Posted  by 

Labels Microsoft Word For Mac

-->

Microsoft 365 licensing guidance for security & compliance.

To get their work done, people in your organization collaborate with others both inside and outside the organization. This means that content no longer stays behind a firewall—it can roam everywhere, across devices, apps, and services. And when it roams, you want it to do so in a secure, protected way that meets your organization’s business and compliance policies.

Mar 08, 2018 This wikiHow teaches you how to print onto Avery label sheets in Microsoft Word on a Windows or Mac computer. Avery will soon be retiring their Add-in wizard in Word. However, you can still download templates from the Avery website. Get it done right with Avery Design and Print and a variety of other templates and software at Avery.com. Use Microsoft Word templates and Adobe templates to design and print the easy way. To print labels, use Mac contact management or word processing apps, or try templates available from label vendors. Mac Contacts or Pages apps: Go to Contacts: Print labels, envelopes, and lists (in English) or Pages Help for Mac: Print envelopes, labels, and business cards (in English) for steps to print labels.

Sensitivity labels from the Microsoft Information Protection framework let you classify and protect your organization's data, while making sure that user productivity and their ability to collaborate isn’t hindered.

Apr 12, 2019 If you’re looking to make customized labels, look no further than Microsoft Word. Whether for personal or professional use, Word provides a comprehensive feature set for creating personalized mailing labels. Here’s how to do it. Use sensitivity labels from the Microsoft Information Protection framework, to classify and protect your organization's data, while making sure that user productivity and their ability to collaborate isn’t hindered. These labels can apply protection settings that include encryption visual markings such as footers and watermarks. If you use Microsoft Office 2011 on a Mac computer, you can easily import addresses or other data from an Excel spreadsheet or from your Apple Contacts and add them to Avery Labels, Name Badges, Name Tags or other products. The Mail Merge Manager built into Microsoft Word for Mac makes it easy to import, then edit and print.

Example showing available sensitivity labels in Excel, from the Home tab on the Ribbon. In this example, the applied label displays on the status bar:

Sensitivity labels are supported for tenants in the global (public) cloud only. Currently, sensitivity labels aren't supported for tenants in other clouds such as national clouds.

Note

Sensitivity labels aren't yet available in US Government Community (GCC) organizations.

To apply sensitivity labels, users must be signed in to Office with their work or school account.

You can use sensitivity labels to:

  • Enforce protection settings such as encryption or watermarks on labeled content. For example, your users can apply a Confidential label to a document or email, and that label can encrypt the content and apply a Confidential watermark.

  • Protect content in Office apps across different platforms and devices. For a list of supported apps, see Use sensitivity labels in Office apps.

  • Prevent sensitive content from leaving your organization on devices running Windows by using endpoint protection in Microsoft Intune. After a sensitivity label has been applied to content that resides on a Windows device, endpoint protection can prevent that content from being copied to a third-party app, such as Twitter or Gmail. Or being copied to removable storage, such as a USB drive.

  • Protect content in third-party apps and services by using Microsoft Cloud App Security. With Cloud App Security, you can detect, classify, label, and protect content in third-party apps and services, such as SalesForce, Box, or DropBox, even if the third-party app or service does not read or support sensitivity labels.

  • Extend sensitivity labels to third-party apps and services. Using the Microsoft Information Protection SDK, third-party apps can read sensitivity labels and apply protection settings.

  • Classify content without using any protection settings. You can also simply assign a classification to content (like a sticker) that persists and roams with the content as it's used and shared. You can use this classification to generate usage reports and see activity data for your sensitive content. Based on this information, you can always choose to apply protection settings later.

In all these cases, sensitivity labels in Microsoft 365 can help you take the right actions on the right content. With sensitivity labels, you can classify data across your organization, and enforce protection settings based on that classification.

What a sensitivity label is

When you assign a sensitivity label to a document or email, it’s like a stamp that's applied to content that is:

  • Customizable. You can create categories for different levels of sensitive content in your organization, such as Personal, Public, General, Confidential, and Highly Confidential.

  • Clear text. Because the label is stored in clear text in the content's metadata, third-party apps and services can read it and then apply their own protective actions, if required.

  • Persistent. After you apply a sensitivity label to content, the label is stored in the metadata of that email or document. This means the label roams with the content, including the protection settings, and this data becomes the basis for applying and enforcing policies.

In Office apps, a sensitivity label appears like a tag to users on an email or document.

Each item of content can have a single sensitivity label applied to it. An item can have both a single sensitivity label and a single retention label applied to it.

What sensitivity labels can do

Note

In addition to applying labels to emails and documents in Office apps, sensitivity labels are now also available in the following public preview releases:

After a sensitivity label is applied to an email or document, any configured protection settings for that label are enforced on the content. With a sensitivity label, you can:

  • Encrypt email only or both email and documents. You can choose which users or group have permissions to perform which actions and for how long. For example, you can choose to allow users in a specific group in another organization to have permissions to review the content for only 7 days after the content is labeled. Alternatively, instead of administrator-defined permissions, you can allow your users to assign permissions to the content when they apply the label.

    For more information about the Encryption settings when you create or edit a sensitivity label, see Restrict access to content by using encryption in sensitivity labels.

  • Mark the content when you use Office apps, by adding watermarks, headers, or footers to email or documents that have the label applied. Watermarks can be applied to documents but not email. Example header and watermark:

    Need to check when content markings are applied? See When Office 365 applies content marking and encryption to content.

    String lengths: Watermarks are limited to 255 characters. Headers and footers are limited to 1024 characters, except in Excel. Excel has a total limit of 255 characters for headers and footers but this limit includes characters that aren't visible, such as formatting codes. If that limit is reached, the string you enter is not displayed in Excel.

  • Prevent data loss by turning on endpoint protection in Intune. If sensitive content gets downloaded, you can help prevent the loss of data from Windows devices. For example, you can’t copy labeled content into Dropbox, Gmail, or a USB drive. Before your sensitivity labels can use Windows Information Protection (WIP), you first need to create an app protection policy in the Azure portal.

    For more information about the Endpoint data loss prevention settings when you create or edit a sensitivity label, including important prerequisites, see How Windows Information Protection protects files with a sensitivity label.

  • Protect content in containers such as sites and groups when you opt into the preview to use sensitivity labels with Microsoft Teams, Office 365 groups, and SharePoint sites (public preview).

    Configuration options for Site and group settings don't display until you opt into the preview. Be aware that this label configuration doesn't result in documents being automatically labeled but instead, the label settings protect content by controlling access to the container where documents are stored. These settings include the privacy level, whether an Office 365 group owner can add guests to the group, and the level of access granted to an unmanaged device.

  • Apply the label automatically in Office apps, or recommend a label. You can choose what types of sensitive information that you want labeled, and the label can either be applied automatically, or you can prompt users to apply the label that you recommend. If you recommend a label, the prompt displays whatever text you choose. For example:

    For more information about the Auto-labeling for Office apps settings when you create or edit a sensitivity label, see Apply a sensitivity label to content automatically.

Label priority (order matters)

When you create your sensitivity labels in your admin center, they appear in a list on the Sensitivity tab on the Labels page. In this list, the order of the labels is important because it reflects their priority. You want your most restrictive sensitivity label, such as Highly Confidential, to appear at the bottom of the list, and your least restrictive sensitivity label, such as Public, to appear at the top.

You can apply just one sensitivity label to a document or email. If you set an option that requires your users to provide a justification for changing a label to a lower classification, the order of this list identifies the lower classifications. However, this option does not apply to sublabels.

The ordering of sublabels is used with automatic labeling, though. When you configure labels to be applied automatically or as a recommendation, multiple matches can result for more than one label. To determine the label to apply or recommend, the label ordering is used: The last sensitive label is selected, and then if applicable, the last sublabel.

Sublabels (grouping labels)

With sublabels, you can group one or more labels below a parent label that a user sees in an Office app. For example, under Confidential, your organization might use several different labels for specific types of that classification. In this example, the parent label Confidential is simply a text label with no protection settings, and because it has sublabels, it can’t be applied to content. Instead, users must choose Confidential to view the sublabels, and then they can choose a sublabel to apply to content.

Sublabels are simply a way to present labels to users in logical groups. Sublabels don’t inherit any settings from their parent label. When you publish a sublabel for a user, that user can then apply that sublabel to content but can't apply just the parent label.

Don't choose a parent label as the default label, or configure a parent label to be auto-applied or recommended, because the parent label won't be applied to content in Office apps that use the Azure Information Protection unified labeling client.

Example of how sublabels display for users:

Editing or deleting a sensitivity label

If you delete a sensitivity label from your admin center, the label is not automatically removed from content, and any protection settings continue to be enforced on content that had that label applied.

If you edit a sensitivity label, the version of the label that was applied to content is what’s enforced on that content.

What label policies can do

After you create your sensitivity labels, you need to publish them, to make them available to people and services in your organization. The sensitivity labels can then be applied to documents and emails. Unlike retention labels, which are published to locations such as all Exchange mailboxes, sensitivity labels are published to users or groups. Sensitivity labels then appear in Office apps for those users and groups.

With a label policy, you can:

  • Choose which users and groups see the labels. Labels can be published to any email-enabled security group, Office 365 group, or dynamic distribution group.

  • Apply a default label to all new documents and email created by the users and groups included in the label policy. This option also applies to containers, if you've enabled sensitivity labels for Microsoft Teams, Office 365 groups, and SharePoint sites. Users can always change the default label if it's not the right label for their document or email. Consider using a default label to set a base level of protection settings that you want applied to all your content. However, without user training and other controls, this setting can also result in inaccurate labeling.

  • Require a justification for changing a label. If a user tries to remove a label or replace it with a label that has a lower order number, you can require the user provides a justification to perform this action. For example, a user opens a document labeled Confidential (order number 3) and replaces that label with one named Public (order number 1). Currently, the justification reason isn't sent to label analytics for the admin to review. However, the Azure Information Protection unified labeling client sends this information to Azure Information Protection analytics.

  • Require users to apply a label to their email and documents. Also known as mandatory labeling, you can require that a label must be applied before users can save documents and send emails. Use this option to help increase your labeling coverage. The label can be assigned manually by the user, automatically as a result of a condition that you configure, or be assigned by default (the default label option described above). The prompt shown in Outlook when a user is required to assign a label:

    Note

    Mandatory labeling requires an Azure Information Protection subscription. To use this feature, you must install the Azure Information Protection unified labeling client. This client runs only on Windows, so this feature is not yet supported on Mac, iOS, and Android.

  • Provide help link to a custom help page. If your users aren’t sure what your sensitivity labels mean or how they should be used, you can provide a Learn More URL that appears at the bottom of the Sensitivity label menu in the Office apps:

After you create a label policy that assigns sensitivity labels to users and groups, allow up to 24 hours for these users to see the labels in their Office apps.

There is no limit to the number of sensitivity labels that you can create and publish, with one exception: If the label applies encryption, there is a maximum of 500 labels. However, as a best practice to lower admin overheads and reduce complexity for your users, try to keep the number of labels to a minimum. Real-word deployments have proved effectiveness to be noticeably reduced when users have more than five main labels or more than five sublabels per main label.

Label policy priority (order matters)

You make your sensitivity labels available to users by publishing them in a sensitivity label policy that appears in a list on the Sensitivity policies tab on the Label policies page. Just like sensitivity labels (see Label priority (order matters)), the order of the sensitivity label policies is important because it reflects their priority. The label policy with lowest priority is shown at the top, and the label policy with the highest priority is shown at the bottom.

Labels Microsoft Word For Mac

A label policy consists of:

  • A set of labels.
  • The scope of the label policy, meaning the users and groups included in the policy.
  • The settings of the label policy described above (default label, justification, mandatory label, and help link).

You can include a user in multiple label policies, and the user will see all the sensitivity labels from those policies. However, a user gets the policy settings from only the label policy with the highest priority.

If you're not seeing the label or label policy setting that you expect for a user or group, and you have waited 24 hours, check the order of the sensitivity label policies. To re-order the label policies, select a sensitivity label policy > choose the ellipsis on the right > Move down or Move up.

If you use retention labels in addition to sensitivity labels, it's important to remember that priority matters for sensitivity label policies, but not for retention label policies.

Sensitivity labels and Azure Information Protection

If you have deployed labels with Azure Information Protection, use the following sections for guidance before you start to use sensitivity labels.

Azure Information Protection labels

Note

Label management for Azure Information Protection labels in the Azure portal is being deprecated March 31, 2021. Learn more from the official deprecation notice.

If you are using Azure Information Protection labels because your tenant isn't yet on the unified labeling platform, we recommend that you avoid creating sensitivity labels until you activate unified labeling. In this scenario, the labels you see in the Azure portal are Azure Information Protection labels rather than sensitivity labels. These labels can be used by the Azure Information Protection client (classic) on Windows computers, but can't be used by devices running macOS, iOS, or Android. To resolve this, migrate these labels to sensitivity labels.

The metadata applied by both sets of labels are compatible, so you don't need to relabel documents and emails when the migration is complete.

Azure Information Protection clients

When you use sensitivity labels in Office 365 ProPlus apps on Windows computers, you have a choice of using an Azure Information Protection client, or use labeling that's built into Office.

By default, built-in labeling is turned off in these apps when the Azure Information Protection client is installed. For more information, including how to change this default behavior, see Office built-in labeling client and the Azure Information Protection client.

Labels Microsoft Word For Mac

Even when you use built-in labeling in Office apps, you can also use the Azure Information Protection unified labeling client with sensitivity labels for the following:

  • A scanner to discover sensitive information that's stored on-premises, and then optionally, label that content

  • Right-click options in File Explorer for users to apply labels to all file types

  • A viewer to display encrypted files for text, images, or PDF documents

  • A PowerShell module to discover sensitive information in files on premises, and apply or remove labels and encryption from these files.

If you are new to Azure Information Protection, or if you are an existing Azure Information Protection customer that has just migrated your labels, see Choose which labeling client to use for Windows computers from the Azure Information Protection documentation.

Sensitivity labels and Microsoft Cloud App Security

By using Cloud App Security (CAS), you can discover, classify, label, and protect content in third-party services and apps, such as SalesForce, Box, or Dropbox.

Cloud App Security works with both Azure Information Protection labels and sensitivity labels:

  • If the labeling admin centers have one or more sensitivity labels published to at least one user: Sensitivity labels are used.

  • If the labeling admin centers don't have sensitivity labels published: Azure Information Protection labels are used.

For instructions to use Cloud App Security with these labels, see Azure Information Protection integration.

Sensitivity labels and the Microsoft Information Protection SDK

Because a sensitivity label is stored as clear text in the metadata of a document, third-party apps and services can read from and write to this labeling metadata to supplement your labeling deployment. Additionally, software developers can use the Microsoft Information Protection SDK to fully support labeling and encryption capabilities across multiple platforms. To learn more, see the General Availability announcement on the Tech Community blog.

You can also learn about partner solutions that are integrated with Microsoft Information Protection.

Deployment guidance

See Get started with sensitivity labels.

-->

Microsoft 365 licensing guidance for security & compliance.

When you have published sensitivity labels from the Microsoft 365 compliance center or equivalent labeling center, they start to appear in Office apps for users to classify and protect data as it's created or edited.

Use the information in this article to help you successfully manage sensitivity labels in Office apps. For example, identify the minimum versions of apps you need to support built-in labeling, and understand interactions with the Azure Information Protection unified labeling client and compatibility with other apps and services.

Labeling client for desktop apps

To use sensitivity labels that are built into Office desktop apps for Windows and Mac, you must use a subscription edition of Office. This labeling client doesn't support standalone editions of Office, such as Office 2016 or Office 2019.

To use sensitivity labels with these standalone editions of Office on Windows computers, install the Azure Information Protection unified labeling client.

Support for sensitivity label capabilities in apps

For each capability, the following tables list the minimum version you need for that app to support sensitivity labels using built-in labeling. Or, if the label capability is in public preview or under review for a future release.

New versions of the apps are made available at different times for different update channels. For more information, including how to configure your update channel so that you can test a new labeling capability that you're interested in, see Overview of update channels for Office 365 ProPlus. New capabilities that are in private preview are not included in the table but you might be able to join these previews by nominating your organization for the Microsoft Information Protection private preview program.

Additional capabilities are available when you install the Azure Information Protection unified labeling client, which runs on Windows computers only. For these details, see Compare the labeling clients for Windows computers.

Sensitivity label capabilities in Word, Excel, and PowerPoint

For iOS and Android: Where these have a minimum version listed, the sensitivity label capability is also supported with the Office app.

Free activation key for microsoft office 2011 mac downloads. Dec 11, 2013  Office mac 2011 product key 4C6VK-PF9HC-6D93Y-JYVGD-D7D4X YTVD4-F4P23-W6RTT-GR4PB-CRY6K C7KDQ-9V7VV-G2KDD-BPWJX-4BCJP MXD39-9VRFY-Y7DXG-6WHM6-9DJXV 2KX64-F3TPH-Q7H2C-KBD84-G2W98 D2HQF-4PTDC-B449G-QW8YP-763V8 GH683-FB3XX-CJVCV-C64GF-R84H8 BJ282-GFHPD-8BMTH-7WV3P-QWWDM 2R63R-F8TJ3-7J337-Q6PWV-T7GBD if these keys are.

CapabilityWindows DesktopMac DesktopiOSAndroidWeb
Manually apply, change, or remove label1910+16.21+2.21+16.0.11231+Preview
Apply a default label1910+16.21+2.21+16.0.11231+Under review
Require a justification to change a label1910+16.21+2.21+16.0.11231+Preview
Provide help link to a custom help page1910+16.21+2.21+16.0.11231+Preview
Mark the content1910+16.21+2.21+16.0.11231+Preview
Assign permissions now1910+16.21+2.21+16.0.11231+Preview
Let users assign permissionsRolling out to Monthly Channel (2003+)Rolling out to Monthly Channel (16.35+)Under reviewUnder reviewUnder review
View label usage with label analytics and send data for administratorsUnder reviewUnder reviewUnder reviewUnder reviewUnder review
Require users to apply a label to their email and documentsUnder reviewUnder reviewUnder reviewUnder reviewUnder review
Apply a sensitivity label to content automaticallyPreview: In Office InsiderUnder reviewUnder reviewUnder reviewPreview
Support AutoSave and coauthoring on labeled and protected documentsUnder reviewUnder reviewUnder reviewUnder reviewPreview

Sensitivity label capabilities in Outlook

CapabilityOutlook on Windows DesktopOutlook on Mac DesktopOutlook on iOSOutlook on AndroidOutlook on the web
Manually apply, change, or remove label1910+16.21+4.7.1+4.0.39+Yes
Apply a default label1910+16.21+4.7.1+4.0.39+Yes
Require a justification to change a label1910+16.21+4.7.1+4.0.39+Yes
Provide help link to a custom help page1910+16.21+4.7.1+4.0.39+Yes
Mark the content1910+16.21+4.7.1+4.0.39+Yes
Assign permissions now1910+16.21+4.7.1+4.0.39+Yes
Let users assign permissions1910+16.21+4.7.1+4.0.39+Yes
View label usage with label analytics and send data for administratorsUnder reviewUnder reviewUnder reviewUnder reviewUnder review
Require users to apply a label to their email and documentsUnder reviewUnder reviewUnder reviewUnder reviewUnder review
Apply a sensitivity label to content automaticallyPreview: Rolling out to Office InsiderUnder reviewUnder reviewUnder reviewYes

Office built-in labeling client and other labeling solutions

The Office built-in labeling client downloads sensitivity labels and sensitivity label policy settings from the following admin centers:

  • Microsoft 365 compliance center
  • Microsoft 365 security center
  • Office 365 Security & Compliance Center

To use the Office built-in labeling client, you must have one or more label policies published to users from one of the listed admin centers and a supported version of Office.

If both of these conditions are met but you need to turn off the Office built-in labeling client, use the following Group Policy setting:

  1. Navigate to User Configuration/Administrative Templates/Microsoft Office 2016/Security Settings

  2. Set Use the Sensitivity feature in Office to apply and view sensitivity labels to 0.

Deploy this setting by using Group Policy, or by using the Office cloud policy service. The setting takes affect when Office apps restart.

Office built-in labeling client and the Azure Information Protection client

If users have one of the Azure Information Protection clients installed (unified labeling client or classic client), by default, the built-in labeling client is turned off in their Office apps.

To use built-in labeling rather than the Azure Information Protection client for Office apps, use the instructions from the previous section but set the Group Policy setting Use the Sensitivity feature in Office to apply and view sensitivity labels to 1.

Alternatively, disable or remove the Office add-in, Azure Information Protection. This method is suitable for a single computer, and ad-hoc testing. For instructions, see View, manage, and install add-ins in Office programs.

When you disable or remove this Office add-in, the Azure Information Protection client remains installed so that you can continue to label files outside your Office apps. For example, by using File Explorer, or PowerShell.

For information about which features are supported by the Azure Information Protection clients and the Office built-in labeling client, see Choose which labeling client to use for Windows computers from the Azure Information Protection documentation.

Protection templates and sensitivity labels

Administrator-defined protection templates, such as those you define for Office 365 Message Encryption, aren't visible in Office apps when you're using built-in labeling. This simplified experience reflects that there's no need to select a protection template, because the same settings are included with sensitivity labels that have encryption enabled.

If you need to convert existing protection templates to labels, use the Azure portal and the following instructions: To convert templates to labels.

Information Rights Management (IRM) options and sensitivity labels

Sensitivity labels that you configure to apply encryption remove the complexity from users to specify their own encryption settings. In many Office apps, these individual encryption settings can still be manually configured by users by using Information Rights Management (IRM) options. For example, for Windows apps:

  • For a document: File > Info > Protect Document > Restrict Access
  • for an email: From the Options tab > Encrypt

When users initially label a document or email, they can always override your label configuration settings with their own encryption settings. For example:

  • A user applies the Confidential All Employees label to a document and this label is configured to apply encryption settings for all users in the organization. This user then manually configures the IRM settings to restrict access to a user outside your organization. The end result is a document that's labeled Confidential All Employees and encrypted, but users in your organization can't open it as expected.

  • A user applies the Confidential Recipients Only label to an email and this email is configured to apply the encryption setting of Do Not Forward. This user then manually configures the IRM settings so that the email is unrestricted. The end result is the email can be forwarded by recipients, despite having the Confidential Recipients Only label.

  • A user applies the General label to a document, and this label isn't configured to apply encryption. This user then manually configures the IRM settings to restrict access to the document. The end result is a document that's labeled General but that also applies encryption so that some users can't open it as expected.

If the document or email is already labeled, a user can do any of these actions if the content isn't already encrypted, or they have the usage right Export or Full Control.

Label Microsoft Word Mac

For a more consistent label experience with meaningful reporting, provide appropriate labels and guidance for users to apply only labels to protect documents. For example:

  • For exception cases where users must assign their own permissions, provide labels that let users assign their own permissions.

  • Instead of users manually removing encryption after selecting a label that applies encryption, provide a sublabel alternative when users need a label with the same classification, but no encryption. Such as:

    • Confidential All Employees
    • Confidential Anyone (no encryption)

Note

If users manually remove encryption from a labeled document that's stored in SharePoint or OneDrive and you've enabled sensitivity labels for Office files in SharePoint and OneDrive, the label encryption will be automatically restored the next time the document is accessed or downloaded.

Apply sensitivity labels to files, emails, and attachments

Users can apply just one label at a time for each document or email.

When you label an email message that has attachments, the attachments don't inherit the label with one exception:

  • The attachment is an Office document with a label that doesn't apply encryption, and the label you apply to the email message applies encryption. In this case, the emailed Office document inherits the email's label with its encryption settings.

Otherwise:

  • If the attachments have a label, they keep their originally applied label.
  • If the attachments are encrypted without a label, the encryption remains but they aren't labeled.
  • If the attachments don't have a label, they remain unlabeled.

Sensitivity label compatibility

Labels Microsoft Word For Mac Catalina

With RMS-enlightened apps: If you open a labeled and encrypted document or email in an RMS-enlightened application that doesn't support sensitivity labels, the app still enforces encryption and rights management.

With the Azure Information Protection client: You can view and change sensitivity labels that you apply to documents and emails with the Office built-in labeling client by using the Azure Information Protection client, and the other way around.

Updated on March 31, 2020When you try saving a new word file or edit a current document and save it in a Microsoft Word, you may endup with an error message saying 'Word cannot complete the save due to a file permission error'. File permission error microsoft word mac.

With other versions of Office: Any authorized user can open labeled documents and emails in other versions of Office. However, you can only view or change the label in supported Office versions or by using the Azure Information Protection client. Supported Office app versions are listed in the previous section.

Support for SharePoint and OneDrive files protected by sensitivity labels

To use the Office built-in labeling client with Office on the web for documents in OneDrive for Business or SharePoint Online, make sure you've opted-in to the preview to enable sensitivity labels for Office files in SharePoint and OneDrive.

When Office 365 applies content marking and encryption

Office 365 applies content marking and encryption with a sensitivity label differently, depending on the app you use.

AppContent markingEncryption
Word, Excel, PowerPoint on all platformsImmediatelyImmediately
Outlook for PC and MacAfter Exchange Online sends the emailImmediately
Outlook on the web, iOS, and AndroidAfter Exchange Online sends the emailAfter Exchange Online sends the email

End-user documentation