Default Gmail encryption protects emails as much as possible. Google encrypts emails both when they’re stored (data at rest) and when they’re being sent (data in motion). Like most security-conscious providers, Google uses Transport Layer Security (TLS) to encrypt emails in transit. But TLS depends on both the sender’s and recipient’s email provider, so it won’t work in some situations.