Does Gmail confidential mode delete an email when it expires?
A confidential Gmail message is set to expire in a week. Once that date passes, who can still open it, and where does a copy remain?
An expired confidential email is not a message that has vanished everywhere. Its recipient can no longer open the protected content, while its sender can still have a readable copy. That makes confidential mode useful for limiting a review period. It does not establish a date on which every copy of the information will be destroyed.
Wake Forest University’s IT instructions show both sides after expiration: the sender still sees the content, whereas the recipient sees an expired notice. If a client says the link stopped working, reopening the message successfully from your own Sent folder does not disprove their report.
What expires is the reader’s access
Confidential mode substitutes a content link for the body and attachments in the recipient’s copy. Gmail presents that linked content within the message; other email clients show a link to open it. This is the delivery mechanism described in Google’s administrator documentation.
A message entry or its subject can still be visible without the recipient being able to read the protected body. Ask whether the content opens, rather than whether the email has disappeared from the inbox. A screenshot taken while access was available is a separate copy.
Consider a briefing that someone should read before a meeting. A temporary viewing period fits that assignment. Now change the assignment to downloading the attached spreadsheet, updating quantities, and returning it. Even a generous expiration date does not make the missing download option available. The recipient needs a delivery method that permits the work.
Set up the message around the recipient’s review time
On desktop Gmail, open Compose, select the confidential-mode icon at the bottom, choose an expiration period and passcode option, then save the settings and send. Use Edit in the confidential-mode section to revise the settings while composing. Google’s sending instructions apply the deadline and passcode requirements to both the message and its attachments.
Allow for when the recipient will actually work. A short deadline on a Friday-evening message may leave a Monday reviewer with an expired link before their first attempt. For a rescheduled meeting, include access arrangements in the rescheduling conversation. “Available until the original meeting” is easy to overlook when everyone is discussing a new date.
On Android’s Gmail app, Compose leads to More options at the top right, then Confidential mode. Turn it on, choose the expiration and Standard or SMS passcode, and save. The mobile menu is not in the same place as the desktop icon.
Confidential messages cannot be scheduled for sending. To prepare one at night for delivery the next morning, leave it as a draft and send it yourself in the morning. A delivery that must happen automatically at a set time needs another method approved by your company.
Why a non-Gmail reader still needs a code
No SMS passcode removes the requirement for a text-message code, not every possible verification step. A person opening the message in Gmail can read it directly under that setting. A recipient who does not use Gmail receives a code by email. With SMS enabled, use the recipient’s phone number, not your own.
For another email client, the documented route is View the email, Send passcode, then entering the code received by email or text. Before troubleshooting a supposed missing attachment, establish which address received the message and which client the person is using. Your Gmail reading pane may not resemble their inbox.
The University of Alaska’s deployment guide illustrates the non-Gmail experience: attachments are viewable in a browser but not downloadable. Tell the recipient to open the message link instead of asking them to save an attachment.
For a shared team inbox, an SMS code sent to one employee introduces a dependency on that employee being available. A coworker covering their shift may have the email but no access to the designated phone. Agree on the actual reviewer before sending, especially when a handoff, vacation, or different time zone is involved.
Revoke access or deal with an expired link
To close access early, open the confidential message in Sent and choose Remove access. This stops further opening through the protected message. It is not a command that searches the recipient’s devices for previously captured content.
When the recipient cannot open a message before its expected deadline, the sender may have removed access or deleted the email. Send the sender the error text and the address that received it. Also say whether a requested code arrived. Those details distinguish a content-access problem from a code-delivery problem without repeatedly trying the same link.
Wake Forest’s expired-message example includes a Renew access option for the sender. If that option is available and renewed viewing is appropriate, reopen access and ask the recipient to try again. If you need to send changed material or cannot set the intended period, send a new message with the required settings and clearly identify it as the current version.
A readable document with no download button is a different request. Extending its viewing window does not grant the ability to save a working file. Ask what the recipient needs to do with the attachment before sending another confidential copy that has the same limitation.
Company records can outlast the viewing window
Google Vault’s supported-data documentation says confidential messages sent by users in an organization remain available to Vault even after expiration or revocation. Availability for retention and search is not a promise that every company retains every message forever; the organization’s setup determines its records handling.
Messages from external senders have a narrower scope in the recipient organization’s Vault. Headers and subjects can be retained and searched, but the external confidential body and attachments cannot be searched or exported in the same way. An email showing up in a record search does not necessarily mean the outside supplier’s proposal is preserved with it.
For example, a purchasing team may need the exact proposal used for an approval months later. An expiring link alone is a poor handoff for that requirement. Ask the supplier for an approved form that the company can retain, and put it in the designated records location. Settle that delivery requirement before the reviewer completes the approval.
Administrators can disable confidential sending for an organization or organizational unit. Blocking incoming confidential messages uses a separate compliance rule. If a work account cannot send or receive one, report which direction failed; moving company material to a personal account is not a substitute for resolving that policy.
When the assignment requires additional encryption
Restrictions on forwarding and downloading do not guarantee that a reader cannot photograph the screen. For additional encryption, Gmail has a separate feature: CSE encrypts content in the browser before it is transmitted or stored in Google’s cloud storage.
CSE requires a supported Workspace edition and administrative setup. Its additional encryption covers the body, inline images, and attachments, but not the header fields such as subject and recipients. Google also lists confidential mode as unavailable while additional encryption is on. These are not two independent checkboxes that every Gmail user can stack.
If your company requires CSE for a document, an administrator must set up that feature for your account before you send it with additional encryption. Setting an expiration date in confidential mode does not apply CSE to the document.
Choose a handoff that lets the reader finish the task
| Recipient’s assignment | Delivery choice | Arrange before sending |
|---|---|---|
| Read a briefing for a limited period | Confidential message with a viewing deadline | Review time and code-delivery route |
| Leave suggestions on a draft | Shared document with commenting access | Whether comments or direct edits are expected |
| Update figures with colleagues | Shared file with editing access | The working original and the completion date |
| Keep or print an approved version | An approved file-transfer or records workflow | Version and storage location |
In Google Drive, select a file, open Share, enter the person’s email address, assign Viewer, Commenter, or Editor, then click Send or Share. A work account may restrict external sharing. File access belongs to the file’s sharing settings; placing its URL in a confidential email does not turn the email’s deadline into that file’s permission policy.
Write the assignment plainly: read and reply with comments, edit the shared draft, or retain the approved version. Include the deadline. When the work ends, close confidential-message access and remove any separate file permissions in their respective controls. The recipient should know which material remains available and which copy is the final one.