CloudMask Secure Gmail is a browser-based end-to-end encryption tool designed for Gmail users. It adds a layer of encryption directly within the Gmail interface, ensuring that only explicitly trusted contacts can read email content — excluding third parties such as Google, hackers, and government agencies. Key aspects of how it works: - Users activate encryption with a single click via a Lock button within the Gmail compose window. - Both the subject line and body of emails are encrypted before any data is transmitted, meaning even drafts are protected and no keystrokes are leaked to Google. - Email attachments are automatically encrypted, including their file names. - Once a protected message is sent, any replies or forwards within the conversation thread are also encrypted by default. - Users manage a list of trusted contacts with whom secure communication channels are established. Access can be revoked at any time. - Recipients invited to a secure channel receive the same level of protection at no cost. The product operates on a user-controlled key model, meaning CloudMask itself does not have access to the encryption keys or the protected content. The solution is certified and recognized by cybersecurity agencies internationally. It is available for use on both desktop and mobile devices.