If your organisation uses Google Workspace's client-side encryption (CSE) to protect sensitive files, you can now preview encrypted PDFs and images directly in Google Drive—no download required. This update, rolling out from October 2026, means authorised users view confidential documents in their browser while the encryption keys stay firmly in your hands, not Google's.

What's actually changed with encrypted file previews?

Until now, opening a client-side encrypted PDF or image meant downloading it to your device first. That extra step wasn't just inconvenient—it created copies of sensitive files on local machines, which is exactly what security-conscious organisations want to avoid.

Now, when someone with the right permissions clicks on an encrypted PDF or image in Drive, it opens in a preview pane. The file never leaves the cloud, and it's decrypted on the fly using your organisation's encryption keys. Simple as that.

Which file types work with this feature?

At launch, in-browser preview supports:

Encrypted PDF documents
Encrypted image files (common formats like JPEG, PNG)

Native Google formats (Docs, Sheets, Slides) already had their own CSE preview capabilities. This update brings parity for those common non-native file types that businesses deal with constantly—contracts, scanned documents, ID copies, architectural drawings, medical images.

Why does this matter for your business?

Here's a scenario: your HR team stores encrypted employee documents in Drive. Previously, every time someone needed to verify a passport scan or review a signed contract, they'd download it, view it, then (hopefully) delete it. That's a lot of sensitive data floating around on laptops.

With browser-based preview, the document stays encrypted at rest in Drive. The authorised user sees it, does their job, closes the tab. No local copy. No cleanup required. No wondering if someone forgot to empty their Downloads folder before handing in a company laptop.

For industries handling medical records, legal documents, or financial data, this kind of control isn't a nice-to-have—it's often a compliance requirement.

Do admins need to enable anything?

No. There's no admin toggle for this feature. It's on by default for organisations that already have CSE configured. If you've set up client-side encryption and your users have the necessary access, they'll see the preview option automatically once the rollout reaches your domain.

If you haven't configured CSE yet but you're curious whether it makes sense for your organisation, our team can walk you through what's involved. It requires setting up external key management, so it's worth understanding the architecture before diving in.

Who gets access to this feature?

This update is available to:

Enterprise Plus
Education Standard and Education Plus
Frontline Plus
Assured Controls and Assured Controls Plus

If you're on a different Workspace edition, CSE isn't available, so this feature won't apply.

For more on how Google Workspace editions compare, you can explore our Google Workspace solutions page.

Frequently asked questions

Does this feature work on mobile devices?
At launch, encrypted file preview is available in Drive on the web. Mobile support hasn't been announced yet.

Can I preview encrypted Microsoft Office files this way?
Not currently. The initial release covers PDFs and image files only. Native Google formats (Docs, Sheets, Slides) have separate CSE support.

Is the preview truly secure, or is the file decrypted on Google's servers?
The decryption happens client-side using your organisation's encryption keys. Google doesn't have access to the unencrypted content—that's the whole point of CSE.

When will my organisation see this feature?
Rollout began 15 October 2026 for both Rapid Release and Scheduled Release domains. Google notes it may take longer than 15 days to appear everywhere.

Ready to strengthen your document security?

If you're already using Google Workspace and want to explore client-side encryption—or if you need help making sure your current setup is working as expected—Blue Chip Technologies Ltd. can help. We support businesses worldwide with Google Workspace deployment and configuration, with remote delivery globally and on-site assistance available in Trinidad & Tobago.

Get in touch: