Email encryption in Microsoft 365

Microsoft 365 allows to enable email encryption [1]. If encrypted emails are captured by the journal [2], the email attached to the journal report is also encrypted. If this email is archived from the journal mailbox, the encrypted email is in the archive.

In order to archive unencrypted emails when email encryption is activated, it is necessary to instruct Microsoft 365 to also attach a decrypted version of the original email to the journal report. This is described in this article.

If journal reports are found in a journal mailbox that only contain the encrypted version, they will be archived. If a decrypted variant is also found, only this will be archived and the encrypted variant will be discarded.

If encrypted emails are archived from users' mailboxes, they are not treated specifically and remain encrypted in the archive.