🔐 Encrypting Emails in Outlook Using Sensitivity Labels

Open Outlook and create a new email.
On the Message tab, click the Sensitivity button on the toolbar.
Choose the appropriate label based on the content and sensitivity:
- Confidential – Encrypts the email; recipients can forward it.
- Highly Confidential – Encrypts the email and prevents forwarding.
- CUI – Encrypts the email specifically for messages that contain Controlled Unclassified Information (CUI) and applies relevant restrictions.
Once selected, the label will apply encryption and access settings automatically.

Add the recipients, write your subject and message, and attach any necessary files.
The sensitivity label you chose will protect both the message and attachments (where supported).
Click Send — the email will be encrypted according to the label’s rules.

Internal recipients (within your organization):
- They will open the email in Outlook normally.
- Any restrictions (e.g., no forwarding for “Highly Confidential”) will be automatically enforced.
External recipients (outside your organization):
- They will receive a secure email notification (e.g., “You’ve received a protected message”).
- They must sign in with a Microsoft account or use a one-time passcode to view the message.
- Forwarding will be allowed for “Confidential” but blocked for “Highly Confidential”.
- For CUI, recipients will only be able to access the message if they meet the access restrictions defined in the label (typically internal or authorized users only).