Office 365 Email Encryption Steps
When you need to protect the privacy of an email message, encrypt it. Encrypting an email message in Outlook means it's converted from readable plain text into scrambled cipher text. Only the recipient who has the private key that matches the public key used to encrypt the message can decipher the message for reading.
Encryption helps protect regulated or sensitive data in transit and at rest in Microsoft 365. Use encryption when sending:
-
PII (e.g., SSNs where permitted), financial or payroll data, HR records
-
Student information subject to FERPA
-
Research data, contracts, or any content marked Confidential
Note: Encryption protects message contents and supported attachments. It does not hide email metadata (From/To/Subject/Date).
NCCU uses Microsoft 365 Message Encryption (OME). You’ll see Encrypt and Do Not Forward options in Outlook.
Some users may also see Sensitivity labels (e.g., “Confidential – NCCU”). Those labels can automatically apply encryption and usage restrictions.
Before you start:
How to send an encrypted message:
A. Outlook on the Web (OWA) – recommended
- Go to outlook.office.com and sign in.
- Select New Mail
- Compose your message and add recipients.
- Click the Encrypt icon (lock) in the message toolbar.
- Choose Encrypt or Do Not Forward.
- Click send
How to remove encryption: Click the Encrypt icon again and choose Remove Encryption.
B. Outlook for Windows (New Outlook and Classic)
- Select New Email.
- Add recipients, subject and body.
- Choose Options tab, then Encrypt.
- Select Encrypt-Only or Do Not Forward from the drop down (note: wording may vary slightly).
- Click Send.
Quick check: After applying encryption, you'll see an Information Rights Management/Protection banner above the message.
C. Outlook for MAC
- Select New Message.
- On the ribbon, choose Options, then Encrypt.
- Select Encrypt or Do Not Forward.
- Click Send.
D. Outlook Mobile (iOS/Android)
- Open the Outlook App, then select Compose.
- Click on the More menu (...) and then select Encrypt (or Sensitivity if labels are in use).
- Choose Encrypt or Do Not Forward.
- Select Send.
Note: If you don't see Encrypt on your mobile app, send the email from OWA or contact the Service Desk to confirm your mobile app and account policy support.