Gmail

Gmail is Google’s free email service, launched on 1 April 2004, and the mailbox most people already have; Google’s fifteenth-anniversary post in 2019 put its user count at 1.5 billion. It is reviewed here on the same five criteria as every other provider in this section, as a point of contrast rather than a recommendation. The result is split down the middle: mature account security, spam filtering that Google reports blocks more than 99.9% of spam, phishing and malware, a large free allowance and apps almost everyone already knows how to use, on top of a key model in which Google manages the encryption keys and processes mail for its own features, and a business that funds the service through advertising. Gmail scores well on what it does and poorly on what Google can see.

Security

Every Gmail message travels over TLS, which Google’s encryption help page states applies automatically. That protects mail in transit between servers that support it. What happens at rest is the more important question for this category, and the answer is that Google manages the keys. Google’s encryption whitepaper, written for Workspace, describes default encryption at rest with keys managed inside Google’s own infrastructure, as distinct from client-side encryption where the customer holds them. The paper does not address personal accounts by name, and no personal-account option exists that moves the keys out of Google’s hands. Encryption at rest protects against a stolen disk. It does not keep content from the operator: Google’s privacy policy lists email among the content it collects, and the smart features described below use Gmail data to work.

Personal accounts get no end-to-end encryption, and Google’s help pages describe no PGP support. S/MIME exists, but Google’s help page lists it as available for work or school accounts only. Client-side encryption, which Google announced for business customers in April 2025 with keys “not available to Google servers”, is limited to specific Workspace editions (Enterprise Plus, Education Plus, Education Standard, Frontline Plus, or with Assured Controls), and even there the help page says the subject, timestamps and recipients receive no extra encryption. A personal Gmail account cannot turn it on at any price.

Confidential mode is the feature most often mistaken for encryption. It lets the sender set an expiry date, revoke access, and disable forwarding, copying, printing and downloading. That is access control applied by Google’s servers, not end-to-end encryption, and Google’s own page warns that “recipients can still take screenshots or photos of your emails.” Recipients who do not use Gmail receive a passcode by email to open the message.

Account protection is where Gmail is strongest. Google’s 2-Step Verification supports passkeys, hardware security keys, Google prompts, authenticator apps, SMS or voice codes, QR codes and backup codes. Google’s help page walks the user through turning it on. For people at higher risk, which Google describes as human rights activists, political campaigns and their staff, the Advanced Protection Program requires a passkey or FIDO security key to sign in and limits third-party access to account data to verified apps.

Spam and phishing filtering is the other area where scale works in the user’s favor. Google states that Gmail stops more than 99.9% of spam, phishing and malware and blocks nearly 15 billion unwanted emails a day, and that its sender-authentication requirements for bulk senders cut unauthenticated messages by 75%. These are Google’s own figures.

In August 2025 a wave of headlines claimed that 2.5 billion Gmail users had been put at risk. Google’s own threat-intelligence post describes something narrower: in June 2025 a voice-phishing group it tracks as UNC6040 reached one of Google’s corporate CRM instances, which held contact details and notes about small and medium businesses, and the data taken was “basic and largely publicly available business information.” The post makes no statement that Gmail or consumer data was affected. This review does not treat that incident as a Gmail breach, and it plays no part in the Security score.

Privacy & Trust

The ad question has a precise answer, and it is narrower than the common assumption. Since a change announced on 23 June 2017, Google states that consumer Gmail content is not used or scanned for ads personalization. Its current help page repeats it: “We will not scan or read your Gmail messages to show you ads.” Free accounts can still show ads, and those ads are based on activity while signed in to Google. The help page adds that Google does not sell personal information, and that turning personalization off leaves the ads in place without the personalization.

That is a statement about ads, and it should be read alongside Google’s privacy policy, which is a statement about collection. The policy, in its version effective 1 October 2026, lists “email you write and receive” among the content Google collects. It says Google does not show personalized ads based on content from Drive, Gmail or Photos, while it does use activity from other Google services for ad personalization. Some data is deleted automatically after a set period, and some is kept until the account itself is deleted. Gmail content is collected and processed; Google’s stated limit is on one use of it.

Smart features are the second use. With them on, Google’s help page says Google can “use your Gmail, Chat, and Meet data to provide smart features.” Turning them off stops Smart Compose, Smart Reply and summary cards, and stops content being used to improve those features going forward, though the same page says “the learnings developed from this improvement process may persist.” The page does not say whether Gmail content is used to train generative models. Google’s January 2026 announcement of Gemini in Gmail describes its privacy approach in general terms (“keeping your data under your control”) without stating default settings or training use. That question is left open by Google’s own documentation.

The controller named in the privacy policy is Google LLC of Mountain View, California, so Gmail answers to US law. The policy says Google regularly receives government and court requests for user data, and Google publishes the numbers. Its transparency report covers every Google product together, not Gmail alone. For July to December 2025 it lists 304,915 requests covering 748,475 accounts, with some information disclosed in 84% of requests at the July 2025 data point; for comparison, the second half of 2009 recorded 12,539 requests. US national-security requests are reported separately and only in ranges: for July to December 2025, FISA content requests numbered 0 to 499 and affected 211,000 to 211,499 accounts, and non-content requests 0 to 499 affecting 61,500 to 61,999 accounts. Google’s page notes that a FISA content request can include a demand for Gmail messages. Data for the first half of 2026 is held back by a six-month reporting delay.

Publishing those figures is a real signal, with half-year history going back to 2009. The same figures also show the scale at which a provider that manages the keys and collects email content can be asked for it.

Gmail is closed source. Google publishes no code for the consumer service that would let outsiders check the claims above, and this review found no public independent audit report covering consumer Gmail’s handling of message content.

Features

The mailbox shares one storage pool with Google Drive and Google Photos, and IMAP, which Google’s help page says has been always on since January 2025, lets any standard third-party mail client connect without a settings change.

Addressing is the weak point for a privacy-minded user. A personal account cannot use a custom domain. Aliases are limited to plus-addressing: any name+label@gmail.com variant arrives in the main inbox, which helps with filtering but exposes the real address to anyone who strips the suffix. “Send mail as” allows up to 99 additional addresses, but Google’s help page says Gmail will discontinue “Send as” for third-party addresses at other providers from January 2027. A custom domain means moving to Google Workspace, where Business Starter costs US$4.90 per user per month for the first 12 months on annual billing, then US$7.00, with 30 GB per user.

Gemini now runs through the inbox. Google’s January 2026 announcement lists AI Overviews summaries, Help Me Write and Suggested Replies as free for all users, while inbox question-and-answer and Proofread require a Google AI Pro or Ultra subscription. All of it depends on Google processing message content, and anyone who switches smart features off also gives up Smart Compose and Smart Reply.

Usability

A free account needs no payment, and the apps have very large install bases. The Android app lists 10B+ downloads and a 4.1 rating from 14.5 million reviews on Google Play, where the listing notes that it contains ads. The iOS app, for iPhone and iPad, holds a 4.7 rating from 2.4 million ratings on the App Store. There is no official desktop client; on a computer Gmail means the web interface or a third-party client over IMAP.

Account recovery is conventional. Google’s help page says recovery relies on a recovery phone number or email and the full name on the account, that there is no limit on recovery attempts, and that changes to recovery details can take up to seven days to take effect. A forgotten password does not mean lost mail, which is the practical upside of Google managing the keys.

The one trap is inactivity. Google’s inactive-account policy says it may delete an account, with its activity and data, after at least two years without activity across Google, sending notifications to the account and its recovery email first; the earliest deletions began on 1 December 2023. An address kept only as a dormant backup needs an occasional sign-in.

Price & Value

The free tier is the main reason most people have Gmail. Every Google account comes with up to 15 GB of storage at no charge, shared across Gmail, Google Drive and Google Photos, so a photo backup and a mailbox draw on the same allowance.

More storage comes through Google One, which lists Lite (30 GB), Basic (100 GB) and Google AI Pro (5 TB, including Gemini in Gmail). US-dollar prices for these plans could not be confirmed for this review, so none are given here. The other paid route is Workspace, the only way to put a custom domain on Gmail: Business Starter at US$4.90 per user per month for the first year, then US$7.00, and Business Standard at US$14.00 after the first year with 2 TB per user.

In money terms, a working mailbox for nothing is hard to beat. The cost is paid elsewhere: free accounts can show ads, account activity feeds Google’s ad personalization across its other products, and the mail itself sits under keys Google manages.

Pros and Cons

Our Rating

Gmail fits someone whose priorities are a free mailbox, strong protection against account takeover and phishing, and apps that work everywhere they already are, and who accepts that Google manages the keys, processes mail for its own features and answers US legal process for it. With Advanced Protection on, Google says unauthorised users cannot sign in without the passkey or security key even if they know the username and password. The scores reflect that: high marks for Usability and Price & Value, middling ones for Security and Features.

It fits poorly if the goal is keeping message content away from the provider itself. Nothing on a personal account changes the key model, confidential mode does not, and Google’s own documentation leaves the question of generative-model training open. The broader case for why that matters, and what services that hold no keys do differently, is set out in why not just use Gmail. The 1.0 in Privacy & Trust, weighted at 30%, is what pulls Gmail’s overall score down to 5.4.