Purview Message Encryption FAQ

Microsoft (MS) Purview Message Encryption is an online service that is part of Microsoft Purview Information Protection. This service includes encryption, identity, and authorization policies to help secure your email. You can encrypt messages by using rights management templates like Do Not Forward option and the encrypt-only option. MS Purview Message Encryption also encrypts replies from recipients of encrypted email.

Both CRES and Microsoft Purview Message are encryption tools.   Purview can be used both for messaging internally within the State of Illinois Exchange system and external sending, while CRES can only be utilized for outbound to Internet.

Yes, users can open protected mails in a shared mailbox where the shared mailbox received a protected email as part of a distribution group. It works the same when sending back and forth internally.   But if email comes from an external organization, you must access the message with Outlook on the web.

You will be able to reply to encrypted messages just as you would a normal message. Replies are sent encrypted back to the Sender with no other action required.

Yes. The maximum message size you can send with Microsoft Purview Message Encryption in our environment is 35MB, and that is including attachments.

If you’re on Outlook, Outlook Mobile or Outlook on the Web, you will be able to open encrypted messages normally like any other email message within Outlook.

Recipients in other email services like Gmail/Yahoo will receive your encrypted message containing a link in the message body. The recipient will sign in with their Yahoo/Gmail provider credentials, otherwise they can have a one-time passcode sent to them that is valid for 15 minutes.

Your PC should be running a current version of M365 Outlook Client, Outlook for Mac, Outlook for iOS, or OWA. Older Outlook clients 2003/2016 should not be expected to work.

A lock icon will be displayed on the incoming email and/or a banner at the top of the message:
 

• This message is encrypted: A lock icon on the incoming mail can suggest the email is encrypted.
• Encrypted and disabled forwarding: Outlook protected messages have a banner at the top of the message that informs you of restrictions.
• Sign in with a One-time passcode: Follow the instructions in the email you received if you're using an email client such as Gmail or Yahoo, or Outlook without a Microsoft 365 subscription.