Duet AI is now Gemini for Google Workspace. Learn more

Encryption report

Security dashboard

Supported editions for this feature: Enterprise Plus; Education Standard and Education Plus; Enterprise Essentials Plus. Compare your edition

Transport Layer Security (TLS) is a protocol that encrypts and delivers mail securely for both inbound and outbound mail traffic. It helps prevent eavesdropping between mail servers. Use the encryption report to view how many messages in your domain were encrypted using TLS.  

Note: The security dashboard also includes a summary of encryption data. For details, see Security dashboard.

View the encryption report

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in

  2. In the Admin console, go to Menu and then Securityand thenSecurity centerand thenDashboard.
  3. In the lower-right corner of the Encryption panel, click View report

​Encryption graph

This graph shows messages broken down by TLS and Non-TLS:

  • TLS—Messages that were sent using the Transport Layer Security (TLS) protocol
  • Non-TLS—Messages that weren't sent using the Transport Layer Security (TLS) protocol

Note: You can hide lines in the graph by clicking on the legend. For example, click TLS to hide this line in the graph. This is especially useful if one line overlaps another.

Using the drop-down menus above the graph, you can customize the graph to provide details only about certain types of messages:

Filter Description

Traffic source: All, External, or Internal

External—Include only messages sent by users outside of your domain
Internal—Include only messages sent by users inside of your domain.
Inbound or Outbound Inbound—Include only messages received by users within your domain. These messages may have been sent by users inside or outside of your domain.
Outbound—Include only messages sent by users within your domain. These messages may have been delivered to users inside or outside of your domain.
Domain Choose the domain for your report.
Date range

Customize the report to view data from Today, Yesterday, This week, Last week, This month, Last month, or Days ago (up to 180 days); or enter a Start date and End date. Click Apply after you set the date range.

Note: For this report, data is displayed only for the last 31 days. For example, if you set the parameters for up to 60 days, the data in the report is cut off at 31 days.


To generate a spreadsheet with the graph’s data, click Export Sheet. A spreadsheet corresponding to the data in the Encryption graph will be generated and saved to your My Drive folder.

Compare current and historical data

To compare the current data to historical data, in the top right, from the Statistical analysis menu, select Percentile (not available for all Security dashboard charts). You’ll see an overlay on the chart to show the 10th, 50th, and 90th percentile of historical data (180 days for most data and 30 days for Gmail data). Then, to change the analysis, at the top right of the chart, use the menu to change the overlay line.

Encryption table

You can also see the number of encrypted or unencrypted messages that were sent to your domain from specific domains and IP addresses.   

For example, by clicking the data point on August 21 in the graph’s TLS line, a table is displayed that lists the top domains that sent encrypted messages on that date. The table is organized by domain and TLS message count. Click IP for details about the top IP addresses that sent encrypted messages.

Note: The Domain column in the Encryption table provides the domain of the IP address that sent the email message. If this is blank, the domain that the IP address is associated with is unknown.

Was this helpful?

How can we improve it?
Clear search
Close search
Google apps
Main menu