--- title: How to Encrypt Email Attachments, and Why You Should | Virtru description: Learn how to encrypt email attachments properly, and why TLS and standard email encryption leave your files exposed after delivery. A practical guide. image: https://www.virtru.com/hubfs/assets/images/blog/encrypt-attachments-email.webp --- [Skip to Main Content](https://www.virtru.com/blog/email-encryption/attachments#main-content) [Sign In](https://secure.virtru.com/dashboard) [I received a Virtru email](https://www.virtru.com/data-protection-platform/email-encryption/send) [![Virtru](https://www.virtru.com/hubfs/assets/images/logos/virtru/blue/virtru_LOGOMASTER_BLUE.svg) ](https://www.virtru.com/) - Products - Solutions - Developers - Company - Resources - [Support](https://support.virtru.com) - [Pricing](https://www.virtru.com/data-security-platform/pricing-packages) - Book a Demo - Search all Virtru content ![](https://www.virtru.com/hubfs/assets/images/icons/link-arrow-black.svg) Email Workflows Protect data shared via email - [Virtru for Gmail ](https://www.virtru.com/data-security-platform/email-encryption/gmail) - [Virtru for Outlook ](https://www.virtru.com/data-security-platform/email-encryption/outlook) - [Virtru Gateway ](https://www.virtru.com/data-security-platform/virtru-data-gateway) - [Email Integrations ](https://www.virtru.com/products/integrations?product=data_protection_gateway&category=email) File Workflows Protect files shared across your workflows - [Virtru Secure Share ](https://www.virtru.com/data-security-platform/virtru-secure-share) - [Virtru for Desktop ](https://www.virtru.com/data-security-platform/desktop) - [File Integrations ](https://www.virtru.com/products/integrations?category=file_sharing) Collaboration Workflows FedRAMP authorized file storage and collaboration - [Virtru Collaborate ](https://www.virtru.com/data-security-platform/virtru-collaborate) Manage Private Encryption Keys Maintain complete sovereignty and governance - [Virtru Private Keystore ](https://www.virtru.com/data-security-platform/virtru-private-keystore) - [Google Client Side Encryption (CSE) ](https://www.virtru.com/data-security-platform/google-workspace-client-side-encryption) Develop Data Security Solutions Data-centric security, built on open standards - [Virtru Data Security Platform ](https://www.virtru.com/data-security-platform) - [Developer Experience ](https://www.virtru.com/data-security-platform/developer-experience) - [Platform Integrations ](https://www.virtru.com/partners/technology) 6,100+ Customers Trust Virtru for Data Security and Privacy Protection ![Omada Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/omada-logo.webp) ![UC Berkley Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/ucberkley-logo.webp) ![Associated Press Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/associatedpress-logo.webp) ![US Department of Defense Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/dod-logo.webp) - Compliance - [CJIS ](https://www.virtru.com/compliance/cjis) - [CMMC / NIST / DFARS ](https://www.virtru.com/compliance/cmmc) - [FERPA ](https://www.virtru.com/compliance/ferpa) - [FTC Safeguards Rule ](https://www.virtru.com/compliance/data-encryption-ftc-safeguards-rule) - [GDPR ](https://www.virtru.com/compliance/gdpr) - [HIPAA ](https://www.virtru.com/compliance/hipaa-email) - [ISO 27001 ](https://www.virtru.com/compliance/iso-27001) - [ITAR ](https://www.virtru.com/compliance/itar) - [PCI / GLBA / FINRA / SOX ](https://www.virtru.com/compliance/financial) - Commercial - [Aerospace ](https://www.virtru.com/industry-solutions/aerospace-and-defense/) - [Education ](https://www.virtru.com/industry-solutions/education/) - [Finance ](https://www.virtru.com/industry-solutions/financial-services/) - [Healthcare ](https://www.virtru.com/industry-solutions/healthcare/) - [Legal ](https://www.virtru.com/industry-solutions/legal) - [Technology & Telecom ](https://www.virtru.com/industry-solutions/telecom-it-and-software) - [Threat Intelligence ](https://www.virtru.com/industry-solutions/threat-intelligence) - Global Public Sector - [Federal - Defense ](https://www.virtru.com/global-public-sector/defense) - [Federal - Intelligence ](https://www.virtru.com/global-public-sector/intelligence) - [State & Local Government ](https://www.virtru.com/industry-solutions/state-local-government) - [Systems Integrators ](https://www.virtru.com/global-public-sector/systems-integrators) - [Mission Partner Environments ](https://www.virtru.com/industry-solutions/mission-partner-environments) [View All Solutions](https://www.virtru.com/compliance) [![Three rings forming three overlaps in a triangle formation](https://www.virtru.com/hubfs/assets/images/icons/rings-navicon.svg) Virtru for Global Mission Partners Data-centric security aligned with ACP-240 and TDF Learn More ](https://www.virtru.com/industry-solutions/mission-partner-environments) [![Microsoft Icon](https://www.virtru.com/hubfs/assets/images/icons/microsoft-navicon.svg) Virtru for Microsoft 365 Protect data stored and shared via Microsoft 365 Learn More ](https://www.virtru.com/data-security-platform/microsoft-365) [![Google Icon](https://www.virtru.com/hubfs/assets/images/icons/google-navicon.svg) Virtru for Google Workspace Protect data stored and shared via Google Workspace Learn More ](https://www.virtru.com/data-security-platform/google-workspace) - Developers - [Virtru Data Security Platform The Security Standard that Powers Our Products ](https://www.virtru.com/data-security-platform) - [Trusted Data Format Secure Collaboration and Policy Enforcement ](https://www.virtru.com/data-security-platform/trusted-data-format) - [Virtru Developer Experience Build Secure Solutions from the Ground Up ](https://www.virtru.com/data-security-platform/developer-experience) - Developer Community - [OpenTDF: Open Source Project Open Standard Now Available on GitHub ](https://opentdf.io/) - [Technology Partners Building integrations with the Virtru Platform ](https://www.virtru.com/partners/technology) - [Partner Training Bootcamp Request training on the Virtru Data Security Platform ](https://www.virtru.com/data-security-platform/training-request) ![Looking over the shoulder of somebody on their smart phone. ](https://www.virtru.com/hubfs/assets/images/stock%20photos/People%20On%20Device/person-on-phone.webp) A trusted platform for secure data sharing Built on the open TDF standard, the Virtru Data Security Platform provides persistent control over the information you share with others. [Virtru Data Security Platform](https://www.virtru.com/data-security-platform) - About Virtru - [About Us ](https://www.virtru.com/about-us) - [Leadership ](https://www.virtru.com/leadership/) - [Careers & Culture ](https://www.virtru.com/careers) - [Contact Us ](https://www.virtru.com/contact-us) - In the News - [Headlines & Press Releases ](https://www.virtru.com/newsroom) - [Decrypted Blog ](https://www.virtru.com/blog) - [Hash It Out Podcast ](https://www.virtru.com/hash-it-out) Award-winning security solutions for every organization ![Cyber Security Breakthrough Award Logo for 2023](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/cybersecurity-breakthrough-award-badge-2023.webp) ![Virtru wins a G2 Top 50 Security Products Award for 2024](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/G2-Leader-2025.webp) ![Washington Post Top Work Places 2023 Award](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/twp-washington-2023.webp) ![Inc Power Partner 2024](https://www.virtru.com/hubfs/assets/images/logos/award%20badges/IncPowerPartner-2024.webp) [Read Customer Reviews](https://www.virtru.com/why-virtru/reviews) - Resources - [Decrypted Blog Tips, Takes, and Expertise ](https://www.virtru.com/blog) - [Hash It Out Podcast Join us as we talk about cybersecurity ](https://www.virtru.com/hash-it-out) - [Voice of the Customer Case Studies, Webinars, and Videos ](https://www.virtru.com/resources?type=webinar,case-study) - [Events & Webinars Upcoming Events, Conferences, and Digital Webinars ](https://www.virtru.com/events-and-webinars/) - [Resource Library Whitepapers, Guides, and Videos ](https://www.virtru.com/resources) - [DMV Rising Our annual event bringing together the cyber community in the DMV ](https://dmvrising.com/) - [Headlines & Press Virtru in the News ](https://www.virtru.com/newsroom) - [Product Updates The latest on new products, features, and fixes ](https://www.virtru.com/products/updates) - [Virtru Academy Live Helpful how-to content for admins and end users ](https://www.virtru.com/virtru-academy-live) ![Professional on a laptop](https://www.virtru.com/hubfs/assets/images/stock%20photos/business/Business-3.webp) ![Wealthforge Logo](https://www.virtru.com/hubfs/assets/images/logos/customers/Wealthforge%20Logo.webp) 100% Increase in delivery rate for a broker-dealer working to comply with SEC regulations. [Read the Case Study](https://www.virtru.com/case-studies/wealthforge-sec-compliance-gateway) - Products - Email Workflows Protect data shared via email - [Virtru for Gmail ](https://www.virtru.com/data-security-platform/email-encryption/gmail) - [Virtru for Outlook ](https://www.virtru.com/data-security-platform/email-encryption/outlook) - [Virtru Gateway ](https://www.virtru.com/data-security-platform/virtru-data-gateway) - [Email Integrations ](https://www.virtru.com/products/integrations?product=data_protection_gateway&category=email) - File Workflows Protect files shared across your workflows - [Virtru Secure Share ](https://www.virtru.com/data-security-platform/virtru-secure-share) - [Virtru for Desktop ](https://www.virtru.com/data-security-platform/desktop) - [File Integrations ](https://www.virtru.com/products/integrations?category=file_sharing) - Collaboration Workflows FedRAMP authorized file storage and collaboration - [Virtru Collaborate ](https://www.virtru.com/data-security-platform/virtru-collaborate) - Manage Private Encryption Keys Maintain complete sovereignty and governance - [Virtru Private Keystore ](https://www.virtru.com/data-security-platform/virtru-private-keystore) - [Google Client Side Encryption (CSE) ](https://www.virtru.com/data-security-platform/google-workspace-client-side-encryption) - Develop Data Security Solutions Data-centric security, built on open standards - [Virtru Data Security Platform ](https://www.virtru.com/data-security-platform) - [Developer Experience ](https://www.virtru.com/data-security-platform/developer-experience) - [Platform Integrations ](https://www.virtru.com/partners/technology) - Solutions - Compliance - [CJIS ](https://www.virtru.com/compliance/cjis) - [CMMC / NIST / DFARS ](https://www.virtru.com/compliance/cmmc) - [FERPA ](https://www.virtru.com/compliance/ferpa) - [FTC Safeguards Rule ](https://www.virtru.com/compliance/data-encryption-ftc-safeguards-rule) - [GDPR ](https://www.virtru.com/compliance/gdpr) - [HIPAA ](https://www.virtru.com/compliance/hipaa-email) - [ISO 27001 ](https://www.virtru.com/compliance/iso-27001) - [ITAR ](https://www.virtru.com/compliance/itar) - [PCI / GLBA / FINRA / SOX ](https://www.virtru.com/compliance/financial) - Commercial - [Aerospace ](https://www.virtru.com/industry-solutions/aerospace-and-defense/) - [Education ](https://www.virtru.com/industry-solutions/education/) - [Finance ](https://www.virtru.com/industry-solutions/financial-services/) - [Healthcare ](https://www.virtru.com/industry-solutions/healthcare/) - [Legal ](https://www.virtru.com/industry-solutions/legal) - [Technology & Telecom ](https://www.virtru.com/industry-solutions/telecom-it-and-software) - [Threat Intelligence ](https://www.virtru.com/industry-solutions/threat-intelligence) - Global Public Sector - [Federal - Defense ](https://www.virtru.com/global-public-sector/defense) - [Federal - Intelligence ](https://www.virtru.com/global-public-sector/intelligence) - [State & Local Government ](https://www.virtru.com/industry-solutions/state-local-government) - [Systems Integrators ](https://www.virtru.com/global-public-sector/systems-integrators) - [Mission Partner Environments ](https://www.virtru.com/industry-solutions/mission-partner-environments) - Developers - Developers - [Virtru Data Security Platform The Security Standard that Powers Our Products ](https://www.virtru.com/data-security-platform) - [Trusted Data Format Secure Collaboration and Policy Enforcement ](https://www.virtru.com/data-security-platform/trusted-data-format) - [Virtru Developer Experience Build Secure Solutions from the Ground Up ](https://www.virtru.com/data-security-platform/developer-experience) - Developer Community - [OpenTDF: Open Source Project Open Standard Now Available on GitHub ](https://opentdf.io/) - [Technology Partners Building integrations with the Virtru Platform ](https://www.virtru.com/partners/technology) - [Partner Training Bootcamp Request training on the Virtru Data Security Platform ](https://www.virtru.com/data-security-platform/training-request) - Company - About Virtru - [About Us ](https://www.virtru.com/about-us) - [Leadership ](https://www.virtru.com/leadership/) - [Careers & Culture ](https://www.virtru.com/careers) - [Contact Us ](https://www.virtru.com/contact-us) - In the News - [Headlines & Press Releases ](https://www.virtru.com/newsroom) - [Decrypted Blog ](https://www.virtru.com/blog) - [Hash It Out Podcast ](https://www.virtru.com/hash-it-out) - Resources - Resources - [Decrypted Blog Tips, Takes, and Expertise ](https://www.virtru.com/blog) - [Hash It Out Podcast Join us as we talk about cybersecurity ](https://www.virtru.com/hash-it-out) - [Voice of the Customer Case Studies, Webinars, and Videos ](https://www.virtru.com/resources?type=webinar,case-study) - [Events & Webinars Upcoming Events, Conferences, and Digital Webinars ](https://www.virtru.com/events-and-webinars/) - [Resource Library Whitepapers, Guides, and Videos ](https://www.virtru.com/resources) - [DMV Rising Our annual event bringing together the cyber community in the DMV ](https://dmvrising.com/) - [Headlines & Press Virtru in the News ](https://www.virtru.com/newsroom) - [Product Updates The latest on new products, features, and fixes ](https://www.virtru.com/products/updates) - [Virtru Academy Live Helpful how-to content for admins and end users ](https://www.virtru.com/virtru-academy-live) - [Support](https://support.virtru.com) - [Pricing](https://www.virtru.com/data-security-platform/pricing-packages) - Book a Demo - Search all Virtru content ![](https://www.virtru.com/hubfs/assets/images/icons/link-arrow-black.svg) Virtru for Outlook Virtru for Gmail April 29, 2026 # How to Encrypt Email Attachments — and Why Most Organizations Still Get It Wrong ![Editorial Team](https://www.virtru.com/hubfs/assets/images/logos/virtru/logomark/blue/virtru_LOGOMARKMASTER_BLUE_FINAL.svg) By Editorial Team Share post: [![Share on Facebook](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-facebook.png?noresize&width=24&name=icon-blog-facebook.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.virtru.com%2Fblog%2Femail-encryption%2Fattachments%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-linkedin.png?noresize&width=24&name=icon-blog-linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Femail-encryption%2Fattachments%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://www.virtru.com/hs-fs/hubfs/opentdf/assets/images/icons/x-logo.webp?width=24&name=x-logo.webp)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.virtru.com%2Fblog%2Femail-encryption%2Fattachments%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Femail-encryption%2Fattachments%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=How%20to%20Encrypt%20Email%20Attachments%2C%20and%20Why%20You%20Should%20%7C%20Virtru) ## TABLE OF CONTENTS See Virtru In Action Book a Demo Share post: [![Share on Facebook](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-facebook.png?noresize&width=24&name=icon-blog-facebook.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fwww.virtru.com%2Fblog%2Femail-encryption%2Fattachments%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://www.lean-labs.com/hs-fs/hubfs/LLv2/images/icon-blog-linkedin.png?noresize&width=24&name=icon-blog-linkedin.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Femail-encryption%2Fattachments%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://www.virtru.com/hs-fs/hubfs/opentdf/assets/images/icons/x-logo.webp?width=24&name=x-logo.webp)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fwww.virtru.com%2Fblog%2Femail-encryption%2Fattachments%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fwww.virtru.com%2Fblog%2Femail-encryption%2Fattachments%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=How%20to%20Encrypt%20Email%20Attachments%2C%20and%20Why%20You%20Should%20%7C%20Virtru) ![two colleagues work on a proprietary mobile application](https://www.virtru.com/hubfs/assets/images/blog/encrypt-attachments-email.webp) Most organizations have some form of email encryption in place. What far fewer realize is that their encryption stops at the email — not the attachment. The file that contains the sensitive data (the contract, the patient record, the financial report) travels onward without protection the moment it's downloaded, forwarded, or saved to a new device. Understanding how to encrypt email attachments — not just the message — is the difference between security that holds and security that only looks good until something goes wrong. ## Why Email Encryption Doesn't Automatically Protect Your Attachments There are two common forms of email encryption, and neither one fully solves the attachment problem on its own. **TLS (Transport Layer Security)** protects email and attachments in transit between servers — usually just for an instant while it's in motion. It's built into most major email providers and operates invisibly — which is useful, but limited. TLS provides no protection once the email is delivered. If a message is forwarded, a server is compromised, or an attachment is saved locally, your file is not protected by TLS. **Standard end-to-end encryption** protects the message body from sender to recipient, which is meaningfully stronger. But many implementations don't extend that protection to the attachment itself after it's been saved to a desktop — and none of them give the sender ongoing control over what happens to the file. That's the gap where data breaches happen. The most sensitive information in most emails isn't the message body — it's what's attached to it. And once that data has left your organization's perimeter, it's incredibly difficult (if not impossible) to claw back.   Recommended Reading: [TLS vs. End-to-End Encryption — What's the Difference? ](https://www.virtru.com/blog/email-encryption/tls-vs-end-to-end-e2ee) ## What's at Stake with Unencrypted Attachments The consequences of unprotected attachments have grown significantly more severe. According to [IBM's 2025 Cost of a Data Breach Report](https://www.ibm.com/reports/data-breach), the average U.S. data breach now costs **$10.22 million** — an all-time high. [Customer PII](https://www.virtru.com/blog/compliance/hipaa/pii) is the most frequently compromised data type, appearing in 53% of all breaches analyzed. And email remains one of the primary attack vectors: a misdirected email attachment, a forwarded thread, a downloaded file on an unmanaged device — each one is a potential breach with real regulatory exposure. The regulatory environment has tightened to match. In January 2025, HHS proposed amendments to the [HIPAA Security Rule](https://www.virtru.com/blog/compliance/hipaa/security-rule) that would transform encryption from an "addressable" specification — meaning organizations could opt out with justification — to an effective requirement for all covered entities and business associates. For healthcare organizations, the question of how to encrypt email attachments is no longer discretionary. Similar requirements apply under [CMMC](https://www.virtru.com/compliance/cmmc) for defense contractors handling [Controlled Unclassified Information (CUI)](https://www.virtru.com/case-studies/cmmc-compliance-assessment), [FedRAMP](https://www.virtru.com/compliance/fedramp) for cloud services used by federal agencies, and a growing body of state privacy laws now in effect across 20 U.S. states. In each case, the expectation is the same: sensitive data in transit must be protected, and "protected in transit" means the attachment, not just the email wrapper. ## How to Encrypt Email Attachments with Virtru [Virtru for Email](https://www.virtru.com/data-security-platform/email-encryption) integrates directly into [Gmail](https://www.virtru.com/data-security-platform/email-encryption/gmail) and [Microsoft Outlook](https://www.virtru.com/data-security-platform/email-encryption/outlook), adding attachment encryption without changing how your team works. There's no separate portal, no password-protected ZIP files, no friction for recipients. When you compose a message with Virtru enabled, attachments are encrypted using the [Trusted Data Format (TDF)](https://www.virtru.com/data-security-platform/trusted-data-format) — an open standard that embeds encryption and access policy directly into the file itself. Protection is applied at the source, before the file leaves your environment, and it stays with the file regardless of where it goes next. Beyond encryption, Virtru for Email lets you apply granular controls to every attachment you send: - **Access controls** — specify exactly who can open the file, down to the individual recipient - **Expiration dates** — set a time limit after which the file can no longer be accessed - **Watermarks** — add visible attribution to help deter unauthorized sharing - **Real-time revocation** — change or remove access at any point, even after the email has been delivered and the attachment downloaded ![Virtru for Microsoft Outlook user interface. Deploy the SaaS or self-managed (on-prem) version.](https://www.virtru.com/hs-fs/hubfs/assets/images/product%20ui/26-Outlook-AddIn.webp?width=600&height=517&name=26-Outlook-AddIn.webp) That last capability is where TDF-based encryption fundamentally differs from conventional approaches. Because policy is embedded in the file rather than managed at the email server level, access decisions are enforced at the moment someone attempts to open the file — not at the moment it was sent. An attachment that shouldn't be accessible anymore isn't, regardless of where it has traveled or how many times it was forwarded. ## Protection That Travels With the File The core limitation of most email security tools is that they secure the channel, not the content. Once an attachment clears the perimeter — forwarded externally, downloaded to a personal device, saved to a shared drive — the protection ends. Virtru's approach is different by design. Because TDF embeds the access policy into the file itself, that policy portability means protection travels with the data through every environment it enters. A recipient opening a protected attachment two weeks later, on a different device, after forwarding the message internally — the access check still runs. If access has been revoked, the file doesn't open. This is data-centric security applied to one of the most common workflows in any organization: sending a file by email. The encryption isn't attached to the network path. It's attached to the data. ## Works Where Your Team Already Works Virtru for Email doesn't ask your organization to change tools, retrain staff, or adopt a new communication platform. It works within Gmail and Outlook — the email clients your teams use today. Encryption is applied with a toggle; controls are set in a sidebar; recipients access protected files through a straightforward, browser-based flow that requires no software installation. Security should empower, not stifle. The right attachment encryption solution makes secure behavior the easiest behavior — not an additional step that gets skipped when someone is in a hurry. For organizations managing compliance requirements, Virtru for Email also maintains [comprehensive audit logs](https://www.virtru.com/data-security-platform/audit-and-control) of all access attempts and decisions, giving you the visibility you need without manual tracking. ## Start Protecting Attachments Today Email attachment encryption isn't a premium feature reserved for high-security environments. It's the baseline that responsible data handling requires — and with [HIPAA amendments](https://www.virtru.com/blog/compliance/hipaa/15-day-rule), [CMMC requirements](https://www.virtru.com/webinars/cmmc-compass-lessons-from-the-assessor-and-the-assessed), and a tightening state privacy landscape, the window for treating it as optional is closing. [Virtru Email Encryption](https://www.virtru.com/data-security-platform/email-encryption) is available for [Gmail](https://www.virtru.com/data-security-platform/email-encryption/gmail) and [Microsoft Outlook](https://www.virtru.com/data-security-platform/email-encryption/outlook). Integration takes minutes. The protection lasts as long as the data does. To see how it works, [contact our team for a demo](https://www.virtru.com/contact-us). BLOG_POST... ## Frequently Asked Questions about Encrypting Email Attachments ### How do you encrypt email attachments in Outlook? The fastest way to encrypt email attachments in Outlook is with an add-in like [Virtru for Outlook](https://www.virtru.com/data-security-platform/email-encryption/outlook). Once installed, you'll see a toggle in the Outlook compose window. Flip it on before you hit send, and every file attached to that message — Word docs, PDFs, spreadsheets — is encrypted with the message. Native Microsoft 365 encryption (via Microsoft Purview) is another option. Go to **New Message > Options > Encrypt**, then choose an encryption policy. The limitation: this approach relies on Microsoft's key management, and recipients outside your Microsoft tenant may hit friction when opening attachments. For organizations with stricter requirements — healthcare, legal, defense contracting — a dedicated solution like Virtru gives you persistent controls that travel with the file: you can set expiration dates, disable forwarding, and revoke access even after the email lands in the recipient's inbox. ### How do you open an encrypted email attachment? If you've just received a file you can't open, don't worry — you almost certainly don't need to install anything. How you proceed depends on how the attachment was encrypted. - **Virtru-encrypted attachments**: The sender's email will include a secure link or a protected file. Click **Open with Virtru** or open the file directly — you'll be prompted to authenticate (usually via Google or Microsoft sign-in, or a one-time verification code). No software installation required for recipients. - **Microsoft 365 / Purview-encrypted attachments**: If you're in the same Microsoft tenant, attachments open normally. If you're external, you'll receive a message from Microsoft with a link to read the content in the browser or via a passcode. You may have to create an account or password to do so.  - **S/MIME-encrypted attachments**: You need the sender's public certificate installed in your email client. Open the email in Outlook or Apple Mail — if the certificate is in place, the attachment decrypts automatically. - **PGP/GPG-encrypted files**: You need a PGP-compatible tool (like Kleopatra or GPG Keychain) and the sender's public key to decrypt the attachment locally. If an encrypted attachment won't open, the most common reasons are: you're accessing it from a different email address than the one it was sent to, the sender has already revoked access, or the attachment has passed its expiration date. ### How do you encrypt a PDF attachment before emailing it? There are two approaches: password-protect the PDF itself, or encrypt it as part of the email. **Option 1: Password-Protect the PDF file directly** Adobe Acrobat lets you add password protection to a PDF before you attach it. Go to **File > Protect Using Password**, set a password, and save. The recipient needs the password to open it. This works across any email platform but requires you to share the password separately — ideally through a different channel. **Option 2: Encrypt the PDF as part of an encrypted email** This is the more practical approach for business use. With Virtru for Outlook or Gmail, you compose your email with the PDF attached, toggle encryption on, and send. The PDF is wrapped in a [Trusted Data Format (TDF)](https://www.virtru.com/blog/what-is-tdf/) container that enforces access policy at the point of opening — no separate password to manage, and you retain the ability to revoke access or set an expiration date. For regulated environments (HIPAA, CMMC, ITAR), encrypting at the email level — rather than password-protecting the file — is generally preferred because it creates an audit trail and gives administrators persistent control over the document after it's shared. ### Does encrypting an email also encrypt its attachments? It depends on the encryption method. **TLS (Transport Layer Security)** — the default "encryption" in most email systems, including Gmail and Outlook — protects data in transit between mail servers. It does not encrypt the content of the email or its attachments at rest. Once the message is delivered, TLS provides no protection. **End-to-end encryption tools like Virtru** encrypt both the message body and all attachments together. The protection is tied to the content, not the connection — so the files remain encrypted even after delivery, and access is controlled by policy, not by network proximity. **Microsoft Purview / Office 365 Message Encryption**: Yes, attachments sent with OME are encrypted. However, the encryption is managed by Microsoft, and control is limited once the message leaves your tenant. Persistent controls like revocation are not available in standard OME configurations. **S/MIME**: Encrypts the entire message including attachments, but only between parties who have exchanged certificates. The short answer: if you want attachment encryption that persists after delivery and gives you ongoing control, you need protection that travels with the data itself — not just with the connection. ### Can encrypted email attachments be forwarded? Whether an encrypted attachment can be forwarded depends on the access controls set by the sender. With native Microsoft 365 encryption, for example, forwarding restrictions can be applied — but only if the sender selects the **Do Not Forward** policy. By default, recipients can forward the email and, in some cases, the attachment becomes accessible to the new recipient. With Virtru, forwarding is governed by the sender's policy settings. You can: - **Disable forwarding entirely** — the recipient cannot share the file with others - **Allow forwarding** while maintaining the encryption (the new recipient still has to authenticate) - **Revoke access** at any time, which instantly locks the file for all recipients, including any forwarded copies This matters because the threat isn't always an external attacker — it's a well-intentioned employee forwarding a sensitive document to a personal account, or sending it to the wrong external contact. Persistent forward controls close that gap. That's what "integration, not replacement" means in practice — the same Outlook workflow you already use, with persistent control over where your files end up. ### What file types can be encrypted as email attachments? Most encryption tools designed for email support all common file types. With Virtru for Outlook and Gmail, any file you can attach to an email can be encrypted — including: - Documents: PDF, Word (.docx), Excel (.xlsx), PowerPoint (.pptx), text files - Images: JPEG, PNG, TIFF, and other image formats - Compressed files: ZIP, 7-Zip - CAD and design files: DWG, DXF (common in defense and manufacturing) - Video and audio files The encryption wraps the file in a protected container regardless of the file format. The recipient's access policy is enforced at the moment they try to open the file — the file type itself doesn't change that. One practical note: some file types (like ZIP archives) should be encrypted at the email level rather than relying on the ZIP's built-in password protection, since ZIP encryption standards vary in strength and don't provide audit trails or revocation capabilities. ### Do recipients need to install software to open an encrypted email attachment? With modern email encryption solutions like Virtru, external recipients typically do not need to install any software. When a recipient gets a Virtru-protected attachment, they open it through a secure web reader. Authentication is handled via their existing Google or Microsoft account, or through a one-time passcode sent to their email. The experience takes about 30 seconds for first-time users. Older encryption standards require more setup: - **S/MIME** requires recipients to have the sender's certificate installed in their email client — practical for internal use or established partner relationships, but creates friction for one-off external sharing. - **PGP** requires recipients to have a PGP-compatible application and manage their own key pairs, which is too complex for most business workflows. For organizations sharing sensitive files with clients, vendors, or partners who aren't on the same email platform, a solution that removes recipient-side friction is important. High-friction encryption tends to get bypassed — users find workarounds, and the files end up unprotected. ### How can you tell if an email attachment is encrypted? Signs that an attachment is encrypted: - **File extension change**: Virtru-protected files have a `.tdf` or `.html` extension wrapping the original file. If you see `quarterly-report.xlsx.tdf`, it's Virtru-encrypted. - **Password prompt on open**: A PDF or ZIP that immediately asks for a password has been encrypted at the file level. - **Secure reader redirect**: If clicking the attachment opens a browser window asking you to sign in before viewing, the file is encrypted (common with Virtru, Microsoft Purview, and similar tools). - **Lock icon in email client**: Some email clients (Outlook, Gmail) display a lock icon next to encrypted messages or attachments. - **Microsoft OME wrapper**: If you receive a message from `no-reply@notify.microsoft.com` with a link to "Read the message," the original email and any attachments were encrypted with Microsoft 365 encryption. If you're the sender and want to confirm that your attachments are encrypted — not just the message body — review your email encryption tool's settings. With Virtru, the encryption status (on/off) and access controls are visible in the compose window before you send. Want to see how this works in Outlook? [Virtru for Outlook](https://www.virtru.com/data-security-platform/email-encryption/outlook) integrates directly into your compose window — no IT overhaul, no new workflow. You can request a demo to see persistent attachment controls in action.   ![Editorial Team](https://www.virtru.com/hubfs/assets/images/logos/virtru/logomark/blue/virtru_LOGOMARKMASTER_BLUE_FINAL.svg) ### Editorial Team The editorial team consists of Virtru brand experts, content editors, and vetted field authorities. We ensure quality, accuracy, and integrity through robust editorial oversight, review, and optimization of content from trusted sources, including use of generative AI tools. [View more posts by Editorial Team](https://www.virtru.com/blog/author/editorial-team) See Virtru In Action Book a Demo Sign Up for the Virtru Newsletter ## Dive Deeper ![](https://www.virtru.com/hubfs/assets/images/icons/left-arrow-circle-blue.webp) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20cyera%20oasis/cyera-oasis.webp) Commentary July 29, 2026 ### The Coin Has Two Sides: What Cyera's Acquisition of Oasis Tells Us About the Future of Security ](https://www.virtru.com/blog/data-centric-security/cyera-oasis) [![](https://www.virtru.com/hubfs/26-Competitor-Blog%20-%20Virtru%20vs%20Box%20copy.webp) File Encryption July 28, 2026 ### Virtru Collaborate vs. Box: Secure File Sharing for Businesses of Any Size ](https://www.virtru.com/blog/virtru-collaborate-vs-box-enterprise) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20william%20mcborrough%20recap/cmmc-compass-will-mcborrough.webp) Compliance July 22, 2026 ### The $600,000 Problem: What the CMMC Pause Actually Revealed About the Defense Industrial Base ](https://www.virtru.com/blog/compliance/mcglobaltech-cmmc-compass) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20three%20stories/three-stories.webp) Zero Trust July 21, 2026 ### Last Week in Critical Infrastructure: Three Stories You Should Read as One ](https://www.virtru.com/blog/data-centric-security/three-stories-converge) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20cmmc%20on%20hold/CMMC-Pause-CUI-Not.webp) Public Sector July 14, 2026 ### CMMC Phase II Is Officially on Hold. NIST and DFARS aren't. ](https://www.virtru.com/blog/compliance/cmmc-phase-2-on-hold-nist-dfars) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/2026%20Newsletter%20Assets/jk-HIO.png) Zero Trust July 10, 2026 ### We Asked Kindervag: Why Are So Many Organizations Still Getting Zero Trust Wrong? ](https://www.virtru.com/blog/zero-trust/kindervag-yeske) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20ShareFile%20Takedown/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20Sharefile.jpg) File Encryption July 10, 2026 ### Looking for a ShareFile Alternative? Here's What Regulated Organizations Need to Know. ](https://www.virtru.com/blog/file-encryption/citrix-progress-sharefile) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20sendsafely%20takedown/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20SendSafely%20(1).jpg) File Encryption July 08, 2026 ### SendSafely vs. Virtru: Which Secure File Sharing Platform Protects Your Data After Download? ](https://www.virtru.com/blog/file-encryption/sendsafely) [![](https://www.virtru.com/hubfs/assets/images/blog/26-Competitor-Blog-Blog%20-%20Virtru%20vs%20Dropbox.webp) File Encryption July 07, 2026 ### Dropbox Alternatives for Secure File Sharing: What IT Teams Are Missing ](https://www.virtru.com/blog/dropbox-alternatives-secure-file-sharing) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20alex%20karp/alex-karp.jpg) Commentary July 07, 2026 ### Alex Karp Is Right About the AI Problem. He's Missing the Solution. ](https://www.virtru.com/blog/zero-trust/alex-karp-palantir-data-sovereignty) [![](https://www.virtru.com/hubfs/assets/temporary%20(use%20this%20for%20uploading%20unoptimized%20images,%20videos,%20etc)/blog%20-%20SACR%20Report/anna-perrone-commentary%20copy.webp) Email Encryption June 29, 2026 ### The Email Security Report Every CISO Should Read, And the Questions It Should Inspire ](https://www.virtru.com/blog/email-security/sacr-anna-perrone-report-2026) ![](https://www.virtru.com/hubfs/assets/images/icons/right-arrow-circle-blue.webp) ## Book a Demo ## Become a Partner Contact us to learn more about our partnership opportunities. ## Become a Compliance Champion Contact us to learn more about our partnership opportunities. - Products - [Product Overview](https://www.virtru.com/data-security-platform/product-overview) - [Virtru for Google Workspace](https://www.virtru.com/data-security-platform/google-workspace) - [Virtru for Microsoft 365](https://www.virtru.com/data-security-platform/microsoft-365) - [Data Protection Gateway](https://www.virtru.com/data-security-platform/virtru-data-gateway) - [Pricing](https://www.virtru.com/data-security-platform/pricing-packages) - Compliance - [HIPAA](https://www.virtru.com/compliance/hipaa-email) - [ITAR](https://www.virtru.com/compliance/itar) - [GDPR](https://www.virtru.com/compliance/gdpr) - [CJIS](https://www.virtru.com/compliance/cjis) - [NIST CUI](https://www.virtru.com/compliance/nist) - [CCPA](https://www.virtru.com/compliance/ccpa) - [FERPA](https://www.virtru.com/compliance/ferpa) - [CMMC](https://www.virtru.com/compliance/cmmc) - Industries - [Healthcare](https://www.virtru.com/industry-solutions/healthcare/) - [Education](https://www.virtru.com/industry-solutions/education/) - [IT & Software](https://www.virtru.com/industry-solutions/telecom-it-and-software) - [Federal Government](https://www.virtru.com/global-public-sector) - [State & Local Government](https://www.virtru.com/industry-solutions/state-local-government) - [Manufacturing](https://www.virtru.com/industry-solutions/manufacturing) - [Financial Services](https://www.virtru.com/industry-solutions/financial-services/) - Platform - [Email Encryption](https://www.virtru.com/data-security-platform/email-encryption) - [File Encryption](https://www.virtru.com/data-security-platform/file-encryption) - [Platform Architecture](https://www.virtru.com/data-security-platform/saas) - [Trusted Data Format](https://www.virtru.com/data-security-platform/trusted-data-format) - [Secure Reader](https://www.virtru.com/data-security-platform/secure-collaboration) - [Audit and Control](https://www.virtru.com/data-security-platform/audit-and-control) - [Encryption Key Management](https://www.virtru.com/data-security-platform/virtru-private-keystore) - Resources - [About Virtru](https://www.virtru.com/about-us) - [Blog](https://www.virtru.com/blog) - [Careers](https://www.virtru.com/careers) - [Leadership & Investors](https://www.virtru.com/leadership/) - [News & Press](https://www.virtru.com/press) - [Partners](https://www.virtru.com/partners/) - [Intellectual Property](https://www.virtru.com/intellectual-property/) - [Security Certifications](https://www.virtru.com/data-security-platform/compliance) - Resource Library - Contact Us - [Contact Us](https://www.virtru.com/contact-us) - [Support](https://support.virtru.com/) - [Sales](https://www.virtru.com/contact-us) - [Become a Partner](https://www.virtru.com/blog/email-encryption/attachments#footer) - [Report a Vulnerability](https://www.virtru.com/responsible-disclosure/) [![Virtur Logo](https://www.virtru.com/hubfs/assets/images/logos/virtru/white/tagline/virtru_TAGLINE_LOGOMASTER_WHITE-01.svg)](https://www.virtru.com/) Subscribe to Our Newsletter [![X Icon](https://www.virtru.com/hubfs/assets/images/icons/x-white.svg)](https://x.com/virtruprivacy) [![LinkedIn Icon](https://www.virtru.com/hubfs/assets/images/icons/linkedin-white.svg)](https://www.linkedin.com/company/virtru) [![Youtube Icon](https://www.virtru.com/hubfs/assets/images/icons/youtube-white.svg)](https://www.youtube.com/@Virtru) © 2026 Virtru · 1801 Pennsylvania Ave NW, 5th Floor, Washington, DC 20006 [Terms](https://www.virtru.com/terms-of-service) & [Privacy](https://www.virtru.com/privacy-policy) | [Cookie Policy](https://www.virtru.com/cookie-policy) & [Preferences ![Pivacy Options logo](https://oag.ca.gov/sites/all/files/agweb/images/privacy/privacyoptions.svg)](https://www.virtru.com/blog/email-encryption/attachments#footer) | [Do Not Sell My Personal Information](https://www.virtru.com/blog/email-encryption/attachments#footer) | [Virtru Trust Center](https://trust.virtru.com/?_ga=2.215796503.1200908638.1747067694-1753239414.1744322796&_gac=1.175361302.1744660048.EAIaIQobChMIppzvranJjAMVN0pHAR3F7gNdEAAYAiAAEgL4qfD_BwE) ```json { "@context" : "https://schema.org", "@id" : "https://www.virtru.com/#organization", "@type" : "Organization", "description" : "Virtru is a data security platform delivering end-to-end encryption and access control for email, files and apps. Trusted by enterprise and defense leaders", "logo" : "https://www.virtru.com/hubfs/assets/images/logos/virtru/blue/virtru_LOGOMASTER_BLUE_HighRes.png", "name" : "Virtru", "sameAs" : [ "https://www.facebook.com/virtruprivacy", "https://www.x.com/virtruprivacy", "https://www.linkedin.com/company/virtru", "https://www.reddit.com/user/virtru_privacy", "https://www.youtube.com/@Virtru" ], "url" : "https://www.virtru.com/" } ``` ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Editorial Team", "url" : "https://www.virtru.com/blog/author/editorial-team" }, "dateModified" : "2026-04-29T20:28:46.310Z", "datePublished" : "2026-04-29T20:05:24.000Z", "headline" : "How to Encrypt Email Attachments, and Why You Should | Virtru", "image" : [ "https://www.virtru.com/hubfs/assets/images/blog/encrypt-attachments-email.webp" ], "mainEntityOfPage" : { "@id" : "https://www.virtru.com/blog/email-encryption/attachments", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.virtru.com/hubfs/virtru2022/images/Virtru%20Logo%20Blue%20(2).svg" }, "name" : "Virtru" } } ``` ```json { "@context" : "https://schema.org", "@type" : "ItemList", "itemListElement" : [ { "@type" : "SiteNavigationElement", "name" : "Products", "position" : 1 }, { "@type" : "SiteNavigationElement", "name" : "Solutions", "position" : 2 }, { "@type" : "SiteNavigationElement", "name" : "Developers", "position" : 3 }, { "@type" : "SiteNavigationElement", "name" : "Company", "position" : 4 }, { "@type" : "SiteNavigationElement", "name" : "Resources", "position" : 5 }, { "@type" : "SiteNavigationElement", "name" : "Support", "position" : 6, "url" : "https://support.virtru.com" }, { "@type" : "SiteNavigationElement", "name" : "Pricing", "position" : 7 } ], "name" : "Main Navigation" } ``` ```json { "@context" : "https://schema.org", "@type" : "FAQPage", "mainEntity" : [ { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "The fastest way to encrypt email attachments in Outlook is with an add-in like Virtru for Outlook. Once installed, you'll see a toggle in the Outlook compose window. Flip it on before you hit send, and every file attached to that message — Word docs, PDFs, spreadsheets — is encrypted with the message. Native Microsoft 365 encryption (via Microsoft Purview) is another option. Go to New Message > Options > Encrypt, then choose an encryption policy. The limitation: this approach relies on Microsoft's key management, and recipients outside your Microsoft tenant may hit friction when opening attachments. For organizations with stricter requirements — healthcare, legal, defense contracting — a dedicated solution like Virtru gives you persistent controls that travel with the file: you can set expiration dates, disable forwarding, and revoke access even after the email lands in the recipient's inbox." }, "name" : "How do you encrypt email attachments in Outlook?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "If you've just received a file you can't open, don't worry — you almost certainly don't need to install anything. How you proceed depends on how the attachment was encrypted. Virtru-encrypted attachments: The sender's email will include a secure link or a protected file. Click Open with Virtru or open the file directly — you'll be prompted to authenticate (usually via Google or Microsoft sign-in, or a one-time verification code). No software installation required for recipients. Microsoft 365 / Purview-encrypted attachments: If you're in the same Microsoft tenant, attachments open normally. If you're external, you'll receive a message from Microsoft with a link to read the content in the browser or via a passcode. You may have to create an account or password to do so. S/MIME-encrypted attachments: You need the sender's public certificate installed in your email client. Open the email in Outlook or Apple Mail — if the certificate is in place, the attachment decrypts automatically. PGP/GPG-encrypted files: You need a PGP-compatible tool (like Kleopatra or GPG Keychain) and the sender's public key to decrypt the attachment locally. If an encrypted attachment won't open, the most common reasons are: you're accessing it from a different email address than the one it was sent to, the sender has already revoked access, or the attachment has passed its expiration date." }, "name" : "How do you open an encrypted email attachment?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "There are two approaches: password-protect the PDF itself, or encrypt it as part of the email. Option 1: Password-Protect the PDF file directly Adobe Acrobat lets you add password protection to a PDF before you attach it. Go to File > Protect Using Password, set a password, and save. The recipient needs the password to open it. This works across any email platform but requires you to share the password separately — ideally through a different channel. Option 2: Encrypt the PDF as part of an encrypted email This is the more practical approach for business use. With Virtru for Outlook or Gmail, you compose your email with the PDF attached, toggle encryption on, and send. The PDF is wrapped in a Trusted Data Format (TDF) container that enforces access policy at the point of opening — no separate password to manage, and you retain the ability to revoke access or set an expiration date. For regulated environments (HIPAA, CMMC, ITAR), encrypting at the email level — rather than password-protecting the file — is generally preferred because it creates an audit trail and gives administrators persistent control over the document after it's shared." }, "name" : "How do you encrypt a PDF attachment before emailing it?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "It depends on the encryption method. TLS (Transport Layer Security) — the default \"encryption\" in most email systems, including Gmail and Outlook — protects data in transit between mail servers. It does not encrypt the content of the email or its attachments at rest. Once the message is delivered, TLS provides no protection. End-to-end encryption tools like Virtru encrypt both the message body and all attachments together. The protection is tied to the content, not the connection — so the files remain encrypted even after delivery, and access is controlled by policy, not by network proximity. Microsoft Purview / Office 365 Message Encryption: Yes, attachments sent with OME are encrypted. However, the encryption is managed by Microsoft, and control is limited once the message leaves your tenant. Persistent controls like revocation are not available in standard OME configurations. S/MIME: Encrypts the entire message including attachments, but only between parties who have exchanged certificates. The short answer: if you want attachment encryption that persists after delivery and gives you ongoing control, you need protection that travels with the data itself — not just with the connection." }, "name" : "Does encrypting an email also encrypt its attachments?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Whether an encrypted attachment can be forwarded depends on the access controls set by the sender. With native Microsoft 365 encryption, for example, forwarding restrictions can be applied — but only if the sender selects the Do Not Forward policy. By default, recipients can forward the email and, in some cases, the attachment becomes accessible to the new recipient. With Virtru, forwarding is governed by the sender's policy settings. You can: Disable forwarding entirely — the recipient cannot share the file with others Allow forwarding while maintaining the encryption (the new recipient still has to authenticate) Revoke access at any time, which instantly locks the file for all recipients, including any forwarded copies This matters because the threat isn't always an external attacker — it's a well-intentioned employee forwarding a sensitive document to a personal account, or sending it to the wrong external contact. Persistent forward controls close that gap. That's what \"integration, not replacement\" means in practice — the same Outlook workflow you already use, with persistent control over where your files end up." }, "name" : "Can encrypted email attachments be forwarded?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Most encryption tools designed for email support all common file types. With Virtru for Outlook and Gmail, any file you can attach to an email can be encrypted — including: Documents: PDF, Word (.docx), Excel (.xlsx), PowerPoint (.pptx), text files Images: JPEG, PNG, TIFF, and other image formats Compressed files: ZIP, 7-Zip CAD and design files: DWG, DXF (common in defense and manufacturing) Video and audio files The encryption wraps the file in a protected container regardless of the file format. The recipient's access policy is enforced at the moment they try to open the file — the file type itself doesn't change that. One practical note: some file types (like ZIP archives) should be encrypted at the email level rather than relying on the ZIP's built-in password protection, since ZIP encryption standards vary in strength and don't provide audit trails or revocation capabilities." }, "name" : "What file types can be encrypted as email attachments?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "With modern email encryption solutions like Virtru, external recipients typically do not need to install any software. When a recipient gets a Virtru-protected attachment, they open it through a secure web reader. Authentication is handled via their existing Google or Microsoft account, or through a one-time passcode sent to their email. The experience takes about 30 seconds for first-time users. Older encryption standards require more setup: S/MIME requires recipients to have the sender's certificate installed in their email client — practical for internal use or established partner relationships, but creates friction for one-off external sharing. PGP requires recipients to have a PGP-compatible application and manage their own key pairs, which is too complex for most business workflows. For organizations sharing sensitive files with clients, vendors, or partners who aren't on the same email platform, a solution that removes recipient-side friction is important. High-friction encryption tends to get bypassed — users find workarounds, and the files end up unprotected." }, "name" : "Do recipients need to install software to open an encrypted email attachment?" }, { "@type" : "Question", "acceptedAnswer" : { "@type" : "Answer", "text" : "Signs that an attachment is encrypted: File extension change: Virtru-protected files have a .tdf or .html extension wrapping the original file. If you see quarterly-report.xlsx.tdf, it's Virtru-encrypted. Password prompt on open: A PDF or ZIP that immediately asks for a password has been encrypted at the file level. Secure reader redirect: If clicking the attachment opens a browser window asking you to sign in before viewing, the file is encrypted (common with Virtru, Microsoft Purview, and similar tools). Lock icon in email client: Some email clients (Outlook, Gmail) display a lock icon next to encrypted messages or attachments. Microsoft OME wrapper: If you receive a message from no-reply@notify.microsoft.com with a link to \"Read the message,\" the original email and any attachments were encrypted with Microsoft 365 encryption. If you're the sender and want to confirm that your attachments are encrypted — not just the message body — review your email encryption tool's settings. With Virtru, the encryption status (on/off) and access controls are visible in the compose window before you send. Want to see how this works in Outlook? Virtru for Outlook integrates directly into your compose window — no IT overhaul, no new workflow. You can request a demo to see persistent attachment controls in action." }, "name" : "How can you tell if an email attachment is encrypted?" } ] } ```