Fix Microsoft Purview Sending RPMSG Attachments Instead of Portal Links
Question details
Users expect to receive a one-time-code web portal link when receiving sensitivity-label encrypted emails, but are instead receiving RPMSG file attachments.

- Product
- Microsoft Purview
- Device & OS
- not provided
- Scenario
- Sending or receiving emails protected by Microsoft Purview sensitivity-label encryption.
- Observed behavior
- The encryption system delivers an RPMSG encrypted attachment to the recipient rather than directing them to the expected one-time-code web portal.
Verify whether the recipient is using an email client that natively supports Microsoft's encryption protocols, as the client type often dictates if an RPMSG file or a portal link is generated.
Consult the Microsoft Purview Community
Since this is a highly specific Microsoft Purview configuration behavior rather than a standard Exchange Online error, reaching out to Purview specialists is the most effective approach.
Microsoft Purview's encryption behavior depends heavily on tenant-level configurations and client compatibility. Because Exchange Online support cannot override Purview's sensitivity label behaviors, the specialized community is the best resource for enforcing portal-based encryption.
Open your web browser and navigate to the official Microsoft Tech Community website.
Use the search bar to find the 'Microsoft Purview' hub or navigate through the 'Security & Compliance' forums.
Create a new discussion asking specialists how to enforce portal-based encryption (one-time passcodes) for all sensitivity-label encrypted messages instead of delivering RPMSG files.

Review Office 365 Message Encryption (OME) Settings
Check your organization's Azure Information Protection and mail flow rules to see if portal delivery is restricted.
Need a simpler way to handle secure documents? Try WPS Office
If Microsoft's complex encryption rules and compliance centers are slowing down your daily document productivity, consider switching to WPS Office. It provides a lightweight, highly compatible, and user-friendly experience for managing and securing your Word, Excel, and PDF files.
- 1. Download the Installer: Visit the official WPS website and click the free download button for your operating system.
- 2. Install WPS Office: Run the downloaded installer and follow the simple on-screen instructions to set up the software.
- 3. Secure your documents: Open your documents in WPS Office and use the built-in encryption feature to easily set passwords without relying on complex server-side rules.

Frequently Asked Questions
What is an RPMSG file?
An RPMSG file is a Restricted Permission Message created by Microsoft's Azure Information Protection. It contains encrypted email content and attachments that require specific authentication to open.
Why do some users get a portal link while others get an RPMSG file?
Microsoft 365 Message Encryption determines the delivery method based on the recipient's email client and organization setup. If the recipient's client doesn't support native decryption, the system usually falls back to delivering an RPMSG file or a portal link, depending on the sender's specific tenant configuration.
Can I open RPMSG files without Microsoft Outlook?
Opening RPMSG files generally requires an Azure Information Protection viewer or an email client that supports Microsoft's native encryption protocols. Standard third-party email clients cannot natively read these files without the specialized viewer.




