This official feed from the Google Workspace team provides essential information about new features and improvements for Google Workspace customers.


We are introducing a significant enhancement to Gmail’s storage and delivery capabilities for Enterprise Plus customers. To support seamless collaboration and high-fidelity file sharing, we are increasing the file size limits for both sending and receiving emails.

  • Sending larger files: Users can now attach files up to 50MB directly to an email (doubling the previous 25MB limit). This allows users to send large presentations, comprehensive spreadsheets, and high-resolution PDFs as direct attachments without needing to upload them to Google Drive first.
  • Receiving larger files: We are increasing the total incoming message size limit to 70MB to also support large messages and attachments. This ensures that your organization can successfully receive larger emails from external senders, improving interoperability with other email platforms.
We know that today's workflows often involve sharing data-rich files. This new update compliments our existing functionality that allows users to upload to Google Drive and share a link. While Drive is excellent for collaboration, sometimes a direct attachment is the preferred method for external partners, clients, or regulatory workflows.

This update directly addresses two key areas of friction by:

  • Streamlining workflow: Users can now simply drag and drop files up to 50MB into their draft window. This reduces context switching and saves time when sharing final versions of documents.
  • Improving interoperability: Users who collaborate with partners who are unable to use Drive can now leverage attachments for these larger files, ensuring these critical communications are available regardless of the recipient.
This feature is admin configurable, giving admins more control over your organization's bandwidth and storage policies.

Getting started

Rollout pace

Availability

  • Google Workspace Enterprise Plus

Resources

When you draft an email, Proofread can suggest improvements beyond spelling and grammar corrections like conciseness, active voice, sentence structure, and word choice so everything is polished before you send. We recently launched this feature to Google AI Pro and Ultra subscribers, and we’re now bringing it to additional Workspace plans.


Example of Conciseness suggestion

Workspace customers will get promotional access to higher usage limits of Proofread, allowing users to experiment with this feature. Per-user usage limits may apply afterward; we’ll provide more information in a future update prior to any changes.

Getting started

Rollout pace

Availability

  • Business Starter, Standard, and Plus
  • Enterprise Starter, Standard, and Plus
  • Frontline Plus
  • Individual
  • Google AI Plus, Pro, and Ultra
  • Google AI Pro for Education add-on

Resources

 

What’s changing

In 2025, we introduced the ability to react to emails in Gmail with emojis. This feature lets users respond quickly to acknowledge receipt of an email in a fun, informal and more authentic way. While initially enabled as an opt-in feature for early customer access, starting February 9, 2026, emoji reactions in Gmail will be enabled by default.

Organizations wishing to disable this feature can do so at any time in the Admin console, and the feature will not be enabled by default for organizations who have previously disabled or modified this feature setting in the Admin console (check the Audit & Investigation tool to confirm). 

Whether you’re using a ‘thanks’ emoji to express gratitude, voting for a team dinner with a food emoji, or congratulating your client for reaching a milestone with a celebratory emoji, emoji reactions provide an expressive and more personal way to respond to emails.

Note that reactions cannot be sent in certain scenarios, for example if an email was received via a Google Group email alias or if there is a Google Group on the recipient list. Visit the Help Center to learn more about these scenarios.

Getting started

Rollout pace

Availability

  • Available to all Google Workspace customers.

Resources

What’s changing

Earlier this year, data classification labels for Gmail became generally available. Admins can use this feature to classify and audit email content according to organizational guidelines (“Sensitive,” “Confidential,” etc.) and apply policies, such as data loss prevention (DLP) rules, to protect sensitive information in email messages.

We have expanded this functionality to include the ability to create a DLP rule that adds a header or footer message to email messages. Critically, header and footer messages will be shown to users outside of your domain, which helps ensure external users are aware of the sensitivity of the message and any handling requirements. DLP rules are applied to outbound messages from your domain based on how you have configured the rule scope and conditions. As a reminder, the actual classification label is only visible to recipients in your domain.

Admins can customize the information shown in the header or footer message, including links to further information on handling information. Headers and footers are visible on all device types, both within and outside of your domain.

Selecting “Add footer message” when creating a rule

Selecting “Add footer message” when creating a rule

Once the email is sent, the banner will appear in the body of the email.

Once the email is sent, the banner will appear in the body of the email

For more information on data classification labels for Gmail, please refer to our previous announcement.

Getting started

Rollout pace

Availability

Data loss prevention rules with labels as a condition or labels as an action are available to:

  • Enterprise Standard and Plus
  • Education Fundamentals, Standard, Plus, and the Teaching & Learning Upgrade
  • Frontline Standard and Plus
  • Cloud Identity Premium (with Workspace plan that includes Gmail)

Resources

What’s changing

We’re launching a new integration between Gmail and Google Chat designed to improve team collaboration and productivity. With this feature, you can easily share a conversation from your Gmail inbox to a Chat direct message or space. No need to start your chat conversation with, "Did you see the email I forwarded?" or dig through your inbox to find the message being discussed.

Starting from a Gmail thread, you can initiate a chat with the existing email recipients, a subset, or a new group. The email is automatically forwarded and recipients can open it directly from a link in Chat.

This enables you to switch to Chat for active discussion while preserving the connection to the original message. Two-way linking helps ensure that everyone has the full context they need for a productive discussion and reduces the need to jump between tabs.

This feature is helpful in common scenarios such as:

  • Resolving an issue in real time instead of going back and forth over email
  • Chatting about an email with a subset of the original group before responding
  • Discussing a customer email with coworkers
  • Signal boosting an announcement by company leadership 
  • Sharing meetings notes and action items

Sharing an email in Google Chat
Sharing an email in Google Chat

Getting started

  • Admins: There is no admin control for this feature. Organizations must have both Gmail and Chat enabled for the feature to appear.
  • End users: This feature will be on by default for users who have Chat enabled in Gmail, available on desktop at launch and on mobile soon (currently available in limited testing on mobile for selected users). Visit the Help Center to learn more about how to share in Chat from Gmail.

Rollout pace

Availability

Available for Google Workspace:

  • Business Starter, Standard, and Plus
  • Enterprise Starter, Standard, and Plus
  • Frontline Starter, Standard, Plus
  • Nonprofits
We plan to bring this feature to Education customers in the coming months. Please stay tuned to the Workspace Updates blog for an update on availability.

Resources

What’s happening

Gmail is enhancing user security by enabling the Cross-Origin Opener Policy (COOP). As a result, developers of websites and browser extensions opening or manipulating the Gmail page may have to update their code to ensure continued functionality when enforcement begins on January 20, 2026. There is no action needed from Workspace admins or end users.

COOP background

Cross-Site Search (XS-Search) is a type of Cross-Site Leaks (XS-Leaks) attack that targets query-based search systems, like Gmail. Attackers exploit this vulnerability by gaining control of a Gmail window, either by opening a new popup or accessing an existing one via its window handle. Once they have this access, they can gather information via a side channel to determine if specific search results exist by repeatedly loading different search terms, thereby leaking sensitive user data.

COOP is a web security feature designed to isolate the web applications from untrusted origins. This measure will prevent attackers from accessing Gmail's window handle, thereby protecting users from various Cross-Site Search (XS-Search) attacks that rely on window handles for collecting side-channel information, such as frame counting. This also significantly hinders attacks like cache probing, which rely on timing and other observations for resources that Gmail loads for search results. While these attacks don't directly collect side-channel information through the window handles themselves, COOP prevents repeated searches and thereby increases difficulty and reduces effectiveness, making them far less of a threat.

Who’s impacted

Websites or browser extensions that open Gmail in a pop-up window and interact with that window by accessing its properties (closed, location, length, focus) or invoking its functions (close, postMessage). Also, browser extensions that are injected into Gmail page and access the opener handle which is a reference to the window that opened the current Gmail page.

Additional details

To enforce COOP, the Cross-Origin-Opener-Policy header will be present in the response:

Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gmail-web-coop-coep"
Report-To:{"group":"gmail-web-coop-coep","endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gmail-web"}]}

Getting started

  • Developers:
    • For websites and browser extensions opening Gmail, refactor the offending code to avoid accessing the window properties or functions through the window handle and instead, utilize alternative APIs to achieve the desired functionality (e.g., chrome.tabs, Messaging).
    • For browser extensions injected into the Gmail page, instead of trying to communicate with or access the opener, the browser extension should be updated so it doesn't need to interact with it at all and the extension's logic should be revised to work independently. If that is not possible, browser extensions can use existing APIs (e.g., chrome.tabs) to implement their logic.
  • Admins: There is no admin control for this feature.
  • End users: There is no end user setting for this feature. 

Rollout pace

  • Enforcement will begin on January 20, 2026. Rollout will be extended (potentially longer than 15 days for feature visibility).

Resources


What’s changing 

Finding time to meet — especially with external clients and customers — is hard, often requiring many back-and-forth emails. The new Gemini-powered Help me schedule feature in Gmail makes it easier for you to coordinate time with others. 

Gmail with Gemini will detect when you’re trying to coordinate a time within an email and will surface a Help me schedule button in the toolbar. After you click on the Help me schedule button, Gemini will automatically suggest ideal slots based on your Google Calendar and the email's context. For example, if someone asks for a 30 minute meeting next week, Gemini will recommend time slots that fit your availability. 

You can customize the times that Gemini suggests by removing or adding additional options, and then insert them directly into your Gmail message. Once the recipient receives the email and selects a time that works for them, a Calendar invite will automatically be added to both individual’s calendars. At launch, this feature will only support scheduling between two individuals, not groups. 



Getting started 


Rollout pace 

  • Rapid Release domains: Gradual rollout rollout (up to 15 days for feature visibility) starting on October 13. 2025 
  • Scheduled Release domains: Gradual rollout (up to 15 days days for feature visibility) starting approximately October 28, 2025 

Availability 

Available for Google Workspace: 

  • Business Standard, and Plus 
  • Enterprise Starter, Standard, and Plus 
  • Google AI Pro for Education 
  • Frontline Plus 

Also available to: 

  • Google AI Pro and Ultra 
  • Gemini Business, Enterprise* 
*As of January 15, 2025, we’re no longer offering the Gemini Business and Gemini Enterprise add-ons for sale. Please refer to this announcement for more details

Resources 



What’s changing

Generally available today, Gmail client-side encryption (CSE) users can send end-to-end encrypted (E2EE) emails to anyone, even if the recipient uses a different email provider. Recipients will receive a notification and can easily access the encrypted message via a guest account, ensuring secure communication without the hassle of exchanging keys or using custom software. 

This capability, requiring minimal efforts for both IT teams and end users, abstracts away the traditional IT complexity and substandard user experiences of existing solutions, while preserving enhanced data sovereignty, privacy, and security controls. 


Securely viewing an E2EE email in a restricted version of Gmail 


Users sending an email will see a notification when composing their message 

Getting started 

  • Admins: This feature will be OFF by default and can be enabled at the OU and Group level. Visit the Help Center to learn more about turning Gmail E2EE on or off for your organization. Visit the Help Center for a Client-side encryption setup overview
  • End users: This feature will be on by default for users that have access to Gmail Client-side encryption. Visit the Help Center to learn more about Gmail Client-side encryption

Rollout pace


Availability 

Available for Google Workspace: 

  • Enterprise Plus with the Assured Controls add-on. 

Resources 



What's changing

We're making it quicker and easier to manage your emails on mobile with two new features:

  • You can now use the "Mark as Read" feature directly on your Android device to clear a notification.
  • Sender avatars are now available on iOS devices, providing you with a quick glance at the sender's picture to help you spot important senders and prioritize what to read first.



Mark as read directly from the notification on Android




See sender avatars in iOS devices


Rollout pace 


Availability 

  • Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts




What’s changing 

Earlier this year, we introduced the ability to add an event to your calendar directly from an email using Gemini in Gmail on web. Today, we’re excited to announce this is now available on Android and iOS devices. 

With this update, Gemini will automatically detect calendar related content in your email and an “Add to calendar” button will appear. Upon clicking this option, the bottom panel in Gmail will open to confirm the event has been added to your calendar. 

Additional details 

If Gemini detects content about multiple events in an email, Gemini will offer to add all of them to your Google Calendar. 

Getting started 

Admins: 
End users: 
  • This feature is only available for emails in English at this time. 
  • The "Add to calendar" button will not appear for emails with already extracted events (like restaurants, flights, etc.). 
  • A calendar event created via the “Add to calendar” button will not include other guests, they must be added afterwards. 
  • Visit the Help Center to learn more about collaborating with Gemini in Gmail

Rollout pace 

Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on Aug 13 , 2025 

Availability 

Available for Google Workspace: 
  • Business Starter, Standard, and Plus 
  • Enterprise Starter, Standard, and Plus 
  • Frontline Plus 
  • Customers with the Gemini Education or Gemini Education Premium add-on 
  • Google AI Pro and Ultra 
Anyone who previously purchased these add-ons will also receive this feature: 
  • Gemini Business* 
  • Gemini Enterprise* 
*As of January 15, 2025, we’re no longer offering the Gemini Business and Gemini Enterprise add-ons for sale. Please refer to this announcement for more details
 

Resources 

What’s changing 

Previously available as part of the Google Workspace Developer Preview Program, we're excited to announce that the ability for developers to build Google Chat apps using the Workspace add-on framework is now generally available.

The Workspace add-ons framework makes it possible to build and maintain one app that works across multiple Workspace apps including Gmail, Calendar, Drive, and Chat. This reduces complexity and improves the experience for developers, system admins, and end-users. 



In Chat, Workspace add-ons can provide helpful features, such as:
  • Previewing links from Chat messages and taking action without leaving the conversation.
  • Automating tasks across Google Workspace applications.
  • Receiving  alerts or notifications from linked external services.
  • Combining external data from 3rd party apps and services with your data from Gmail, Chat, and Calendar. 
Chat app interacting with Calendar and Gmail data


Additional details 

Lucid, developers of Lucidchart, Lucidspark, and Lucidscale, recently updated their existing Workspace Add-ons to now support Chat. These integrations with Google Chat enable link previews, quick search, and access management all within Chat.

See more details on the Lucidchart, Lucidspark, and Lucidscale integrations here.

Soon, other partners, including Asana, Confluence, Figma, HubSpot, Miro, Polly, ServiceNow, Trello, 1Password, and more will be releasing Chat apps built on the Workspace add-ons framework.

Upcoming ServiceNow integration with Chat


Upcoming Figma integration with Chat

Upcoming Miro integration with Chat

Getting started 

Rollout pace 

Availability 

  • Chat apps are available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts
  • Developing Chat apps is available to all Google Workspace customers

Resources 

New updates
Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.

Veo 3 is now available in the Gemini app for select Workspace users
At Google I/O 2025 we introduced Veo 3, our new latest video generation model that can generate video with audio. Today, Veo 3 is now available in the Gemini app for select Workspace customers.

With Veo 3 you'll notice real-world physics and accurate lip syncing - this includes things like traffic noises in the background of a city street scene, birds singing in a park, and even dialogue between characters. We also introduced a new photo to video feature that allows you to upload a photo and create an 8-second video. You can get creative by animating everyday objects, bringing your drawings and paintings to life or adding movement to nature scenes.

There is a limit of 3 daily uses for enterprise and education users and 5 daily uses for those with the Google AI Ultra for Business add-on. When you are approaching this limit, you’ll see a warning message in the UI. Teams can also generate video clips with Veo in Google Vids as well. | Rolling out now to Rapid Release and Scheduled Release domains. | Available when using the Gemini app with Google Workspace Business Standard and Plus, Enterprise Standard and Plus and the Gemini Business and Education add-ons. | Visit our Help Center to learn more about generating videos with Gemini and which countries & territories. At the moment, Veo 3 is only available on the web and the Gemini mobile app and for users 18+.

Adding Google Calendar sharing to Android devices
In Google Calendar, you can share any calendar you own or have permission to share with other users and groups. This functionality is currently available on web only, and this week we’re excited to extend it to Android devices. The same settings available on web will now be available on your mobile device, which includes the ability to share a calendar with individuals, a domain or the entire public. | Rolling out now to Rapid Release and Scheduled Release domains. | Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts. | Visit the Help Center to learn more about sharing your calendar with someone

Adding Google Calendar sharing to Android devices

Automatically level audio across a video in Google Vids with balance sound 
In May, we preannounced the ability to easily adjust sound levels across videos in Google Vids. Starting today, users can automatically level the volume of audio and video clips in their Vids and add audio ducking to background music, which automatically lowers (or "ducks") music when another audio or video clip’s volume starts playing. | Rollout to Rapid Release domains is complete; launch to Scheduled Release domains planned for July 21, 2025. | Available to Google Workspace customers with access to Google Vids. | Visit the Help Center to learn more about controlling audio timing, balance & transitions with audio tracks.

balance sound in Vids

Gemini summary cards now available in Gmail on web 
In May, we introduced Gemini summary cards in Gmail on Android and iOS devices. This week, we’re excited to announce that summaries will be available on web as well, at the top of emails for messages where a summary is helpful, such as longer email threads or messages with several replies. | Rollout to Rapid Release and Scheduled Release domains is complete. | Available to Google Workspace Business Starter, Standard and Plus; Enterprise Starter, Standard and Plus; customers with the Gemini Education or Gemini Education Premium add-on, and anyone who previously purchased a Gemini Business or Gemini Enterprise add-on. | Visit the Help Center to learn more about collaborating with Gemini in Gmail. 

Gemini summary cards now available in Gmail on web

Introducing a refreshed user interface in Google Drive for Desktop 
In order to provide desktop users with a centralized area to easily manage all of their Drive files in one place, we’ve introduced improvements to Google Drive for desktop. Specifically, users will now see important information, such as sync activity, notifications, shared files and more in a single view. | Rolling out now to Rapid Release and Scheduled Release domains. | Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts. | Visit the Help Center to learn more about Google Drive for desktop. 

Introducing a refreshed user interface in Google Drive for Desktop

A new look and feel is coming for the Workspace Updates Blog 
We’re excited to share that a refreshed experience for the Workspace Updates Blog will be launching on Monday, July 14. Some of the improvements you’ll notice are: 
  • A completely refreshed user interface that brings the Workspace Updates Blog inline with other official Google channels. 
  • A compact layout that allows you to quickly scan multiple posts, making it easier to find the announcements that matter most to you. 
  • Easier navigation with product tags neatly categorized at the top of the page, and quick links to other resources like the Release Calendar. 
  • Auto translation for 100+ languages using Google translate right from the footer of the website. 
These updates will also be available when viewing the Workspace Updates Blog on mobile.

Previous announcements
The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.

Use Gemini in Google Drive to execute basic organizational tasks
Starting this week, we’ve enhanced Gemini’s organizing capabilities in Drive by allowing you to use natural language to move selected files into the folder you choose. | Learn more about using Gemini in Google Drive.

Google Drive Events API now available in Developer Public Preview
Google Drive is now integrated with the Workspace Events API, which allows third-party developers to create subscriptions on Drive items and receive notifications via Cloud Pub/Sub when those resources change. | Learn more about the Google Drive Events API.

Improved email notifications following Google Meet calls, plus new sharing controls for meeting hosts
We’re improving the email notification that includes the notes doc when you use “Take notes for me” in Google Meet. The email will now include a summary of the meeting as well as “suggested next steps” in addition to the link to the notes document. Including this information gives meeting invitees a quick, helpful overview of the meeting in one place. | Learn more about email notifications for Meet calls.

Manage email subscriptions from a single location in Gmail
Last year, we introduced web and mobile updates that enable you to unsubscribe from individual emails in Gmail more easily. Today, we’re building upon this with Gmail's new "Manage subscriptions" feature. | Learn more managing subscriptions.

Search for embedded content in Google Sites
Starting today, we're making it easier to find information within a Google Site. Previously, searching in a site only showed results from the text directly on the pages. Now, when you perform a search, the results will also include content from within embedded files, such as Google Docs, Sheets, Slides, and PDFs. | Learn more about searching for embedded content in Sites.

Drive IRM Update: More Control for File Owners and Shared Drive Managers
Now, individual file owners and shared drive managers can apply printing, copying, and downloading restrictions to users with edit permissions as well. Editors and owners can still edit the document itself, however they can only copy and paste document content within the document itself. | Learn more about Drive IRM.

Introducing Lucidchart and Lucidspark apps in Google Chat
Lucidchart, an app that helps users collaborate on diagrams, such as flowcharts, wireframes, entity relationship diagrams, and more, and Lucidspark, a virtual whiteboard tool, are two third-party add-ons already available across Workspace apps, such as Docs and Meet. This week, we’re excited to announce support for both of these apps in Google Chat. | Learn more about Lucidchart and Lucidspark apps in Google Chat.

Completed rollouts
The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Rapid Release Domains: 
Scheduled Release Domains: 
Rapid and Scheduled Release Domains: 
For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).

What’s changing 

Last year, we introduced web and mobile updates that enable you to unsubscribe from individual emails in Gmail more easily. Today, we’re building upon this with Gmail's new "Manage subscriptions" feature. 

With the “Manage subscriptions” view, you can organize your subscription emails and easily unsubscribe from the ones you no longer want – all from a single place. 

To find this view, click the navigation bar in the top-left corner of your inbox and select “Manage subscriptions.” Your active subscriptions are sorted by the most frequent senders alongside the number of emails they’ve sent you in the past few weeks. If there’s a sender you no longer wish to receive emails from, you can easily unsubscribe in one click, and Gmail will send an unsubscribe request to the sender on your behalf. 

Manage email subscriptions from a single location in Gmail

Additional details 

If you are a bulk sender wanting to know more about unsubscribe requirements, please see additional details here

Getting started 

Rollout pace

Web: 
Android: 
iOS: 

Availability 

  • Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts 

Resources 

Update

[July 8, 2025]: We have updated the Rollout section with the latest timelines -- please see below for more information.


What’s changing

Currently, when you’re using the Gemini app, you can use Gems, custom AI experts that can help you complete specific goals, tasks, and workflows based on your input. You can also take advantage of pre-made Gems as well, like writing editor, coding partner, sales pitch ideator, and more. 

Today, we’re bringing the power of Gems directly into the side panel of Google Docs, Slides, Sheets, Drive, and Gmail.

Who’s impacted

Admins and end users

Why you’d use them

Gems can help you further leverage the power of Gemini in a way that’s customized to your needs more efficiently by minimizing repetitive prompting. You can now take advantage of Gems directly from the side panel of several Google Workspace apps. This includes your custom Gems or pre-made gems. Without needing to switch between applications, you can use Gems in the side panel to:

  • Leverage a copywriting Gem to create posts and content tailored to your target audience, pre-loaded into the Gem.
  • Create a Gem that helps with sales interactions that is grounded on information for a specific company, prospect, or industry. 
  • Leverage an "assistant gem" tailored to your job role to help provide more relevant summaries for you and content for internal communications.
  • Leverage a Gem designed to help pressure test content from a certain persona (e.x C-Suite or CEO) to help you create the most compelling message.

Additional details

If you don't see a Gem that meets your needs, or want to customize a Gem for a specific task, you can create your own at gemini.google.com/gems/create. Both custom and premade Gems will appear in the side panel across all supported Workspace applications, and can leverage many Workspace capabilities including @ mentioning, accessing files and folders in your corpus, and more. Visit the Help Center for more information on working with Gems.

Getting started

  • Admins: There are no admin controls for Gems or Gemini in the side panel of supported Google Workspace apps.

  • End users: Visit the Help Center to learn more about using Gems. You can access the Gemini in the side panel by clicking on “Ask Gemini” (spark button) in the top right corner of Docs, Sheets, Slides, and Drive on the web. Visit the Help Center to learn more about collaborating with Gemini in Google Drive, as well as Google Docs, Google Sheets, and Google Slides, and Gmail.

Rollout pace


Availability

  • Available for Google Workspace customers who can access Gemini in the side panel of Workspace apps and Gems in the Gemini app.

Resources


What’s changing 

Gmail now allows users with hardware keys, such as PIV/CAC smartcards, to directly manage their digital signature and encryption certificates within Gmail settings. Prior to this update, admins needed to upload encryption keys for their users – now users can configure their own keys in Gmail, without needing an admin. 

Gmail > Settings > Accounts > Encryption certificates

Additional details 

While Workspace encrypts data at rest and in transit by using secure-by-design cryptographic libraries, client-side encryption ensures that you have sole control over encryption keys and access to your data. Client-side encryption ensures sensitive data in the email body and attachments are indecipherable to Google servers — you retain control over encryption keys and the identity service to access those keys. For more information, check out our original announcement and the Workspace blog

Getting started 

  • Admins: In order for your users to add certificates from a hardware key, you must first enable and install the Workspace Hardware Keys application to user machines. 
  • End users: Visit the Help Center to learn more about using hardware keys for encryption. 

Rollout pace 


Availability 


Resources