How to Configure Confidential Mode and Information Rights Management in Gmail

Transmitting confidential business proposals, tax documentation, employee onboarding credentials, or proprietary agreements via standard email exposes sensitive data to unauthorized forwarding, copying, and long-term retention in external mailboxes. Once a regular email leaves your outbox, you lose all control over how the recipient handles or archives it. Google solves outbound message security in Gmail through Confidential Mode—an integrated Information Rights Management (IRM) system that restricts forwarding, copying, printing, and downloading, while enforcing automated message expiration dates and two-factor SMS passcodes.

How Confidential Mode Architecture Operates

Confidential Mode handles delivery differently than standard SMTP email protocol:

• Non-Storage Delivery: When you send a Confidential message, the actual message body and attachments never physically transit to or reside on the recipient’s local mail server. Instead, the email payload remains hosted securely on Google’s encrypted cloud infrastructure.
• Recipient Experience: If the recipient uses Gmail, they view the content seamlessly within their web interface or app. If they use a third-party email client (like Outlook or Apple Mail), they receive a secure invitation link that opens the message in a protected Google browser session after identity verification.
• Rights Restrictions: The recipient’s email interface disables buttons for Forward, Copy text, Print, and Download attachments.

Enabling Confidential Mode on Desktop and Web

To compose a secure message with Confidential Mode on desktop:

1. Open mail.google.com in your web browser and click Compose.
2. Add your recipient, subject line, message text, and any confidential attachments.
3. In the bottom toolbar of the compose window, click the Toggle confidential mode icon (represented by a padlock with a clock).
4. A configuration modal appears with two critical security settings:
   • Set Expiration: Select an automated decay timeline: Expires in 1 day, Expires in 1 week, Expires in 1 month, Expires in 3 months, or Expires in 5 years. After this date, the email body and attachments become completely inaccessible to the recipient.
   • Require Passcode: Choose authentication requirements:
     – No SMS passcode: Non-Gmail recipients receive an automated verification code sent to their email address.
     – SMS passcode: Google sends an authentication SMS passcode to the recipient’s mobile phone number; they cannot open the email without entering this second-factor code.
5. Click Save. A blue banner frames the compose window announcing that Confidential Mode is active.
6. Click Send. If you selected SMS Passcode, enter the recipient’s mobile phone number (including international country code) when prompted.

Revoking Access to Sent Messages Immediately

If you mistakenly send sensitive information to the wrong party or need to terminate access before the scheduled expiration date:

1. In Gmail’s left navigation sidebar, click Sent.
2. Click to open the confidential email you previously transmitted.
3. At the bottom of the message container, click Remove access.
4. Access is revoked instantaneously across Google cloud servers. If the recipient clicks the email link or attempts to re-read it, Gmail displays a notice that the message has expired.
5. If you later resolve the situation, click Renew access to restore availability.