Learn about Calendar Client-side Encryption

Calendar already uses strong cryptographic standards to encrypt all data at rest and in transit between its facilities. With client-side encryption (CSE), you have direct control of encryption keys and the identity provider (IdP) used to access those keys to further strengthen the security of your events data.

Your organization might need to use CSE to help with:

  • Privacy: Your organization works with extremely sensitive intellectual property.
  • Regulatory compliance: Your organization operates in a highly regulated industry, like aerospace and defense, financial services, or government.


  • CSE is only available for Calendar on a computer to select Google Workspace accounts.
  • To use CSE, your administrator must connect Google Workspace to an external identity provider and encryption key service (IdP+KACL). Learn more about your administrator.

Learn about encryption

Encryption is the process of encoding information to protect your data. Only users who have Workspace Client-side encryption enabled by their administrator and have verified their identity can create events.

Encrypted events can be decrypted by attendees or users in the organization if they have access to the encryption keys. Contact your administrator to learn more.

Tip: Your domain administrator has control over which groups and individuals can use encryption.

Create an encrypted event


  • You can only add CSE when you create an event. 
  • You can only create encrypted events from your computer.
  1. On your computer, go to Google Calendar.
  2. At the top left, click Create.
  3. At the top right of the event window, click Turn on encryption .
    • You may get a pop-up to authenticate with your IdP. Make sure pop-ups are allowed in your browser.
  4. Add event details like titles, guests, descriptions, and attachments.
    • If you add a meeting room to your encrypted event you must join the encrypted video call from your own device, not a meeting room device.
    • You can only add encrypted attachments to an encrypted event.
  5. Click Save.

Tip: Add or remove CSE before you enter any event details. When you add or remove CSE, event details (such as descriptions or attachments) are removed, and your Meet video conference settings are reset.

View an encrypted event as a guest

Important: You can only view encrypted events from a computer.

View encrypted fields in Gmail

  1. On your computer, go to Gmail.
  2. Open the event invitation.
  3. At the top right, click View the description in Google Calendar
    • If you get a prompt to verify your identity:
      1. Click Sign in.
      2. Verify your identity with the IdP.

View encrypted fields in Calendar

  1. On your computer, go to Google Calendar.
  2. Open the event.
    • If you get a prompt to verify your identity:
      1. Click Sign in.
      2. Verify your identity with the IdP.

Find out if a calendar event is encrypted

In an event invitation, when CSE is on, you can find a shield icon  next to: 

  • “Join with Google Meet” button in a Google Calendar invite
  • Event description
  • Each attachment

Related resources

Was this helpful?
How can we improve it?
Clear search
Close search
Google apps
Main menu
Search Help Center