End-to-end encryption
In our increasingly interconnected world, securing private conversations has become paramount. End-to-end encryption, or E2EE, offers a powerful shield, ensuring that only you and your intended recipient can ever read your messages. It's a fundamental technology shaping how we communicate, but it's also a battleground of privacy, security, and government oversight. End-to-end encryption means that messages are encrypted on the sender's device and decrypted only on the recipient's device, making them unreadable to any third party, including the service provider. This robust privacy protection has made E2EE a cornerstone of digital freedom, but it also sparks heated debates with governments and law enforcement agencies. While E2EE secures the communication channel, the security of the endpoints themselves—your devices—remains critical to prevent sophisticated attacks like man-in-the-middle exploits or device compromises.
AI Summary
In our increasingly interconnected world, securing private conversations has become paramount. End-to-end encryption, or E2EE, offers a powerful shield, ensuring that only you and your intended recipient can ever read your messages. It's a fundamental technology shaping how we communicate, but it's also a battleground of privacy, security, and government oversight.
- End-to-end encryption means that messages are encrypted on the sender's device and decrypted only on the recipient's device, making them unreadable to any third party, including the service provider.
- This robust privacy protection has made E2EE a cornerstone of digital freedom, but it also sparks heated debates with governments and law enforcement agencies.
- While E2EE secures the communication channel, the security of the endpoints themselves—your devices—remains critical to prevent sophisticated attacks like man-in-the-middle exploits or device compromises.
The Unseen Shield for Your Messages
Imagine sending a sealed letter, but instead of the post office handling it, only your friend has the unique key to open it. That's the essence of end-to-end encryption, or E2EE. It's a sophisticated method for building secure communication systems where privacy is baked into the very design.
At its core, E2EE ensures that only the sender and the intended recipient can read the messages. Crucially, this means no one else — not the service provider, not your internet company, not even malicious actors — can access the cryptographic keys needed to unlock your conversations.
The process is elegant: messages are encrypted directly on the sender's device. They then travel through various servers and networks, remaining completely scrambled, until they reach the recipient's device, where they are independently decrypted. This design drastically reduces the 'attack surface,' meaning there are fewer points where your data can be compromised.
The benefits are profound: E2EE makes it incredibly difficult for your data to be read or secretly modified by anyone but you and your recipient. This protection guards against widespread data breaches, corporate espionage, and even government mass surveillance, making it a favorite among privacy advocates and human rights organizations.
Today, E2EE is a common feature in popular messaging apps like WhatsApp, iMessage, and Facebook Messenger, securing billions of chat messages and calls. Signal, with an estimated 70 million users, is widely regarded as the 'gold standard' in secure messaging by cryptographers, journalists, and activists alike, thanks to its rigorous implementation.
A Double-Edged Sword: Privacy vs. Public Safety
Yet, the very strength of E2EE — its impenetrable privacy — has ignited global controversy. Because end-to-end encrypted services genuinely cannot access user communications, they cannot hand over decrypted messages even when compelled by government requests. This creates a significant challenge for law enforcement agencies investigating serious crimes.
Governments and child protection groups worldwide have expressed deep concerns about E2EE's impact on criminal investigations, leading to legislative efforts in countries like Australia and the UK to restrict its use. However, some government bodies, like the US Cybersecurity and Infrastructure Security Agency (CISA), argue that 'encryption is your friend,' emphasizing its vital role in protecting against cyber espionage campaigns.
The Evolution of 'End-to-End'
The term 'end-to-end encryption' itself has evolved. Historically, around the early 2000s, it often simply meant that communication was encrypted during transit, like between a mobile device and a network tower in older GSM or TETRA systems. However, in these older models, the service provider or network operator still held the keys and could access the content.
The modern understanding of E2EE solidified around 2014, largely influenced by WhatsApp's push for stronger privacy. This new definition insists that not only is the communication encrypted during transport, but also that the service provider — and indeed, any third party — is completely unable to decrypt the messages. This is the widely accepted meaning today.
Why We Need This Digital Privacy
Without end-to-end encryption, service providers can easily offer features like message search or content scanning, but this convenience comes at a cost. It means that anything you send could potentially be read by anyone with access to the provider's stored data, whether through a deliberate design, a security flaw, or a government subpoena.
This lack of protection becomes a critical concern when handling highly sensitive information. Think of military communications, financial transactions, or personal health and biometric data. Without E2EE, such content could be obtained by malicious actors or adversarial governments, either through unauthorized access or by legally compelling the service provider to hand it over.
It's important to remember, however, that E2EE is not a complete panacea for privacy and security. While it secures the communication channel itself, it doesn't protect data once it's decrypted on your device. If your personal device is compromised, or your credentials are stolen, the unencrypted messages stored there could still be accessed.
E2EE in Action: Modern Implementations
Many of today's most popular messaging apps rely on E2EE by default. Signal, for instance, is built from the ground up to be end-to-end encrypted, and WhatsApp famously adopted the open-source Signal Protocol to secure its massive user base. These apps aim to provide a seamless, private communication experience without users needing to manually enable encryption.
Other platforms, like Facebook Messenger, have been slower to adopt default E2EE, initially requiring users to opt-in for 'secret conversations,' which could be confusing. After significant pressure and privacy controversies, Facebook announced plans to enable end-to-end encryption by default for all Messenger chats, a major step forward for user privacy.
Beyond Text: Calls, Files, and More
The reach of E2EE extends far beyond simple text messages. Apps like Signal and WhatsApp also secure audio and video calls with end-to-end encryption, protecting your conversations from eavesdropping. Even platforms like Discord and Zoom have been working to integrate E2EE for their voice and video conferencing features, responding to increasing user demand for privacy.
E2EE principles are also applied to file sharing and backup services. Platforms such as Nextcloud and MEGA offer client-side encryption, meaning files are encrypted on your device before being uploaded to the cloud, ensuring that even the service provider cannot view their contents. This effectively makes them end-to-end encrypted for storage.
However, the term 'end-to-end encryption' is sometimes misused or misinterpreted. Some services that only offer 'client-side encryption' or 'encryption in transit' have occasionally described themselves as E2EE, which can be misleading. True E2EE means the keys are only on the sender and recipient's devices, making it impossible for intermediaries to decrypt.
The Regulatory Tightrope and Enterprise Demands
The tension between robust privacy and law enforcement demands often flares up dramatically. For example, a 2022 case in Nebraska saw Facebook Messenger messages between a mother and daughter used in an abortion-related prosecution, sparking renewed scrutiny on how user data is handled when E2EE is not uniformly applied.
This incident highlighted that even if some chats are E2EE, others on the same platform might not be, making user data vulnerable to warrants and subpoenas. It underscores the critical difference between having the option of E2EE and having it enabled by default across all communications.
Beyond individual privacy, businesses face their own set of challenges. Many organizations are subject to strict regulatory requirements, needing to decrypt employee communications for archival, data loss prevention (DLP), eDiscovery in legal cases, or malware detection. For these reasons, some enterprise systems might terminate encryption internally, giving them access for inspection and processing.
The Challenges: Foiling the Interceptor
While E2EE ensures data travels securely between endpoints, it doesn't solve every security problem. One of the most insidious threats is the 'man-in-the-middle' (MITM) attack. Here, an attacker doesn't try to break the encryption itself, but rather inserts themselves into the communication channel, impersonating one of the parties.
Authenticating Your Connection
To counter MITM attacks, most E2EE protocols include sophisticated authentication mechanisms. These might involve relying on trusted certification authorities, using a 'web of trust' model, or generating unique cryptographic fingerprints based on the users' public keys. The goal is to verify that you are truly talking to your intended recipient and not an imposter.
A common technique involves comparing these 'fingerprints' — usually long strings of characters or words — using an 'out-of-band' communication channel. This means you might verbally confirm the fingerprint with your friend over a separate, secure method, ensuring the integrity and authenticity of the connection before you even begin your encrypted chat.
Modern messaging apps often make this verification easier by displaying fingerprints as easily readable groups of words, base-10 strings, or even scannable QR codes. This allows users to quickly cross-check the unique identifier on each other's devices, confirming they are speaking directly to one another.
Endpoint Security: The Last Mile
Even with perfect E2EE, the communications endpoints themselves remain vulnerable. If a user's device is hacked, their cryptographic key could be stolen, or malware could simply read decrypted messages directly from the screen or log files. A perfectly encrypted pipeline is only as secure as the 'mailbox' at each end.
Efforts to bolster endpoint security include isolating key generation on smart cards or even using 'air-gapped' computers completely disconnected from the internet. However, even these advanced measures have faced challenges, as famously demonstrated by Stuxnet, which managed to 'jump' an air gap to infect secure systems.
The Threat of Backdoors
A 'backdoor' is a secret method to bypass normal authentication or encryption within a system. Sometimes, companies might willingly — or unwillingly — introduce such vulnerabilities into their software. These backdoors can completely undermine the security that E2EE is meant to provide.
Leaked information from Edward Snowden, for example, revealed that Skype had a backdoor allowing Microsoft to share user messages with the NSA, despite official claims of E2EE. Similarly, after terrorist attacks, the FBI requested Apple create a backdoor for iPhones, a demand the company famously refused, citing grave concerns about consumer privacy and the potential for abuse.
Article
End-to-end encryption
Under end-to-end encryption, no third parties like platforms and service providers can decrypt messages, dramatically reducing attack surface.
End-to-end encryption (E2EE) is a method of implementing a secure communication system where only the sender and intended recipient can read the messages. No one else, including the system provider, telecom providers, Internet providers or malicious actors, can access the cryptographic keys needed to read or send messages.
End-to-end encryption prevents data from being read or secretly modified, except by the sender and intended recipients. In many applications, messages are relayed from a sender to some recipients by a service provider. In an E2EE-enabled service, messages are encrypted on the sender's device such that no third party, including the service provider, has the means to decrypt them. The recipients retrieve encrypted messages and decrypt them independently on their own devices. Since third parties cannot decrypt the data being communicated or stored, services with E2EE are better at protecting user data from data breaches and espionage.
Computer security experts, digital freedom organizations, and human rights activists advocate for the use of E2EE due to its security and privacy benefits, including its ability to resist mass surveillance. Popular messaging apps like WhatsApp, iMessage, Facebook Messenger, and Signal use end-to-end encryption for chat messages, with some also supporting E2EE of voice and video calls. As of May 2025, WhatsApp is the most widely used E2EE messaging service, with over 3 billion users. Meanwhile, Signal with an estimated 70 million users, is regarded as the current gold standard in secure messaging by cryptographers, protestors, and journalists.
Since end-to-end encrypted services cannot offer decrypted messages in response to government requests, the proliferation of E2EE has been met with controversy. Around the world, governments, law enforcement agencies, and child protection groups have expressed concerns over its impact on criminal investigations. As of 2025, some governments have successfully passed legislation targeting E2EE, such as Australia's Telecommunications and Other Legislation Amendment Act (2018) and the Online Safety Act (2023) in the UK. Other attempts at restricting E2EE include the EARN IT Act in the US and the Child Sexual Abuse Regulation in the EU. Nevertheless, some government bodies such as the UK's Information Commissioner's Office and the US's Cybersecurity and Infrastructure Security Agency (CISA) have argued for the use of E2EE, with Jeff Greene of the CISA advising that "encryption is your friend" following the discovery of the Salt Typhoon espionage campaign in 2024.
Definitions
End-to-end encryption
End-to-end encryption is a means of ensuring the security of communications in applications like secure messaging. Under E2EE, messages are encrypted on the sender's device such that they can be decoded only by the final recipient's device. In many non-E2EE messaging systems, including email and many chat platforms, messages pass through intermediaries and are stored by a third party service provider, from which they are retrieved by the recipient. Even if messages are encrypted, they are only encrypted 'in transit', and are thus accessible by the service provider. Server-side disk encryption is also distinct from E2EE because it does not prevent the service provider from viewing the information, as they have the encryption keys and can simply decrypt it.
The term "end-to-end encryption" originally only meant that the communication is never decrypted during its transport from the sender to the receiver. For example, around 2003, E2EE was proposed as an additional layer of encryption for GSM or TETRA, in addition to the existing radio encryption protecting the communication between the mobile device and the network infrastructure. This has been standardized by SFPG for TETRA. Note that in TETRA, the keys are generated by a Key Management Centre (KMC) or a Key Management Facility (KMF), not by the communicating users.
Later, around 2014, the meaning of "end-to-end encryption" started to evolve when WhatsApp encrypted a portion of its network, requiring that not only the communication stays encrypted during transport, but also that the provider of the communication service is not able to decrypt the communications—maliciously or when requested by law enforcement agencies. Similarly, messages must be undecryptable in transit by attackers through man-in-the-middle attacks. This new meaning is now the widely accepted one.
Motivations
End-to-end encryption
The lack of end-to-end encryption can allow service providers to easily provide search and other features, or to scan for illegal and unacceptable content. However, it also means that content can be read by anyone who has access to the data stored by the service provider, by design or via a backdoor. This can be a concern in many cases where privacy is important, such as in governmental and military communications, financial transactions, and when sensitive information such as health and biometric data are sent. If this content were shared without E2EE, a malicious actor or adversarial government could obtain it through unauthorized access or subpoenas targeted at the service provider.
E2EE alone does not guarantee privacy or security. For example, the data may be held unencrypted on the user's own device or accessed through their own app if their credentials are compromised.
Modern implementations
Messaging
As of 2025, messaging apps like Signal and WhatsApp are designed to exclusively use end-to-end encryption. Both Signal and WhatsApp use the Signal Protocol. Other messaging apps and protocols that support end-to-end encryption include Facebook Messenger, iMessage, Telegram, Matrix, and Keybase. Although Telegram supports end-to-end encryption, it has been criticized for not enabling it by default, instead supporting E2EE through opt-in "secret chats". As of 2020, Telegram did not support E2EE for group chats and no E2EE on its desktop clients.
In 2022, after controversy over the use of Facebook Messenger messages in an abortion lawsuit in Nebraska, Facebook added support for end-to-end encryption in the Messenger app. Writing for Wired, technologist Albert Fox Cahn criticized Messenger's approach to end-to-end encryption, which required the user to opt into E2EE for each conversation and split the message thread into two chats which were easy for users to confuse. In December 2023, Facebook announced plans to enable end-to-end encryption by default despite pressure from British law enforcement agencies.
As of 2016, many server-based communications systems did not include end-to-end encryption. These systems can only guarantee the protection of communications between clients and servers, meaning that users have to trust the third parties who are running the servers with the sensitive content. End-to-end encryption is regarded as safer because it reduces the number of parties who might be able to interfere or break the encryption. In the case of instant messaging, users may use a third-party client or plugin to implement an end-to-end encryption scheme over an otherwise non-E2EE protocol.
Audio and video conferencing
Signal and WhatsApp use end-to-end encryption for audio and video calls. Since 2020, Signal has also supported end-to-encrypted video calls. In 2024, Discord added end-to-end encryption for audio and video calls, voice channels, and certain live streams. However, they had no plans to implement E2EE for messages.
In 2020, after acquiring Keybase, Zoom announced end-to-end encryption would be limited to paid accounts. Following criticism from human rights advocates, Zoom extended the feature to all users with accounts. In 2021, Zoom settled an $85M class action lawsuit over past misrepresentation about end-to-end encryption. The FTC confirmed Zoom previously retained access to meeting keys.
Other uses
Some encrypted backup and file sharing services provide client-side encryption. Nextcloud and MEGA, offer end-to-end encryption of shared files.
The term "end-to-end encryption" is sometimes incorrectly used to describe client-side encryption.
Some non-E2EE systems, such as Lavabit and Hushmail, have described themselves as offering "end-to-end" encryption when they did not.
Law enforcement and regulation
End-to-end encryption
Unsealed 2021 subpoena addressed to Signal Messenger LLC requesting records for a redacted Signal profile name.
In 2022, Facebook Messenger came under scrutiny because the messages between a mother and daughter in Nebraska were used to seek criminal charges in an abortion-related case against both of them. The daughter told the police that she had a miscarriage and tried to search for the date of her miscarriage in her Messenger app. Police suspected there could be more information within the messages and obtained and served a warrant against Facebook to gain access. The messages allegedly mentioned the mother obtaining abortion pills for her daughter and then burning the evidence.
While E2EE can offer privacy benefits that make it desirable in consumer-grade services, many businesses have to balance these benefits with their regulatory requirements. For example, many organizations are subject to mandates that require them to be able to decrypt any communication between their employees or between their employees and third parties. This might be needed for archival purposes, for inspection by Data Loss Prevention (DLP) systems, for litigation-related eDiscovery or for detection of malware and other threats in the data streams. For this reason, some enterprise-focused communications and information protection systems might implement encryption in a way that ensures all transmissions are encrypted with the encryption being terminated at their internal systems (on-premises or cloud-based) so they can have access to the information for inspection and processing.
Challenges
Man-in-the-middle attacks
End-to-end encryption ensures that data is transferred securely between endpoints. But, rather than try to break the encryption, an eavesdropper may impersonate a message recipient (during key exchange or by substituting their public key for the recipient's), so that messages are encrypted with a key known to the attacker. After decrypting the message, the snoop can then encrypt it with a key that they share with the actual recipient, or their public key in case of asymmetric systems, and send the message on again to avoid detection. This is known as a man-in-the-middle attack (MITM).
Authentication
"Verify safety number" screen on Signal Android 7.43.1
Most end-to-end encryption protocols include some form of endpoint authentication specifically to prevent MITM attacks. For example, one could rely on certification authorities or a web of trust. An alternative technique is to generate cryptographic hashes (fingerprints) based on the communicating users’ public keys or shared secret keys. The parties compare their fingerprints using an outside (out-of-band) communication channel that guarantees integrity and authenticity of communication (but not necessarily secrecy), before starting their conversation. If the fingerprints match, there is, in theory, no man in the middle.
When displayed for human inspection, fingerprints usually use some form of binary-to-text encoding. These strings are then formatted into groups of characters for readability. Some clients instead display a natural language representation of the fingerprint. As the approach consists of a one-to-one mapping between fingerprint blocks and words, there is no loss in entropy. The protocol may choose to display words in the user's native (system) language. This can, however, make cross-language comparisons prone to errors.
In order to improve localization, some protocols have chosen to display fingerprints as base 10 strings instead of more error prone hexadecimal or natural language strings.
Modern messaging applications can also display fingerprints as QR codes that users can scan off each other's devices.
Endpoint security
The end-to-end encryption paradigm does not directly address risks at the communications endpoints themselves. Each user's computer can still be hacked to steal their cryptographic key (to create a MITM attack) or simply read the recipients’ decrypted messages both in real time and from log files. Even the most perfectly encrypted communication pipe is only as secure as the mailbox on the other end. Major attempts to increase endpoint security have been to isolate key generation, storage and cryptographic operations to a smart card such as Google's Project Vault. However, since plaintext input and output are still visible to the host system, malware can monitor conversations in real time. A more robust approach is to isolate all sensitive data to a fully air gapped computer. However, as Bruce Schneier points out, Stuxnet developed by US and Israel successfully jumped air gap and reached Natanz nuclear plant's network in Iran. To deal with key exfiltration with malware, one approach is to split the Trusted Computing Base behind two unidirectionally connected computers that prevent either insertion of malware, or exfiltration of sensitive data with inserted malware.
Backdoors
A backdoor is usually a secret method of bypassing normal authentication or encryption in a computer system, a product, an embedded device, etc. Companies may also willingly or unwillingly introduce backdoors to their software that help subvert key negotiation or bypass encryption altogether. In 2013, information leaked by Edward Snowden showed that Skype had a backdoor which allowed Microsoft to hand over their users' messages to the NSA despite the fact that those messages were officially end-to-end encrypted.
Following terrorist attacks in San Bernardino in 2015 and Pensacola in 2019, the FBI requested backdoors to Apple's iPhone software. The company, however, refused to create a backdoor for the government, citing concern that such a tool could pose risk for its consumers’ privacy.