Is mail in Outlook normally encrypted?

Posted on 2011-10-31
Last Modified: 2012-08-13
If I send mail internally from myself to a another member of my company is that mail encrypted end to end?

How about if either of us access that email by Outlook Web Access?

Can someone use packet captures to gain information in the email in transit through the corporate network or Internet?
Question by:Dragon0x40
    LVL 9

    Accepted Solution

    By default, emails are not encrypted. Below is a link that should help you though.
    LVL 13

    Assisted Solution


    By default, email send using base64 encoding, which means someone can snoop the packet internally or externally. Your mail admin also have privillage to read it if they want to.

    It is only encrypted end to end when you use Trust Center, which also means that you need to have key pair - using your private key to encrypt message and the reciver will use your public key to decrypt it back. You might need to have proper PKI infrastucture for this. So that all person have their own private key and establish their public key.

    Here is the cheap way of doing this using free valid CA comodo cert,

    You also might want to have a look on this as another solution using your own PGP cert. (Basically for me, I prefer above because over here your cert is not sign by valid CA),

    You might have some issue when opening encrypted email via web (OWA). I never experienced it, but one thing for sure, you'll need to have public key on that computer too to open your email.
    LVL 14

    Assisted Solution

    Also does depend on the version of outlook and the version of exchange. With exchange 07 or 10 and outlook o7 or 10 it's easy to encrypt the rpc connection thus end to end is protected.

    However mailflow over the Internet is not encrypted. You can use transport layer security (TLS) but that's usually only beneficial when you and a partner wish to exchange mail securely.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Join & Write a Comment

    Set OWA language and time zone in Exchange for individuals, all users or per database.
    Resolve Outlook connectivity issues after moving mailbox to new Exchange 2016 server
    In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
    The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now