Rocket.Chat is secure by design. This document provides an overview of key security options to help you configure your workspace according to your data privacy requirements. Each section explains configuration details so you can safeguard your communications.
Authentication
Configure password policies and Two-factor authentication (2FA/MFA). To simplify identity management, enable secure single sign-on (SSO) with providers such as SAML, LDAP, OAuth, or OpenID.
End-to-end encryption
Enable end-to-end encryption (E2EE) to add an extra layer of security. This feature ensures that sensitive information is accessible only to authorized users.
ABAC
Configure Attribute-Based Access Control (ABAC) to define granular access policies based on attributes that align with your organization's security requirements.
FIPS Complaince
Secure your workspace with FIPS 140-3 compliance to ensure your cryptographic modules strictly align with federal information processing standards.
Devices and rate limiting
Manage devices that access your workspace remotely. Use rate limiter settings to control the number of requests your workspace can handle.
Secure push notifications and data sharing
Configure mobile push notifications and adjust privacy settings. To prevent data leaks, install the Data Loss Prevention (DLP) app, which restricts the sharing of sensitive information in channels.
Security and compliance resources
Security fixes and updates: Recently fixed vulnerabilities and the versions they affect.
End-to-end encryption specifications: Encryption algorithms and how they work.
Security features overview: Rocket.Chat security features and use cases.
Privacy policy and Terms of use: How Rocket.Chat processes personal data and the terms for using the service.
GDPR compliance: How Rocket.Chat meets GDPR requirements.
Company security policy: How Rocket.Chat manages security internally.
White hat hall of fame: Researchers who helped improve Rocket.Chat security.
To report a vulnerability or ask a security question, email security@rocket.chat.