You need to send encrypted emails from your phone using your organization’s S/MIME certificate. Outlook for iOS and Android supports S/MIME for signing and encrypting messages. This article provides the steps to install your certificate and activate S/MIME within the mobile app.
Key Takeaways: Setting Up S/MIME on Outlook Mobile
- Settings > S/MIME: The central menu in Outlook Mobile where you import your certificate and configure encryption options.
- PFX or P12 certificate file: The encrypted file format containing your private key and digital certificate, required for setup.
- Encrypt button on compose screen: The toggle that applies S/MIME encryption to an individual email before sending.
What S/MIME Does in Outlook Mobile
S/MIME is a standard for public key encryption and digital signing of email. It ensures that only the intended recipient can read an encrypted message and verifies the sender’s identity. For Outlook Mobile, you must obtain a digital certificate from your organization’s IT department or a public certificate authority.
The app needs both your personal certificate, which includes your private key, and the certificates of people you want to email. Your private key is protected by a password you set when creating the certificate file. Without the correct certificate file and password, you cannot enable the feature.
Prerequisites for Setup
Before starting, ensure you have a PFX or P12 certificate file and its password. Your IT administrator typically provides this. You also need the recipient’s public certificate to send them encrypted mail. The Outlook mobile app must be logged into your work or school account, as S/MIME is not available for personal Microsoft accounts.
Steps to Install Your S/MIME Certificate
- Open Outlook Settings
Launch the Outlook app on your iPhone, iPad, or Android device. Tap your profile picture or the gear icon in the top-left corner to open the Settings menu. - Navigate to S/MIME Settings
In the Settings menu, scroll down and tap on the S/MIME option. This section manages all encryption settings for your account. - Tap Import Certificate
Under the Your Certificates section, select the Import Certificate button. You will be prompted to locate your PFX or P12 certificate file. - Select Your Certificate File
Browse your device’s storage or cloud storage, like OneDrive, to find and select the certificate file you received from your IT department. - Enter the Certificate Password
When prompted, type the password that protects the certificate file. This password was set when the certificate was created. Tap OK or Import to complete the installation.
How to Send an Encrypted Email
- Compose a New Message
Tap the new email button to start a message. Address it to a recipient whose certificate is already in your contacts or whose email address is associated with a certificate in the global address list. - Enable Encryption
On the email compose screen, look for the lock icon. On iOS, it is in the top toolbar. On Android, tap the three-dot menu and select Encryption. Tap the lock icon to turn encryption on. It will change color, usually to blue or red. - Send the Email
Write your subject and message as usual. When you tap Send, Outlook will use the recipient’s public certificate to encrypt the email. Only they can decrypt and read it with their private key.
Common Mistakes and Limitations
Encrypt Button Is Grayed Out or Missing
This happens if the recipient’s certificate is not available. Outlook Mobile needs the recipient’s public certificate to perform encryption. Ensure the recipient has a valid S/MIME certificate published in your organization’s directory or that you have manually added their certificate to your device.
Certificate Password Is Not Accepted
The password is case-sensitive and must match exactly. If you have forgotten it, you must contact your certificate issuer for a new certificate file. You cannot recover or reset the password for an existing PFX file.
Messages Fail to Send
Large attachments combined with S/MIME encryption can cause timeouts. S/MIME increases the message size. Try sending the attachment separately or compress the file before attaching it to an encrypted email.
S/MIME vs Default Outlook Encryption
| Item | S/MIME Encryption | Microsoft Purview Message Encryption |
|---|---|---|
| Technology Standard | Public key infrastructure | Azure Rights Management |
| Certificate Management | User imports PFX file | Managed by Microsoft 365 admin |
| Recipient Experience | Opens natively in supporting mail clients | May open in a web portal for external recipients |
| Primary Use Case | Organization-to-organization secure email | Internal and external compliance encryption |
| Setup on Mobile | Manual certificate import per device | Automatically enabled by admin policy |
You can now send and receive encrypted emails directly from your mobile device. Check with your IT team to ensure recipient certificates are properly distributed. For advanced control, explore the S/MIME settings to enable signing by default or to always encrypt replies.