Tag Archives: Gmail

Securely migrate existing encrypted messages to Gmail client-side encryption (CSE)

What’s changing 

Beginning today, admins can migrate encrypted emails from other services like Microsoft 365, Microsoft Exchange, or Virtu, to Gmail client-side encryption in the S/MIME format. This enables Google Workspace customers to simplify the migration process by bulk importing sensitive emails as S/MIME messages without compromising their privacy or compliance posture.


Specifically: 
  • S/MIME messages imported from other mail providers are now supported by Gmail CSE 
  • Virtru customers can use our migration utility to encrypt their plain-text archives from Vault or Takeout, and import them as S/MIME messages 
  • Customers can bulk-import any plain-text email archives into Gmail as S/MIME messages

Additional details

The Gmail CSE Migration Utility is available for Windows, Mac, and Linux and supports PST & Mbox file formats. 

Getting started 


Rollout pace 

Web & Android: 
  • This feature is available now.
iOS: 

Availability 

  • Available to Google Workspace Enterprise Plus, Education Standard, and Education Plus customers 

Resources 

Create fully customized email campaigns using new layout editor tool

What’s changing

In 2022, we made it easier for you to send professional-looking emails, announcements, newsletters and more with layouts. These are predefined email templates that can be further customized with company or brand color schemes, logos, images, links and more. In 2023, we took this a step further by introducing the ability to customize an existing template, reuse a custom layout in multiple email campaigns, or create a brand new layout from scratch for Workspace Individual subscribers. 


Today, we’re excited to announce that even more users across Google Workspace editions can now create customized email layouts using a new email layout editor that is accessible from the compose screen in Gmail or Google Drive. In the layout editor, you can create a new email layout from scratch or select from a predefined set of email templates, which include images, text elements and buttons. 


You can then fully customize these templates by placing elements such as color schemes, logos, images, footer text and links wherever you’d like. You can also share a layout file directly from the email layout editor using the Share button. Once another user has edit access, they can open the same layout in their Gmail or from Drive and you can collaborate with them in real time. 
Create fully customized email campaigns using new layout editor tool


Who’s impacted 

Admins and end users 


Why you’d use it 

With Google Workspace, you can create, collaborate and communicate seamlessly across our apps. This new feature is yet another way we are striving to help you do so as you create fully customized announcements, newsletters, and other mass-email campaigns. 

Getting started 

  • Admins: 
    • Customized layouts are ON by default at the domain level. You can turn layouts ON or OFF for specific domains, OUs, or groups by going to the admin panel for Gmail. 
    • If you don't want users to use Docs, Sheets, Slides, Drawings, Forms, and email layouts, but to still use Drive for file management, leave Drive turned ON and turn OFF Docs creation.
    • Visit the Help Center to learn more about managing Gmail settings for your users, customizing access policies for different organizational units or groups, and turning Docs creation ON or OFF.
  • End users: If enabled by your admin, visit the Help Center to learn more about using layouts in Gmail and Drive. 
    • Gmail: 
      • You can access custom email layouts in Gmail from the layout icon in your Compose toolbar.

gmail - compose toolbar
      • You can then open the full screen editor from the embedded editor in Gmail using the “Edit in full screen” button in the top-right:

gmail - edit in full screen


    • Drive:
      • You can open an email layout that you have in Drive (an email layout created previously or an email layout shared with you) by double clicking the email layout file in Drive.

email layout in drive
      • Your custom layouts are stored in Drive as a special file type associated with the layouts editor.  You can find email layouts in Drive by searching: “type:email-layouts”
    • You can also access the standalone editor by going to docs.google.com/email-layouts/create?title=newDoc.
    • Mail-merge tags work with email layouts when enabled in Gmail. You can insert mail merge tags in email layouts. Visit the Help Center to learn more about sending personalized emails with mail merge.

Rollout pace 

Embedded layout editor (in Gmail's compose window): 
Full screen editor for email layouts & feature availability via Google Drive: 

Availability

  • Available to Workspace Business Standard, Business Plus, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus and Workspace Individual subscribers 

Resources 

Set client-side encryption as the default mode for new emails, events, and files on mobile

What’s changing 

Admins can now set client-side encryption (CSE) to be on by default on Android and iOS for: 
  • Newly drafted Gmail messages and replies 
  • Newly created Google Calendar events 
  • Newly uploaded Google Drive files

Client-side encryption in Gmail


Admins can now set client-side encryption as the default mode for users on both web and mobile that regularly handle sensitive data. This allows organizations the flexibility to meet their compliance and regulatory requirements and reduce the burden on change management programs. Each new email, event and uploaded file on mobile is automatically client-side encrypted with customer managed keys meaning the user is compliant with their org’s policy from the outset. For organizations with strict regulatory or sovereignty requirements, this can help them close compliance gaps by defaulting users to the preferred mode for handling sensitive data while on the go. 

For more information, check out our original announcement.

Getting started


Rollout pace


Availability

  • Google Workspace Assured Controls is available as an add-on to Google Workspace Enterprise Plus customers only. For more information, contact your Google account representative.

Resources


Google Workspace Updates Weekly Recap – January 19, 2024

2 New updates

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.


Unsubscribe from emails on Gmail more easily 
We know managing unwanted emails is a source of frustration for many users. That’s why we announced new guidelines for bulk senders a few months ago to ensure users stay safe. Now, we’re introducing new ways to make it even easier to unsubscribe from unwanted emails in Gmail on web and mobile by:
  • Adding the unsubscribe button to the hover actions in the threadlist on web. When the unsubscribe button is clicked, Gmail sends a http request or an email to the sender to remove your email address from their mailing list. 
    Unsubscribe from emails on Gmail more easily
  • Moving the unsubscribe button from the three dot menu to appear more prominently in your email on your Android and iOS devices.
Additionally, we know it is common for people to receive unwanted messages, despite initially signing up to receive them from brands or organizations. These messages often originate from legitimate senders, and marking them as spam can negatively impact the sender's email reputation and can potentially affect the deliverability of future emails. For this reason, we're changing the text of the buttons to make it clearer for users to choose between unsubscribing or reporting a message as spam. 

These features are now available to all Google Workspace customers and users with personal Google Accounts on web and iOS devices, and are rolling out now on Android devices at an extended pace (potentially longer than 15 days for feature visibility). | Learn more about unsubscribing from emails and reporting spam in Gmail.


Updating the mobile experience on Android tablets and foldable devices 
Last year, we announced enhancements to the Google Drive mobile experience on Android tablets. This included several modernizations, such as shifting the navigation bar to the side of the Drive app. Similarly, we’ve moved the navigation bar for Gmail to the side to optimize the experience on tablets and foldable devices. This migration will make it easier for users to switch tabs in Gmail. | Available now to all Google Workspace customers and users with personal Google Accounts. 
Updating the mobile experience on Android tablets and foldable devices




Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.


Launch the Lucidspark whiteboarding app directly from Google Meet Series One Board 65 and Desk 27 devices 
By the end of the month, Lucidspark by Lucid Software can be launched directly from Google Meet Series One Board 65 and Desk 27 devices. With this integration, users will be able to share and participate in a Lucidspark whiteboard session in a Meet call, either initiated from the Series One Board 65 and Desk 27 or a remote participant on the call. | Learn more about the Lucidspark whiteboarding app. 

Use comments & action items on your client-side encrypted Google Docs 
You can now collaborate with others on client-side encrypted Google Docs to add, edit, reply, filter, or delete comments. You can also assign action items to yourself or others. This added functionality helps bring parity to unencrypted docs while also ensuring your data is behind encryption keys you control, including the identity provider used to access those keys. | Available to Google Workspace Enterprise Plus, Education Standard and Education Plus customers only. | Learn more about CSE comments & action items in Docs. 

Combine multiple video effects, improve lighting and audio in Google Meet 
We’re launching three new features to personalize your appearance in Google Meet. | Learn more about combining multiple video effects on web and mobile, studio lighting on web and studio sound. 

Join meetings as a guest without a Google account on mobile devices 
You can now quickly join a meeting as a guest without signing into a personal or work Google account or creating a new Google account. This functionality already exists for meetings on the web and, by expanding to mobile, guests now have greater flexibility for joining Meet meetings on the go. | Learn more about joining meetings as a guest.

Star messages in Google Chat on mobile
Last November, we introduced starred on web, an additional shortcut in the redesigned Google Chat navigation panel that helps you stay on top of your most important messages. We’re excited to announce this is now available on Android and iOS mobile devices. | Learn more about starring messages.

Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.

Rapid Release Domains: 

Rapid and Scheduled Release Domains: 

For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases). 

Extending Trusted Types to Gmail

What’s changing

Last year, we improved the client-side security of Google Docs, Sheets, Slides, Forms, Sites, Drawings, Drive, and Calendar with Trusted Types. This browser-based runtime feature limits the uses of Document Object Model (DOM) APIs that are used by the apps listed above or third-party extensions. Trusted Types also reduce the possibility of Document Object Model Cross Site Scripting (DOM XSS), which continues to be one of the most critical threats to web security. 

DOM XSS occurs when a cyber attacker injects malicious code into a web page, which can then be executed by the victim's browser. This can allow the cyber attacker to steal cookies, hijack sessions, and even take control of the victim's computer. 

To defend against this, we’re excited to announce the expansion of Trusted Types to Gmail. This will provide a defense against DOM XSS and further enhances our advanced data protection controls to keep users and data safe across more of the apps they use everyday. 


Who’s impacted 

Developers (relying on any Chrome extensions that modify DOM APIs.) 


Additional details 

This new enforcement mode will require third-party extensions to use typed objects instead of strings when assigning values to DOM APIs. Once Trusted Types are fully enforced, the Trusted Types directive will be present in the Content Security Policy (CSP) header: 

Content-Security-Policy: require-trusted-types-for 'script';report-uri https://mail.google.com/mail/cspreport 


Getting started 

  • Admins: There is no admin control for this feature. 
  • Developers: 
    • To make code Trusted Types compliant, signal to the browser that data being used within the context of these DOM APIs is trustworthy by creating a Trusted Type special object. 
    • There are several ways to be Trusted Types compliant, such as removing the offending code, using a library (such as safevalues or DOMPurify), or creating a Trusted Types policy. To ensure a seamless experience for users, we recommend employing these techniques before Trusted Types enforcement is rolled out. Failure to make code Trusted Types compliant may cause feature breakages for third-party extensions as their DOM manipulations will be blocked by the browser. 
  • End users: There is no end user setting for this feature. 

Rollout pace 


Availability 

  • Available to all Google Workspace customers and users with personal Google Accounts 

Resources 

New guide to help screen reader users transition from Gmail HTML view to Gmail Standard view

What’s changing

Earlier this year, we informed users that Gmail Basic HTML view for desktop web and mobile web would be disabled starting in early 2024. We know that many users in the accessibility community use Basic HTML view, so today we’re sharing a guide to help screen reader users make the switch from HTML to Standard view. This new guide, along with an existing resource to ensure the best Gmail experience when using a desktop screen reader, should help users get up to speed on Gmail Standard view. 

If you haven’t used Standard view recently, you’ll notice we’ve made numerous usability improvements, including enhancements for people that prefer or require the precision of navigating the user interface by keyboard or screen reader. Accessibility of Standard view has significantly improved over the last few years and we’re committed to continuing to improve the accessibility experience and making new features accessible going forward. 

Getting started 

  • Admins: There is no admin control for this feature. You can use Gmail on your browser in Basic HTML view through February 2024. After this, Gmail automatically changes to Standard view. 
  • End users: Once Basic HTML view is disabled, users will automatically be redirected to the Standard Gmail view which provides the latest in Gmail security and features. Users on old browsers may need to update their browser to use the Standard view. On mobile, users can also download the official Gmail app. Visit the Help Center to learn more about using Gmail with a screen reader. 

Rollout pace 

Availability 

  • This impacts all Google Workspace customers and users with personal Google Accounts 

Resources 

Set client-side encryption as the default mode for new emails, events, and files

What’s changing

Admins can now set client-side encryption (CSE) to be on by default for:

  • Newly created Gmail messages, Google Calendar events. 
  • Newly created Google Docs, Sheets, and Slides files.
  • Newly uploaded Google Drive files.

Admins can set client-side encryption as default on for users in Organizational Units (OUs) that regularly handle sensitive data requiring additional encryption. This allows organizations the flexibility to meet their compliance and regulatory requirements and reduce the burden on change management programs. Users are prompted to create a CSE object natively in each app meaning their emails, events and files are encrypted by default with customer-managed keys and are private from Google. For organizations with strict regulatory or sovereignty needs, this can help them close compliance gaps by defaulting users to the preferred mode for handling sensitive data.  

Drive:


Gmail:

This is available on the web initially, with support coming for mobile apps in the future. 

Who’s impacted

Admins and end users


Why it matters

This feature is important for Google Workspace admins as it improves users compliance behavior without sacrificing productivity and increases control for admins implementing data control policies. It also includes improved audit logs, providing more detail for admins compiling regulatory compliance reports.

Workspace already uses the latest cryptographic standards to encrypt data by default, at rest and in transit between our facilities. Client-side encryption goes beyond this, giving organizations authoritative control and privacy as the sole owner of private encryption keys and the identity provider of the encryption keys. It gives organizations higher confidence that any third party, including Google and foreign governments, cannot access their confidential data. Users can continue to collaborate across their preferred apps in Workspace while IT and compliance teams can ensure that sensitive data stays compliant with regulations. 


Getting started

Rollout pace


Availability

  • Google Workspace Assured Controls is available as an add-on to Google Workspace Enterprise Plus customers only. For more information, contact your Google account representative.

Resources


Google Workspace Updates Weekly Recap – December 1, 2023

3 New updates

Unless otherwise indicated, the features below are available to all Google Workspace customers, and are fully launched or in the process of rolling out. Rollouts should take no more than 15 business days to complete if launching to both Rapid and Scheduled Release at the same time. If not, each stage of rollout should take no more than 15 business days to complete.


New ways to use the Google Sheets app on iOS devices 
You can now copy charts from the Google Sheets app on all iOS devices and paste them externally as images or within the same spreadsheet as a duplicate chart. In addition, you can modify text formatting using the contextual toolbar in Sheets when a keyboard is attached to iOS tablets. | Rolling out to Rapid Release and Scheduled Release domains now. | Available to all Google Workspace customers and users with personal Google Accounts. | Learn more about adding & editing a chart or graph and editing & formatting a spreadsheet. 
New ways to use the Google Sheets app on iOS devices



Adding ‘Admin managed apps’ category to Google Workspace Marketplace
We’re excited to announce a new featured app category in the Marketplace: Admin managed. These Enterprise apps can be installed only by a Google Workspace administrator for their organization. | Available now to all Google Workspace customers. | Learn more about Featured app categories. 


Bulk select in Gmail on Android and iOS devices 
We’re introducing a feature that enables you to bulk select a batch of messages in the email threadlist with one tap using the Gmail app on Android and iOS devices. After clicking the select all icon, a batch of messages will be selected, enabling you to easily perform email actions such as deleting multiple messages or marking them as “read”. | This feature is available now on Android devices and is rolling out now to Rapid Release and Scheduled Release domains on iOS devices. | Available to all Google Workspace customers and users with personal Google Accounts. 
Bulk select in Gmail on Android and iOS devices



Previous announcements

The announcements below were published on the Workspace Updates blog earlier this week. Please refer to the original blog posts for complete details.



Create shareable video presentations in Google Slides 
We’re introducing slides recordings, a new Google Slides feature that lets you easily record yourself presenting, and then share the presentation with others to view when it works for them. | Available to Google Workspace Business Standard, Business Plus, Enterprise Starter, Enterprise Essentials, Enterprise Essentials Plus, Enterprise Standard, Enterprise Plus and Education Plus only. | Learn more about slides recordings. 

The next evolution of automated data entry in Google Sheets 
Enhanced Smart Fill in Google Sheets is available for customers with the Duet AI for Google Workspace Enterprise add-on. | Learn more about enhanced smart fill. 

Expanding message bubbles in Google Chat to iOS devices 
In September, we introduced message bubbles in Google Chat on web and Android, enabling users to more easily differentiate incoming versus outgoing messages in the Chat message stream. This week, we’re excited to announce the expansion of message bubbles to iOS devices. | Learn more about message bubbles. 

Updates to the Google Drive scanner on Android & iOS devices 
We’re introducing additional enhancements to the Drive scanner on Android devices, which now powers the Google Pixel camera and includes improvements to the scanner experience when capturing content. We’re also expanding the Google Drive scanner and title suggestion feature to iOS devices. | Learn more about Drive scanner. 

Introducing a new homepage view in Google Drive 
We’ve added a new streamlined homepage for Drive called Home that makes it easier and faster for you to find files that matter most. | Learn more about Drive home. 

Introducing a new mobile experience for Google Chat 
We recently announced a streamlined user experience in Google Chat to help you find what you need much faster, including new features like home and mentions. Starting today, we’re excited to introduce a new bottom navigation bar within the Chat app on Android & iOS devices to help you easily access these features on mobile. | Learn more about the Chat mobile experience. 

Google Vault now supports Google Calendar 
Google Vault now supports Calendar, which means customers can take new actions around Calendar data. | Available to Google Workspace Business Plus, Enterprise Essentials, Enterprise Essentials Plus, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus customers or customers with the Vault add-on license only. | Learn more about Vault supporting Calendar. 

More insights to help admins troubleshoot Google Meet hardware issues 
In 2022, we introduced several improvements for managing Google Meet hardware devices. These improvements included surfacing additional information about device issues, such as a description of the issue, when the issue was detected, and more. Now, we’re taking these improvements one step further by providing admins with even more data points. | Learn more about Google Meet hardware issues. 

Monitor insider risk of Google Workspace data with Chronicle 
Admins can now more seamlessly integrate their Google Workspace data with Chronicle (Google’s cloud-native Security Operations platform), to quickly detect, investigate and take action on risky activity and threats. | Available to Google Workspace Enterprise Standard and Enterprise Plus customers only. | Learn more about Chronicle. 

Google Classroom now supports roster import from SIS partners
Educators can now easily import students from their student information system (SIS) to Google Classroom using OneRoster. This integration saves educators time and helps make class setup much quicker. | Available to Education Plus and the Teaching and Learning Upgrade only. | Learn more about roster import. 

Completed rollouts

The features below completed their rollouts to Rapid Release domains, Scheduled Release domains, or both. Please refer to the original blog posts for additional details.


Rapid Release Domains: 
Scheduled Release Domains: 
Rapid and Scheduled Release Domains: 


For a recap of announcements in the past six months, check out What’s new in Google Workspace (recent releases).