Google is hoping to protect Gmail users by making them more aware of secure and insecure messages. Moving forward, Gmail will display an open lock icon for Google Apps users who receive messages from email services that don't support an encrypted connection. The same applies when users are about to send an email through unprotected servers. Google says people sending messages between Google-hosted domains won't see the open lock icon because Gmail operates through secure servers. Further, if Google can't authenticate the sender of an email via Sender Policy Framework or DKIM, it will replace the sender's profile photo with a question mark. Google believes these visual clues will help people tread more carefully when opening and responding to emails. Google also suggests Gmail users take advantage of two-step verification, activate Data Loss Prevention, check and fine-tune spam settings, and enforce mobile device policies. These changes will role out to Google Apps users (business accounts) over the next few weeks.