How do I Send a Secure Email in Outlook?

KnowBe4 Team | Mar 15, 2026

Sending an unsecured email can be likened to writing sensitive information on a sticky note and leaving it on someone else's desk: anybody can intercept and share that information. Fortunately, there are ways to ensure your emails are safe from the prying eyes of hackers through encryption, meaning your message — no matter how sensitive — is seen only by the intended recipient.

An encrypted message is changed from plain text into ciphertext, which is unreadable and remains that way until it reaches its destination. That means that even the most determined hacker won't be able to gather sensitive information from the email. Once it arrives with the intended person(s), the encryption is removed, provided their identity has been confirmed.

Risks of Unsecured Email and Benefits of Encryption

Most of us are guilty of occasionally copying in the wrong person, clicking 'reply all' unintentionally, or misspelling an email address. Without the security of encryption, this can lead to serious problems. If an unauthorized person sees sensitive information not intended for their eyes, a mere accident turns into a data breach.

There are significant risks associated with sending unsecured emails. These include:

  • Risk of attack
  • Data loss
  • Damage caused by data breaches
  • Breaking data protection regulations
  • Fines and legal action
  • Damage to business reputation

It's easy to become complacent about emails — something most of us have easy access to and use every day — but a simple layer of added security protects us from risk. Cybercriminals spend their lives searching for weak points they can take advantage of; the least we can do is make that more challenging for them. That's why it's so important to use all the tools at your disposal to make sure your emails are sent securely.

How to Secure an Email with Microsoft 365

For most Outlook users, emails are encrypted through S/MIME. This only works if both sender and recipient use Outlook and have their certificates installed, confirming their identities. That works well as a layer of basic protection against data loss.

Microsoft 365 also offers built-in message encryption for senders and recipients who use Outlook and have an Office 365 subscription.

To summarize:

  • Use Outlook to open the email message
  • Navigate to the "File" and click "Properties"
  • Scroll to "Security Settings" and check the box next to "Encrypt message contents"
  • Compose your email message as you usually would
  • Click "Send"

However, if one party doesn't have the correct certificates or encryption tools, sending that email using plain text might seem the only option. Thankfully, Outlook add-ons allow users to encrypt every email they send — even if the recipient is outside the organization and using another email provider.

How Intelligent Email Security can Augment Microsoft 365's Existing Capabilities

Intelligent email security tools, such as KnowBe4 Protect, ensure all outgoing emails are encrypted — even if they are intended for a recipient outside your network. Users can do this directly from Outlook with just a mouse click.

Another significant benefit of this add-on service is that emails are encrypted at rest, not just when they're in transit, meaning your data is protected at every stage. That minimizes the chances attackers have to access sensitive information, leading to a data breach.

Protect also offers maximum flexibility for users. In this bring-your-own-device world where so many individuals are working from their laptops, phones, and tablets, Protect operates on the principle of flexible authentication. That means sensitive information always remains secure, no matter what device that's in use. On top of this, users can select their encryption level depending on the sensitivity of the sent data. They can also control the actions of the email's recipient, such as preventing them from copying or forwarding data.

To further this, machine learning tools, such as KnowBe4 Prevent can detect contextual errors that might lead to a data leak. For example, the tool analyzes user relationships to understand what should and shouldn't be sent. This tool helps prevent sensitive information from being sent to a mistyped email address or an external client being included in an email with an attachment meant for internal eyes only.

While Microsoft Outlook's built-in encryption functionality offers a solid layer of security options for users, for maximum protection, consider add-ons like KnowBe4 Cloud Email Security that further improve your email security. These are seamless additions, removing any complexity for the user and making encryption an integrated part of daily life.

Secure Email FAQs

What is the difference between S/MIME and Office 365 Message Encryption?

S/MIME is a traditional method that requires both the sender and recipient to have specific digital certificates installed. Office 365 Message Encryption is more flexible, allowing you to send secure mail to users even if they don't use Outlook or have special certificates.

Can I send an encrypted email to someone outside of my organization?

Yes. While built-in Outlook features like S/MIME can be restrictive, using Outlook add-ons like KnowBe4 Protect allows you to encrypt messages sent to any email provider. The recipient is typically verified through a secure portal or flexible authentication.

Does Outlook encryption protect my attachments?

Yes, when you encrypt an email in Outlook, the attachments are encrypted along with the message body. However, for maximum security, advanced tools allow you to set specific permissions, such as preventing the recipient from downloading, copying, or forwarding those attachments.

What happens if I forget to hit the "Encrypt" button?

Human error is a leading cause of data breaches. This is why many organizations use intelligent security tools like KnowBe4 Prevent. These tools use machine learning to scan your email in real-time and automatically prompt you to encrypt if they detect sensitive data or an unusual recipient.

Is my email protected once it arrives in the recipient's inbox?

Standard encryption often only protects data "in transit." For full protection, look for solutions that provide encryption "at rest." This ensures the data remains ciphertext even while sitting in a mailbox, protecting it from hackers who might gain unauthorized access to the account later.


See KnowBe4 Cloud Email Security in Action

Request a personalized demo today to see how KnowBe4's Cloud Email Security products will enhance your email security.

Request a Demo


Subscribe to Our Blog


We Train Humans & Agents




Get the latest insights, trends and security news. Subscribe to CyberheistNews.