How to Fix Outlook Cannot Send Encrypted Emails with Exchange Online Plan 1
Question details
The user needs to understand why an account with Exchange Online Plan 1 cannot send encrypted messages from the Outlook desktop client, unlike Business Premium accounts.

- Product
- Microsoft Outlook
- Device & OS
- not provided
- Scenario
- Attempting to send an encrypted email via the Outlook desktop application.
- Observed behavior
- Encryption fails or is unavailable in the desktop app for Exchange Online Plan 1 users, but works via Outlook on the web using server-side mail flow rules.
Verify your current Microsoft 365 license tier in the admin center and ensure you have administrative privileges to manage user subscriptions.
Upgrade or Assign a License Supporting Microsoft Purview Message Encryption
Exchange Online Plan 1 does not natively include desktop encryption features. Upgrading to Microsoft 365 Business Premium or an equivalent enterprise plan resolves this issue.
Microsoft Purview Message Encryption requires specific licensing to function within the Outlook desktop app. While Exchange Online Plan 1 supports encryption via web-based mail flow rules, the desktop client integration requires higher-tier licenses like Microsoft 365 Business Premium, Enterprise (E3/E5), or specific add-ons.
Log in to the Microsoft 365 Admin Center, navigate to Users > Active users, select the affected user, and view their assigned licenses.
Consult Microsoft's official licensing guide to confirm which plans include Microsoft Purview Message Encryption (e.g., Business Premium).
Purchase or assign a license that includes the necessary encryption capabilities to the user's account.
Have the user close and reopen the Outlook desktop app to apply the new licensing policies and test the encryption feature.

Need a simpler office suite? Try WPS Office
While Microsoft 365 requires complex licensing tiers for premium features, WPS Office offers a free, lightweight, and easy-to-use alternative for your core document creation needs. Enjoy seamless compatibility without the subscription headaches.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
- 2. Install the Software: Run the installer and follow the on-screen instructions to complete the setup.
- 3. Open Your Documents: Launch WPS Office and effortlessly open, edit, and save your existing Microsoft Office files.

Frequently Asked Questions
Why can I send encrypted emails from Outlook on the web but not the desktop app?
Outlook on the web can utilize server-side mail flow rules set by an administrator to encrypt outgoing messages automatically. However, manually initiating encryption directly from the Outlook desktop client requires the account to have an upgraded license that includes Microsoft Purview Message Encryption.
Does Exchange Online Plan 1 include any encryption features?
Exchange Online Plan 1 supports basic server-side encryption like TLS for mail in transit, but it does not include the advanced Microsoft Purview Message Encryption rights required for users to manually encrypt messages within desktop clients.
Which Microsoft 365 licenses support desktop email encryption?
Microsoft Purview Message Encryption is natively included in Microsoft 365 Business Premium, Office 365 E3/E5, Microsoft 365 E3/E5, and various equivalent education and government plans.
Can I buy an add-on for Exchange Online Plan 1 to get encryption?
Yes, administrators can often add an Azure Information Protection Plan 1 standalone license to an existing Exchange Online Plan 1 subscription to enable advanced message encryption capabilities.




