End-to-end encrypted chat and its limits

End-to-end encryption means messages are scrambled in your browser and only unscrambled in the browsers of the people who are meant to read them. The server stores scrambled text and cannot read it.

This feature is built on the encrypted vault, so it needs the same things: the feature switched on for the site, and an account that can use the vault. Encrypted plans are shown as coming soon on the pricing page, so most accounts do not have this yet. See the guide on the encrypted vault.

Encrypted rooms

An owner or admin can turn encryption on for a room in its settings, if the organization has the right plan. It needs your vault unlocked and a recent second-factor check. Public and open rooms cannot be encrypted, and an encrypted room cannot be made open or public.

Encrypted direct messages

When both people have a vault, the first message turns encryption on for that conversation. Earlier messages stay as they were. You can choose to send without encryption from the bar above the box.

What you will see

A banner says the room or conversation is end-to-end encrypted. If your vault is locked you are asked for your vault passphrase, which is used only in your browser. A message that cannot be read shows a note saying why, for example that it was sent before you had the key.

Limits you should know

• Chat admins who are in a room can read it, because they hold its key. The site's operators cannot.
• When someone leaves or is removed, the room gets a new key for later messages. They keep everything they already read.
• People who join later cannot read earlier messages.
• The server still knows who is in a room, who writes, when, and how large messages are.
• Site staff cannot read, filter or search encrypted rooms. Abuse there is dealt with through reports. When you report a message, your browser reveals just that message, and the server checks it is genuine.
• You are asked to compare a person's key fingerprint the first time. If you accept without comparing it some other way, you are trusting the server for that key.
• A lost vault passphrase means lost access. See the guide on the encrypted vault.
• Decrypted text is shown on the page while it is open. Close the tab or lock the vault to clear it from memory.
• You cannot search encrypted messages.