Email encryption
If you want to protect the contents of an email message, you can encrypt the message. Encryption means that the message is converted into a form that can only be read by the sender and the specified recipients — outsiders cannot read it.
In Outlook, a message can be encrypted automatically by setting the sensitivity label to 2A Restricted Confidential.
Because the message is encrypted for individual users, an encrypted message cannot be sent to service addresses or groups.
Manual encryption when composing a new message
New Outlook / Outlook on the web:
- Open a new email message in its own window
- Select Settings at the top
- Click Encrypt
Outlook Classic:
- Open a new email message in its own window
- Select File at the top
- Select Encrypt → Encrypt Only
Attachments:
- Attachments containing confidential information must be encrypted before sending. The easiest tool for this is 7-Zip, which allows you to combine multiple files into a single archive and encrypt it strongly at the same time. Instructions for 7-Zip and sending attachments can be found on the 7-Zip page.
- Email encryption features:
- PDF files remain encrypted on the recipient’s side
- Other attachments are protected during delivery, but the protection may not remain permanently
- If an attachment is added from the TUNI M365 service, the message will contain a link to the file
→ Remember to grant the recipient access to the file before sending the message
Notes
Within the organization:
- If the recipient is within our organization and encryption features are enabled, the message opens automatically without additional steps.
- An encrypted message can be identified by the padlock icon shown in the message list.
- When opening the message, a notification appears at the top indicating that the message is encrypted.
External recipients:
- The recipient receives a notification about the encrypted message
- The message may appear suspicious, as similar formatting is also used in phishing emails
→ It is recommended to agree in advance on sending an encrypted message so that it is recognized as trustworthy
One-time passcode:
- Sent to the same email address at the recipient’s request
- Valid for 15 minutes
- If the passcode expires or does not work, a new one can be requested from the same view
- Once the code is entered, the message will open
IT Helpdesk
+358 294 520 500
it-helpdesk [at] tuni.fi (it-helpdesk[at]tuni[dot]fi)
helpdesk.tuni.fi
Published: 4.11.2021
Updated: 10.6.2026