How to Send a Password Protected Email in Outlook (4 Methods) in 2026

How to Send a Password Protected Email in Outlook (4 Methods) in 2026

Last updated: September 2026

Quick answer: Outlook has no password field for an email. "Password protecting" an Outlook email means one of four things: (1) encrypt the message with Options > Encrypt and choose Encrypt or Do Not Forward, so Gmail and other outside recipients must sign in or enter a one-time passcode; (2) use S/MIME with a certificate on both ends; (3) put a real password on the attachment (Word, Excel, PowerPoint, PDF or a 7-Zip archive) and text the password separately; or (4) send a password-protected link instead of a file. Method 1 needs a licence that includes Microsoft Purview Message Encryption. Method 3 is what most people searching this actually want.

I'm Deqian Jia, co-founder of Peony, a data room company. A large share of the sensitive files that reach us arrive as Outlook attachments, and the senders often describe them as "password protected" when what they did was click Encrypt. The two are not the same thing, and the difference decides whether a Gmail recipient can open your message, whether they can forward it, and whether you can ever take it back. This guide walks all four methods with the labels Microsoft uses in new Outlook, classic Outlook, Outlook on the web and Outlook.com, then tells you plainly which one fits which job.

Can you password protect an email in Outlook?

Not literally. No version of Outlook lets you set a password that the recipient must type before the message opens. What Outlook offers is identity-based encryption, and Microsoft's own instructions for it never mention a password: "In an email message, choose Options, and then select Encrypt. Pick the encryption that has the restrictions you want to enforce, such as Encrypt or Do Not Forward" (support.microsoft.com).

So the honest answer to "how do I password protect an email in Outlook" is a choice between four mechanisms.

If you want the built-in route, start with Method 1. If your recipient is on Gmail and you want them to type something that feels like a password, Method 1 does that too, through a one-time passcode. If you want a password you chose, use Method 3 or 4.

How do you password protect an email in Outlook with Encrypt?

Open a new message, go to Options, select Encrypt, choose Encrypt or Do Not Forward, and send. This is Microsoft 365 Message Encryption (the product name is Microsoft Purview Message Encryption; the old "Office 365 Message Encryption" name was retired in 2023, so ignore any guide that tells you to click "OME"). The button in the ribbon just says Encrypt.

New Outlook for Windows

1. Select New mail.
2. On the Options tab, select Encrypt.
3. Pick Encrypt or Do Not Forward.
4. Finish the message and select Send.

Classic Outlook for Windows

1. Compose the message.
2. Select Options > Encrypt.
3. Choose the option with the restrictions you want, for example Do Not Forward.
4. Select Send.

Outlook on the web

1. Select New mail.
2. Find Encrypt in the compose toolbar or its overflow menu; as of Microsoft's help pages in September 2026, Outlook on the web exposes "the Encrypt option or a sensitivity label" (learn.microsoft.com).
3. Pick Encrypt or Do Not Forward, then Send.

Outlook.com with a Microsoft 365 Personal or Family subscription

1. Compose a new message.
2. Select the Options ribbon, then select Encrypt.
3. Choose Encrypt ("your message stays encrypted and doesn't leave Microsoft 365") or Do Not Forward ("your message stays encrypted within Microsoft 365 and can't be copied or forwarded"), quoting Microsoft's descriptions (support.microsoft.com).

Encrypt or Do Not Forward? Both encrypt the message and make the recipient prove who they are. The difference is what they can do afterwards. Under Encrypt (Microsoft calls it Encrypt-Only), the recipient "can copy from the email, print it, and forward it"; they just cannot strip the encryption. Under Do Not Forward, "the Forward button isn't available, the Save As and Print menu options are not available, and you can't add or change recipients in the To, Cc, or Bcc boxes" (learn.microsoft.com). Office attachments on a Do Not Forward message inherit the restriction and stay protected even after download; PDFs and images do not. Pick Encrypt for privacy, Do Not Forward when you also want to discourage redistribution.

Two limits to know before you rely on it. The maximum message size, including attachments, is 25 MB (learn.microsoft.com). And Encrypt-Only leaves the recipient the Copy right, which Microsoft defines to include "screen captures"; Do Not Forward removes that right, so Outlook may block Print Screen, but nothing stops a phone photo or a second device (learn.microsoft.com).

Which Microsoft 365 plans include the Encrypt button?

Message encryption is licensed per user. Microsoft's licensing FAQ lists the plans that include it and the plans that need an add-on (learn.microsoft.com):

Business Standard is the surprise on that list: it is the mid-tier business plan and it does not include encryption. A free Outlook.com account has no Encrypt button either; Microsoft says "your account must have a qualifying Microsoft 365 subscription," and a message sent with no encryption option relies on "opportunistic Transport Layer Security (TLS) to encrypt the connection with a recipient's email provider," which is all a free account can do (support.microsoft.com). TLS protects the hop between servers, not the message once it lands.

What does the recipient see when you send a password protected email from Outlook?

It depends entirely on where they read mail, and this is the closest Outlook comes to a password.

Microsoft 365 and Outlook.com recipients read the message inline in Outlook after signing in to their own account. No portal, no code. Microsoft: Outlook users "receive native, first-class reading experiences for encrypted and rights-protected mail even if they're not in the same organization as the sender," while Gmail and Yahoo recipients "receive a wrapper mail that directs them to the encrypted message portal" (learn.microsoft.com).

Gmail, Yahoo and every other recipient get a wrapper email with a link. Microsoft's instructions for them: "Select Read the message. Select how you'd like to sign in to read the message. If your email provider is Google, Yahoo, or Microsoft, you can select Sign in with Google, Yahoo, or Microsoft respectively. Otherwise, select sign in with a one-time passcode." The code arrives by email and "Each passcode expires after 15 minutes" (support.microsoft.com). If it does expire, they "start over by opening the attachment again and following the steps." If the message was sent with Do Not Forward, they should expect Forward, Print and Save As to be greyed out: that is the sender's setting, not a fault. And if the protection is on the attachment instead, they open the file and type the password you sent by another route.

That one-time passcode is why people call this a password-protected email. The important difference from a real password: you never choose it, the recipient never has to remember it, and it is tied to the mailbox the message was addressed to. Anyone with access to that inbox can request a fresh code. If your recipient replies "it's asking me to sign in to read your email," that is expected behaviour, not phishing.

The portal is also the only place Outlook can take a message back. Microsoft: "Outlook on the web supports revocation of protected mail," and revocation and expiry "only work for emails that your users send to recipients outside your organization" who "access the email through the web portal" (learn.microsoft.com, ome). A message an Outlook colleague already read inline cannot be revoked.

How do you send an S/MIME encrypted email in Outlook?

Use S/MIME only when you and the other party mail each other regularly and have already swapped certificates. It is real end-to-end encryption, and for a one-off message to someone on Gmail it is the wrong tool.

The setup is the cost. Before sending, "you must first get a digital ID, otherwise known as a digital certificate, and add it to the keychain on your computer," and "you and the recipient must have a mail application, such as Outlook, that supports the S/MIME standard." New Outlook adds a wrinkle: it "doesn't automatically import digital certificates. You must install the certificate manually or ask your administrator to configure policies to automatically install certificates" (support.microsoft.com).

Once both sides have certificates, the sending step is the same Options > Encrypt menu, where, as of Microsoft's help pages in September 2026, S/MIME appears as an additional choice. Microsoft also notes that Purview encryption should not be applied to a message that is already S/MIME signed or encrypted; pick one.

How do you password protect an attachment in Outlook?

Lock the file before you attach it, send it as a normal attachment, and deliver the password through a different channel. For most people typing "password protect outlook email" into a search box, this is the thing they mean, and it works on any Outlook plan, including free Outlook.com, because the protection lives in the file rather than the mailbox.

Word, Excel or PowerPoint file

1. Open the file. Go to File > Info > Protect Document (Excel says Protect Workbook, PowerPoint says Protect Presentation).
2. Select Encrypt with Password.
3. Type a password, press OK, type it again and press OK to confirm.
4. Save the file, then attach it in Outlook (support.microsoft.com).

On a Mac the equivalent is Review > Protect > Protect Document, then set a password to open. Microsoft warns that Word cannot recover a lost password, so store it somewhere. The Excel guide covers the difference between encrypting the workbook and merely protecting a sheet, which does not stop anyone reading it.

PDF

• Acrobat: open the PDF, choose Protect a PDF, select Encrypt with Password, tick Require a password to open the document, set the password, save.
• macOS Preview (free): File > Export, click Permissions, check Require password to open document, enter it, Apply, then Save.
• Word: File > Export > Create PDF/XPS > Options, check Encrypt the document with a password, then Publish.

The full walkthrough with encryption strengths is in how to send a password-protected PDF.

Any file, or several files at once

Put them in a 7-Zip archive. 7-Zip is free and offers AES-256 encryption in both the .7z and .zip formats; set the password in the Encryption section of the Add to Archive dialog and choose AES-256 as the method. Note that many corporate mail gateways strip or quarantine encrypted archives, so a locked Office file or PDF is usually the safer bet for a business recipient.

Then send the password separately. A text message, a phone call, or a chat app. Never in the same email and never in the follow-up email to the same address; if someone has the inbox, they have both the lock and the key. And before you send, open the locked file yourself in a different app to confirm the password prompt actually appears.

Be clear about what this achieves. The attachment is unreadable in transit and on any server it passes through, which is real protection. It does nothing after it is opened: the recipient can forward the file and the password together, print it, screenshot it, and you have no record of any of it. Outlook's own encryption at least keeps Office attachments protected on a Do Not Forward message; a manually locked file has no such link back to you.

How do you send a password protected link instead of an attachment?

Upload the file to a sharing tool that lets you set a password on the link, paste the link into your Outlook message, and send the password separately. The email itself carries nothing sensitive, so the licence gate, the 25 MB cap and the Gmail passcode dance all disappear, and you keep a switch you can flip after sending.

This is what I run Peony for, so here is the honest tier map rather than a pitch. On the Free plan ($0) you can put a password on a link, set an expiry date, capture the viewer's email, and see page-by-page analytics on who opened what. On Business ($30 per admin per month billed annually, $44 monthly) you can make the document view-only with downloads blocked, require the viewer to authenticate their email address, turn on screenshot protection, and revoke access remotely even after the file has been opened. Dynamic watermarks that stamp each viewer's identity on every page sit on Data Room ($52, or $75 monthly). The 6,800+ customers using it are mostly sending contracts, financial models, investor decks and client files, which is the narrow set of documents where "who opened it and can I pull it back" matters.

Where this is unnecessary: an internal note, an HR letter, a contract redline to a counterparty you trust. Options > Encrypt or a locked PDF is fine, already paid for, and you should use it. Where a link earns its place: any document you would be uncomfortable seeing forwarded, or any document over 25 MB, or any time you are sending to a Gmail address and do not want to explain the passcode portal. The feature pages for password protection, link expiry and revoke access list the exact controls.

Why is the Encrypt button missing in Outlook?

Because your plan does not include it. The Encrypt option only appears when the sending account is licensed for Microsoft Purview Message Encryption, and Microsoft is explicit that "each user benefiting from Microsoft Purview Message Encryption needs a license" (learn.microsoft.com). Check the table above: Business Basic and Business Standard need Azure Information Protection Plan 1 added, free Outlook.com accounts have no button, and only Microsoft 365 Personal or Family subscribers see it in Outlook.com.

Three other reasons it can seem missing when the licence is fine: you are in the wrong tab (it lives under Options, not Message or Insert); your admin has hidden it behind sensitivity labels, in which case look for a Sensitivity button instead; or the licence was assigned recently and Outlook has not picked it up yet, in which case signing out and back in is the usual first thing to try.

If none of that applies and you need to send today, Method 3 works on every plan.

Which method should you use?

• Private email to another Microsoft 365 or Outlook user, or a Gmail address you are happy to send through the passcode flow: Options > Encrypt, or Do Not Forward if you want to discourage forwarding.
• Any plan, any recipient, a real password you choose: lock the attachment (Method 3) and send the password by text.
• A document you must be able to take back, watch or keep view-only: a password-protected link (Method 4); Peony Free covers password and expiry, Business adds view-only and revoke.

A password, a passcode or a certificate governs who can open the message; none of them governs what a trusted person does next. If that second question matters, the answer is a link you still control, which is the pattern 6,800+ teams on Peony have settled on for their deal and client documents.

Frequently asked questions

How do I password protect an email in Outlook?

Outlook has no password field for a message. The built-in equivalent is Microsoft Purview Message Encryption (Microsoft 365 Message Encryption): open a new email, go to the Options tab, select Encrypt, then choose Encrypt or Do Not Forward, and send. Outlook recipients open it normally; Gmail and other recipients get a link and a one-time passcode. If you want a literal password, put it on the attachment instead (Word, Excel, PowerPoint and Acrobat all have Encrypt with Password) and send the password by text or phone, or share the file as a password-protected link.

Can you password protect an email in Outlook?

Not literally. There is no setting that asks a recipient for a password before an Outlook message opens. What you can do is encrypt the message (Options > Encrypt), which makes non-Microsoft recipients prove who they are with a one-time passcode; password-protect the attachment itself; use S/MIME with a certificate; or send a password-protected link instead of a file. The Encrypt button only appears on plans that include Microsoft Purview Message Encryption, such as Business Premium and E3/E5, or a paid Microsoft 365 Personal or Family subscription in Outlook.com.

How do you send a password protected email in Outlook?

In new Outlook for Windows: start a new email, select the Options tab, select Encrypt, pick Encrypt or Do Not Forward, finish the message and select Send. In classic Outlook: Options > Encrypt, choose the option with the restrictions you want, then Send. In Outlook on the web, look for Encrypt in the compose toolbar. In Outlook.com with a Microsoft 365 Personal or Family subscription, it is the same Options ribbon > Encrypt. If the button is not there, your plan does not include message encryption.

Is Outlook encryption the same as password protection?

No, and the difference matters. Outlook encryption (Microsoft Purview Message Encryption) scrambles the message and ties access to the recipient's identity: a Microsoft 365 or Outlook.com recipient reads it after signing in, and a Gmail or Yahoo recipient signs in with their provider or enters a one-time passcode that expires after 15 minutes. Nobody types a password you chose. Password protection means a secret you set and share separately, which in Outlook only exists at the attachment level (Encrypt with Password on Office files and PDFs) or through a password-protected link.

How do I password protect an attachment in Outlook?

Lock the file before you attach it. Word, Excel and PowerPoint: File > Info > Protect Document (or Protect Workbook / Protect Presentation) > Encrypt with Password, then save. PDF: Acrobat's Protect a PDF > Encrypt with Password, macOS Preview's File > Export > Permissions > Require password to open document, or Word's export to PDF with the encrypt option. Any file type: put it in a 7-Zip archive with AES-256 encryption. Attach the locked file in Outlook as normal and send the password by a different channel such as a text message or a call, never in the same email.

How does the recipient open a password protected Outlook email?

It depends on where they read mail. A Microsoft 365 work or school account or an Outlook.com account opens the encrypted message inline in Outlook after signing in, with no extra step. Anyone else, such as a Gmail or Yahoo user, gets an email containing a link: they select Read the message, then either sign in with Google, Yahoo or Microsoft, or select sign in with a one-time passcode, copy the code from the passcode email, and enter it. Each passcode expires after 15 minutes. If the protection is on the attachment instead, they open the file and type the password you sent separately.

Why is there no Encrypt button in my Outlook?

Because message encryption is licensed per user, not switched on for everyone. Microsoft Purview Message Encryption is included in Office 365 E3/E5, Microsoft 365 E3/E5, Microsoft 365 Business Premium, Office 365 A1/A3/A5 and Office 365 Government G3/G5. Microsoft 365 Business Basic, Business Standard, Office 365 E1, F3 and Exchange Online Plan 1/2 need Azure Information Protection Plan 1 added. Free Outlook.com accounts have no Encrypt button at all; only Microsoft 365 Personal and Family subscribers get it. If the button is missing, the plan is the reason, not a setting.

Can I password protect an email in Outlook.com for free?

Not with encryption. A free Outlook.com account has no Encrypt option; Microsoft's help page says encryption needs a qualifying Microsoft 365 subscription, and free accounts rely on opportunistic TLS to encrypt the connection with the recipient's provider, which does nothing once the message is in their inbox. The free options are to password-protect the attachment (Office files and PDFs have this built in, and 7-Zip is free) and send the password separately, or to share the file as a password-protected link, which Peony offers on its Free plan.

Can the recipient forward a password protected Outlook email?

With the Encrypt option, yes. Microsoft states that an Encrypt-Only recipient can copy from the email, print it and forward it; the only thing they cannot do is remove the encryption. With Do Not Forward, the Forward button, Save As and Print are removed and the recipient cannot copy from the message or change the To, Cc or Bcc fields. Encrypt leaves the Copy right, which Microsoft defines to include screen captures; Do Not Forward removes it and Outlook may block Print Screen, but nothing stops a phone photo or a second device. A password-protected attachment can always be forwarded together with its password. Only a link you control can be closed after sending.

What is the safest way to send a sensitive document from Outlook?

For a routine private note, Options > Encrypt or Do Not Forward is enough and is already in a Business Premium or E3/E5 licence. For a document you cannot afford to lose control of, such as a contract, financial model or client file, send a link instead of an attachment. Peony, used by 6,800+ customers, lets you put a password and an expiry date on a link on the Free plan ($0), and on Business ($30 per admin per month, billed annually) you can make the file view-only with downloads blocked and revoke access remotely after it has been opened, which no Outlook attachment can do.

Related resources

• How to send a password-protected PDF: Acrobat, Preview, LibreOffice and Word steps, encryption strengths, and how to deliver the password.
• How to send confidential documents via email (7 methods): the full survey ranking Outlook encryption, Gmail Confidential Mode, S/MIME, locked files and secure links by what each protects.
• How to password protect Excel files: workbook encryption versus sheet protection, and why only one of them hides the data.
• How to encrypt email in Gmail: the Google Workspace and personal Gmail equivalent.
• Peony pricing: Free, Business ($30/admin/month) and Data Room ($52/admin/month) tiers.