—Number of Companies Adopting ‘Secure File Sharing’ Surpasses 800,000
HENNGE K.K. (Headquarters: Shibuya-ku, Tokyo; Representative Director and CEO: Kazuhiro Ogura) has compiled and analyzed the usage status of PPAP (*1) in business emails based on utilization data from its cloud security service, “HENNGE One.” The analysis revealed that the usage rate of PPAP has dropped by approximately half over the past two years, to around 6%. The findings demonstrate that de-PPAP has evolved beyond a temporary trend to become firmly established as the new standard for business email communications.
*1: PPAP is a colloquial Japanese term for the practice of sharing files via email by sending a password-encrypted ZIP file first, followed by the password in a separate email. While once widely adopted across Japan, the movement toward “de-PPAP,” shifting to alternative file-sharing methods, has accelerated among government agencies and corporations in recent years due to mounting concerns over its insufficient security and poor usability.
Background of the Survey: The Accelerating De-PPAP Movement and Government Actions
In recent years, the vulnerabilities of PPAP have emerged as a critical challenge alongside the increasing sophistication of cyberattacks. Since the Cabinet Office and the Cabinet Secretariat announced the discontinuation of PPAP in 2020, numerous companies have been exploring alternative solutions. Furthermore, in May 2025, the Financial Services Agency (FSA) issued a directive (*2) urging related institutions to adopt de-PPAP, stating that the sending of password-protected files should fundamentally be avoided, and encrypting the email communication pathway itself should be the baseline practice. That underscores an accelerating nationwide and administrative push to strengthen cybersecurity, making the establishment of secure file-sharing environments an urgent priority for organizations.
*2: Main Topics Raised by the Financial Services Agency (FSA) at a Dialogue Meeting with the Industry Association [Held on May 13, 2025 (dialogue meeting with major banks, etc.)]
https://www.fsa.go.jp/en/press_releases/issues/202505/01.pdf
The Transition to De-PPAP in Data: PPAP Usage Halved in Two Years, HSD Volume Grows Approximately Six-Fold
In October 2021, HENNGE launched “HENNGE Secure Download (HSD),” a de-PPAP solution designed to facilitate secure file transmission and reception via email, as a feature within its HENNGE One cloud security service. Since then, the company has continuously monitored the shifting landscape of file-sharing methods in business emails.
Comparing historical survey data with the latest findings clearly illustrates how de-PPAP has evolved beyond a passing trend to fundamentally reshape business norms, as epitomized by the halving of the PPAP usage rate over the past two years.
1. Trends in PPAP Usage Rates: Halved in the Last Two Years, Plummeting to Less Than One-Fourth Over Four and a Half Years
The percentage of PPAP usage among emails with file attachments sent by HENNGE One users has plummeted to less than one-fourth, dropping from 29.4% at the service’s launch in October 2021 to 6.2% over a span of 4.5 years.
The recent shift is particularly striking: the rate has halved yet again in just two years, falling from 12.4% in July 2024 to 6.2% in the latest June 2026 survey. This highlights a further acceleration in the de-PPAP movement.
[Methodology]
Using emails with file attachments sent by HENNGE One users as the population, HENNGE independently compiled and analyzed data from the sample periods listed below. Emails containing encrypted file attachments were counted as transmissions sent via PPAP.
Sample Periods:
- Sunday, October 3–Saturday, October 9, 2021
- Sunday, July 7–Saturday, July 13, 2024
- Sunday, June 7–Saturday, June 13, 2026
*To ensure consistent conditions regarding the number of business days, the period from the first Sunday to the following Saturday of each month was selected for data extraction.
2. Trends in the Sent Emails: Two and a Half Years After Surpassing PPAP, HSD Volume Expands to Approximately “Six Times” That of PPAP
Next, the delivery methods for emails with file attachments sent by HENNGE One users were compiled on a weekly basis.
The number of emails sent using HSD surpassed PPAP for the first time in October 2023. Since then, it has continued to expand, reaching approximately six times the volume (5.62 million emails per week) of PPAP as of June 2026.
The data represent an independent estimate of usage rates and volumes for both PPAP and HSD, based on a sample of emails with file attachments circulating on the HENNGE One platform.
The latest survey targeted the week of June 7, 2026 (a one-week period), and the trend was calculated by comparing these findings with data from the week of October 1, 2023 (a one-week period), which was compiled using the same methodology.
Number of Companies Utilizing HSD Surpasses 800,000
Reflecting the widespread adoption of de-PPAP, the number of companies and organizations securely receiving files through HSD is also steadily increasing.
Highly regarded for its simple usability and robust security, HSD is being increasingly adopted by listed enterprises across a broad range of industries, as well as by local governments. As of June 2026, the cumulative number of companies utilizing the service has surpassed 800,000 (*3). The fact that adoption continues to expand at a stable pace—even as the feature enters a mature phase of market penetration—demonstrates that de-PPAP solutions have firmly established themselves as an essential component of business infrastructure.
*3: Recipients who receive email attachments via HSD (HENNGE Secure Download) undergo email address authentication when downloading the files. This figure represents an internal estimate of the number of companies using the service, based on the number of unique domains after excluding major free email services and ISPs from the authenticated email domains.
HENNGE remains committed to supporting secure file sharing by continuously promoting and developing HSD and HENNGE One. By doing so, the company aims to enhance both usability and security while fostering broader business collaboration through seamless, simplified file-sharing.
About HENNGE Secure Download (HSD)
HSD is a de-PPAP feature within the cloud security service “HENNGE One,” released by HENNGE in October 2021. With HSD, senders can simply attach files to their emails as they normally do; the files are then automatically uploaded to secure cloud storage, and the recipient receives the email body along with a PDF containing a download URL. When the recipient requests authentication using their email address, an authentication code is transmitted via a separate pathway. Because a unique download URL is generated for each recipient, only the intended recipient can complete the authentication and download the files. Furthermore, if an incorrect file is attached by mistake, the sender can deactivate the URL even after the email has been sent.
In June 2023, HENNGE enhanced the service by adding “HENNGE Secure Download for Box,” a feature that integrates with Box. The expansion allows organizations to select “Box,” a widely adopted enterprise cloud storage solution, as the upload destination for their email attachments.
Details of the PPAP Measures/Alternatives
About HENNGE One
HENNGE One is a cloud security service with the largest market share in Japan (*4) that helps businesses boost productivity. While leveraging new technologies like SaaS is vital for productivity gains, businesses face challenges such as implementing zero-trust security.
To address these challenges, HENNGE One offers three editions: the Identity Edition, which centralizes and protects multiple system IDs for secure and efficient work; the DLP Edition, which prevents accidental leaks of scattered organizational information; and the Cybersecurity Edition, which safeguards companies from cyber-attacks through a comprehensive approach spanning technology, people, and processes.
It achieves zero-trust security through a holistic security service, which reduces the burden of implementation and operation, thereby fulfilling the liberation of technology.
URL: https://hennge.com/global/service/one/
About HENNGE K.K.
HENNGE K.K. is a SaaS company guided by the management philosophy of “liberation of technology to change the world,” dedicated to bridging the gap between advanced technologies and practical application. It develops and sells distinctive services: a cloud security service with the largest market share in Japan, HENNGE One, which offers comprehensive security, including single sign-on (SSO), access management, email security, and secure file sharing, alongside device management and protection based on zero trust principles; a cloud email distribution service, Customers Mail Cloud. Established in November 1996, HENNGE was listed on the Tokyo Stock Exchange (TSE) Mothers (now Growth) in October 2019.
The company name “HENNGE” is a portmanteau of the Japanese word for transformation, ‘HENNKA,’ and ‘CHALLENGE,’ signifying its commitment to embracing every change as an opportunity.
Company name: HENNGE K.K. (securities code: 4475)
Address: Daiwa Shibuya Square, 16-28 Nampeidaicho, Shibuya-ku, Tokyo
Representative: Kazuhiro Ogura (Representative Director, President and CEO)
URL: https://hennge.com/
*4: Ranked No. 1 in the IDaaS Market (Sales and Share by Vendor) for FY2025 (forecast), based on the ITR Market View: Identity and Access Management/Personal Authentication Cybersecurity Market 2026 by ITR.
– Press Contact
HENNGE K.K.
Corporate Communication Division
Email: hennge-pr@hennge.com
TEL: 03-6415-3660
Person in charge: Ichishima, Yano
The names of companies, products, and services mentioned in this press release are trademarks or registered trademarks of HENNGE K.K. or other related organizations.