highly sensitive information, it may be best to move the conversation off traditional email altogether. Endtoend encrypted email services like Proton Mail and Tuta (formerly Tutanota) are designed so that no one, not even the company running the service, can read your messages. Similarly, secure messaging apps like Signal provide endtoend encryption for both messages and file transfers. Using one of these platforms ensures that from the moment you hit send until your recipient opens it, the information is completely unreadable to outsiders.
DoubleCheck the Recipient’s Address
The most advanced encryption in the world won't help if you send a document to the wrong person. Human error remains a major risk in data security. A simple typo in an email address, especially with autoComplete features suggesting similar contacts, can lead to a significant data breach. Before you click send on any email containing sensitive information, take a moment to pause and verify that the address in the 'To' field is exactly correct. It is a simple, lowtech habit that can prevent a hightech disaster.
