We all want our private emails to stay private. But with terms like 'confidential' and 'encrypted' thrown around, it's easy to assume we're more protected than we are. Many built-in privacy features offer more convenience than true security.
The Postcard vs. The Sealed Letter
Think of a
standard email like a postcard. As it travels across the internet from one server to another, its contents can be visible to those handling it. Most major email providers, like Gmail and Outlook, use Transport Layer Security (TLS) to protect your email while it's in transit between servers. This is like putting the postcard in a transparent tube while it's on the delivery truck. It's protected from being read on the journey, but once it arrives at the email provider's server, it is often stored in a readable format. This means the provider itself can access the content. While this helps them scan for spam or enable 'smart features', it’s not truly private.
Decoding 'Confidential Mode'
Features like Gmail's 'Confidential Mode' sound secure, but the name is misleading. This feature allows you to set an expiration date for a message and can prevent the recipient from easily forwarding, copying, printing, or downloading the content. However, it is not end-to-end encrypted. Google can still read the email. The restrictions it applies only work perfectly within the Gmail interface; a recipient using a different email client might not be restricted in the same way. More importantly, nothing stops someone from simply taking a screenshot of the message. Think of it as a request not to share, rather than a technical barrier preventing it.
The Gold Standard: End-to-End Encryption
True email privacy comes from end-to-end encryption (E2EE). With E2EE, a message is scrambled on your device and can only be unscrambled by the intended recipient. No one in between—not your internet provider, not the email company, not a hacker who breaches the server—can read the content. Services like Proton Mail are built around this principle, offering E2EE by default. This is the digital equivalent of a securely sealed letter, where only the recipient has the key to open it. While standard services like Gmail can be configured with E2EE using add-ons or specific enterprise-level settings like S/MIME, it's not the default for the average user.
Practical Steps for Smarter, Safer Emailing
Assuming every email could be read by someone else is the safest starting point. For truly sensitive information—financial records, legal matters, health data—avoid standard email altogether. Instead, use a dedicated E2EE email provider or a secure messaging app like Signal. For less sensitive but still private conversations on standard email, practice good digital hygiene. Be mindful of what you put in the subject line, as metadata (who you email, when, and the subject) is typically not encrypted. Using passwordstetected links for file sharing can add a layer of security, as long as you share the password through a separate, secure channel. Finally, enable twondfactor authentication on your email account. This won't encrypt your messages, but it makes it much harder for someone to gain unauthorized access to your inbox in the first place.
