Based on the documented behavior, there are three main areas to check when encrypted mail suddenly stops working after having worked previously.
- Confirm the encryption feature is still available for the account
- Microsoft Purview Message Encryption (Office 365 Message Encryption) depends on:
- A Microsoft 365 subscription that supports message encryption.
- Correct tenant configuration.
- A valid license assigned to the signed‑in account.
- If any of these changed (subscription downgraded, tenant misconfigured, or license removed), symptoms include:
- Inability to send encrypted messages.
- Missing Encrypt button in Outlook on the web or desktop.
- Have the subscription and license status checked for the Microsoft account being used to sign in. If the account no longer has a license that includes Microsoft Purview Message Encryption, encryption will stop working even if it worked before.
- Use the supported way to encrypt from Outlook (desktop)
- For classic Outlook on Windows, there is a known issue if encryption is applied via File → Encrypt.
- When that path is used, recipients may be unable to open “Encrypt Only” messages, and it can cause encryption issues.
- Instead, when composing a message in classic Outlook:
- Open a new email.
- Go to the Options ribbon.
- Select Encrypt.
- Choose Encrypt or Do Not Forward.
- This is the supported method for sending encrypted messages with a Microsoft 365 Personal or Family subscription.
- Basic troubleshooting for sending/opening encrypted mail
- If encrypted messages cannot be opened or sent from the web:
- Ensure the device is connected to the internet (encryption policies and keys are validated online).
- If recipients report they cannot open messages, verify that the encrypted email contains the Read the message link; if it does not, the sender must resend the message.
If the Encrypt option has disappeared from Outlook on the web and desktop, or encryption fails even when using Options → Encrypt, this strongly indicates a subscription, tenant, or license issue as described above. In that case, the next step is to have support verify that the Microsoft 365 Personal subscription is active and that the account is still licensed for Microsoft Purview Message Encryption.
References: