End-to-end encryption

Messages are encrypted on your device before they are sent, and decrypted only on the recipient's device.

What is protected

The content of messages and attachments in encrypted conversations. The server stores and relays only encrypted data, so it cannot read it. Neither can the server administrator.

What encryption does not hide

The server sees so-called metadata: that an account exists, which devices and IP addresses it connects from, which rooms it is in, and when and how large messages are. That is why the server should be run by someone you trust.

How to check

In an encrypted conversation the app shows an encryption indicator. To be sure you are talking to the right person, you can verify them (in their profile). Verified contacts are marked with a separate symbol.

What matters

Encryption keys live on your devices. Set up a recovery key so you do not lose your message history when you change phones.