Email was built to be copied: every message is stored on at least two servers and two devices, and anything a recipient can read they can forward. "Self-destructing email" therefore means one of two things: a feature that limits what the recipient's mail client lets them do, or a design where the sensitive part never sits in the email at all. This post covers Gmail's and Outlook's features, from Google's and Microsoft's own help pages on 19 October 2026, and then the method that works for any inbox.
Gmail: confidential mode
Gmail's confidential mode lets you "set an expiration date for an email", "revoke access to an email at any time", and "disable options for recipients to forward, copy, print, and download" the message and its attachments. You turn it on at the bottom of the compose window and choose the expiry from a drop-down; you can also require an SMS passcode to open the message.[1]
What it does not do, in Google's own words: recipients "can still take screenshots or photos of your emails", and "recipients with malicious programs may still be able to copy or download your messages". Two further limits worth knowing: the message is not end-to-end encrypted, and in a Google Workspace organisation confidential messages remain visible to administrators through the usual retention tools. Confidential mode is access control on the recipient's mail client, not deletion.[1]
Steps: New message → the lock-and-clock icon at the bottom of the compose window → set the expiry and whether to require a passcode → Save → Send. To revoke early, open the message in Sent and choose Remove access.
Outlook: the Expires after option
Outlook's expiry is older and weaker. In the message window, open Message Options, and under Delivery options tick Expires after and choose a date and time. You can also expire everything you send after a set number of days under File → Options → Mail.[2]
The effect, per Microsoft: after the date, "the message remains visible in the message list with a strikethrough". It is not deleted; there is no way to delete expired messages automatically. The setting is a signal to the recipient that the content is out of date, not a destruction mechanism, and it only renders as intended in Outlook clients.[2]
The method that works for any inbox
Both features share a flaw: the sensitive text is inside the email, so every copy of the email is a copy of the secret. The fix is to keep the secret out of the email.
- Paste the sensitive text, a password, a key, a few lines of instructions, into a one-time secret link tool. The free one-time secret link generator encrypts it in your browser and gives you a link; no account needed.
- Send an ordinary email with the link and a sentence of context ("the VPN password is behind this link; it opens once").
- The recipient opens the link, reads the content, and the stored copy is destroyed. The email they keep contains a dead link.
Properties of this approach that no email feature has:
- Works with any recipient and any mail client, because the email itself is ordinary.
- Forwarding is harmless after the first open. The link no longer reveals anything.
- Expiry is real. An unread link expires on a timer (7 days on the no-account tool; 1 hour, 24 hours or 7 days with a free account, a custom date and time on Pro) and the ciphertext is destroyed.
- On Pro, a passphrase sent by another channel means an intercepted email alone is useless, and the timeline shows when the link was opened.
Two cautions. A link opened before the intended recipient gets to it is a sign something is wrong, which is the point: you find out. And corporate link scanners can fetch URLs in email; LinkPilot's reveal needs a browser to run the page, so a scanner's fetch does not count as a read. Link scanners and one-time secrets explains the mechanism.
Which to use
- A note you want to fade from someone's inbox, not a secret: Gmail confidential mode. Outlook's expiry if both of you use Outlook and you only need a visual cue.
- A password, a key, anything you may need to take back: a one-time link, whatever mail client either of you uses.
- Anything an auditor may ask about later: a one-time link on a plan with a timeline, so there is a record of who had access and when. Secure password sharing for teams covers the policy side.
References
[1] Google. Send & open confidential emails (Gmail Help). https://support.google.com/mail/answer/7674059. Checked 19 October 2026.
[2] Microsoft. Set a message expiration date (Outlook support). https://support.microsoft.com/office/set-a-message-expiration-date-fcae213f-8d38-4318-a17b-42d83ac209ed. Checked 19 October 2026.