Industry guru Dave Taylor offers free tech support on a wide variety of technical and business topics, including HTML, Apple iPhone, online advertising, Cascading Style Sheets, Web design, management, Unix, Linux, search engine optimization, online dating, Mac OS X, shell script programming and Microsoft Windows.

How can I get a secure connection to Gmail?

This is a pretty basic question, but is there some way that I can actually get to Google's Gmail service via SSL and be able to connect with and use Gmail on open wifi networks without worrying about others tapping into and sniffing my information?


Dave's Answer:

There is, actually, and it's undocumented as far as I know, but don't worry, it's really easy to do.

The first thing to notice is that the Gmail sign in URL is secure. It starts with "https://www.google.com/accounts/ServiceLogin".

Log in, however, and your default page will be unsecure, starting with "http://mail.google.com/mail/?auth=":

Google Gmail Unsecure Connection

To switch to a secure connection, click in your address bar (where your browser shows you the URL of the page you're viewing) and manually add the 's' to turn http into https. It'll look like this:

Google Gmail Secure Connection

That's all there is to it. Just press Return or Enter and you're back on the secure connection, and you'll find that all subsequent pages you view in Gmail should be secure too.

To make it permanent, bookmark your secure Gmail inbox view page and use that to get to Gmail each time, rather than just typing in "mail.google.com".

Easy, eh? :-)

To learn more about wireless Internet security, by the way, you might want to check out Connect Safely, an extensive ebook on wifi security and privacy that I co-authored and highly recommend.



Help others find this article at Del.icio.us, Digg, Netscape, Reddit, and Stumble Upon    

Subscribe!

Never miss another useful Q&A article again! Subscribe to AskDaveTaylor with Google Reader.

Comments

I was very interested in reading this entry on your blog, and skipped right over to Gmail to check it out. I already use the https login from my bookmarks, but noticed that my inbox was already https. I did not have to add the 's'! I know it was not secure before, but I guess it is now.

Maybe that is because I am running in HTML view only? I don't know.

I live in China, and Gmail has really saved me the past several days, since the undersea fiber optic cables were damaged in the Taiwan earthquake. All the other mail servers, which tend to be based in the Americas, were down for us, and even now are still very very slow. But not Gmail, their worldwide servers are helping weather this storm. And having those communications secured (at least, more secured) from prying eyes is a great comfort when I have to keep up business communications.

Posted by: Cooper Strange at January 4, 2007 11:39 PM

Does this mean that your email is also encrypted in transit?

Posted by: Peter at April 19, 2007 7:59 PM

I actually have 2 questions regarding gmail secure login:

1) below is the url i got when i typed https://mail.google.com. Is this the actaul "secure" add?

https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&
rm=false&continue=https%3A%2F%2Fmail.google.com%2Fmail%2F%3Fnsr%3D0
%26ui%3Dhtml%26zy%3Dl<mpl=default<mplcache=2

2) while i was reading an email via gmail, suddenly i received a window/prompter which states that the following:

"you have been signed out of this account. This may have happened automatically because another user signed in from the same browser. to continue using this account you will need to sign in again"

Qustion: does this mean my gmail account had been compromised and someone else is reading my email at the same time i was reading it?

what should i do now?

i dare not log in my gmail account for the past 2 days (this happened sometime this week)

i hope you could help me? Thank you so much..

Posted by: Ezz at April 13, 2008 7:31 AM

Peter, yes, if you have SSL between your browser and Gmail, then your connection is secure. Mail messages you type in will be secure on their way to the Gmail server box, but once it leaves there it'll be on whatever network wires route it to the destination server, and odds are it will not be secure.

Ezz, any URL that starts with "https://" is secure. In terms of your login problems, not sure what to say. Check for viruses and try logging in to your account from another computer. Good luck.

Posted by: Dave Taylor at April 14, 2008 11:36 PM

When my wife attempts to read her mail, she gets a message saying that she has been signed out of her account. This does not happen when I read my messages. How do I stop Google doing this?

Posted by: Patrick at October 23, 2008 10:57 AM

HI DAVE CAN YOU TELL ME, IS IT TRUE THAT GMAIL IS ABSOLUTELY FREE. PLEASE CONFIRM. I DONT WANT TO GET IN TROUBLE.....

HAVE A NICE DAY DAVE

NIKKI

Posted by: NIKKI at February 16, 2009 11:37 PM

I have something to say, now that you mention it, but ...
Starbucks coffee cup I do have a lot to say, and questions of my own for that matter, but first I'd like to say thank you for all your efforts on this Web site by buying you a cup of coffee!

I do have a comment, now that you mention it!











Remember personal info?


Please note that I will never send you any unsolicited email. Ever.

While I'm at it, please note that by submitting a question or comment you're agreeing to my terms of service, which are: you relinquish any subsequent rights of ownership to your material by submitting it on this site.








Ask Dave Taylor: The iPhone App: Advertisement



Follow me on Twitter @DaveTaylor

Search
Find just the answers you seek from among our 2300+ free tech support articles by using our Lijit search engine.


Help!





Subscribe to
Ask Dave Taylor!

Add to Google Reader
Add to My Yahoo!
Subscribe in NewsGator Online

RDF   XML

Free Updates!
Sign up and get free weekly updates and special offers on books, seminars, workshops and more.


Recent Entries
Book Links
© 2002 - 2010 by Dave Taylor. All Rights Reserved.

Note: This web site is for the purpose of disseminating information for educational purposes, free of charge, for the benefit of all visitors. We take great care to provide quality information. However, we do not guarantee, and accept no legal liability whatsoever arising from or connected to, the accuracy, reliability, currency or completeness of any material contained on this web site or on any linked site.

[whiteboard marker tray]
"Ask Dave Taylor®" is a registered trademark of Intuitive Systems, LLC.