---
title: "Security Guide"
slug: "secure-rocketchat"
description: "Learn how to secure Rocket Chat with zero-trust security, encrypted messaging, and compliance-ready features for mission-critical communications."
status: "update"
updated: 2026-10-20T20:28:50Z
published: 2026-10-20T20:28:50Z
canonical: "docs.rocket.chat/secure-rocketchat"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.rocket.chat/llms.txt
> Use this file to discover all available pages before exploring further.

# Security Guide

Rocket.Chat is secure by design. This document provides an overview of key security options to help you configure your workspace according to your data privacy requirements. Each section explains configuration details so you can safeguard your communications.

![](https://cdn.us.document360.io/6ae79a05-7252-45d0-96e8-8f375e07b1b2/Images/Documentation/fingerprint.svg)

#### Authentication

Configure [password policies](https://docs.rocket.chat/v1/docs/set-password-policy-and-history) and [Two-factor authentication (2FA/MFA)](https://docs.rocket.chat/v1/docs/two-factor-authentication-configuration). To simplify [identity management](https://docs.rocket.chat/v1/docs/authentication), enable secure single sign-on (SSO) with providers such as SAML, LDAP, OAuth, or OpenID.

![](https://cdn.us.document360.io/6ae79a05-7252-45d0-96e8-8f375e07b1b2/Images/Documentation/key.svg)

#### End-to-end encryption

Enable [end-to-end encryption (E2EE)](https://docs.rocket.chat/v1/docs/e2e-encryption) to add an extra layer of security. This feature ensures that sensitive information is accessible only to authorized users.

![](https://cdn.us.document360.io/6ae79a05-7252-45d0-96e8-8f375e07b1b2/Images/Documentation/abac.svg)

#### ABAC

Configure [Attribute-Based Access Control (ABAC)](https://docs.rocket.chat/docs/attribute-based-access-control-abac) to define granular access policies based on attributes that align with your organization's security requirements.

![](https://cdn.us.document360.io/6ae79a05-7252-45d0-96e8-8f375e07b1b2/Images/Documentation/fips-compliance.svg)

#### FIPS Complaince

Secure your workspace with [FIPS 140-3 compliance](https://docs.rocket.chat/docs/fips-compliance-guide) to ensure your cryptographic modules strictly align with federal information processing standards.

![](https://cdn.us.document360.io/6ae79a05-7252-45d0-96e8-8f375e07b1b2/Images/Documentation/[Local] devices.svg)

#### Devices and rate limiting

[Manage devices](https://docs.rocket.chat/v1/docs/device-management) that access your workspace remotely. Use [rate limiter settings](https://docs.rocket.chat/v1/docs/rate-limiter) to control the number of requests your workspace can handle.

![](https://cdn.us.document360.io/6ae79a05-7252-45d0-96e8-8f375e07b1b2/Images/Documentation/mobile-check.svg)

#### Secure push notifications and data sharing

Configure [mobile push notifications](https://docs.rocket.chat/v1/docs/push) and adjust privacy settings. To prevent data leaks, install the [Data Loss Prevention (DLP)](https://docs.rocket.chat/v1/docs/data-loss-prevention-dlp-app) app, which restricts the sharing of sensitive information in channels.

## Security and compliance resources

- [Security fixes and updates](/v1/docs/rocketchat-security-fixes-updates-and-advisories): Recently fixed vulnerabilities and the versions they affect.
- [End-to-end encryption specifications](/v1/docs/end-to-end-encryption-specifications): Encryption algorithms and how they work.
- [Security features overview](https://www.rocket.chat/enterprise/security-compliance): Rocket.Chat security features and use cases.
- [Privacy policy](/v1/docs/privacy-policy) and [Terms of use](/v1/docs/terms-of-use): How Rocket.Chat processes personal data and the terms for using the service.
- [GDPR compliance](https://docs.rocket.chat/docs/gdpr): How Rocket.Chat meets GDPR requirements.
- [Company security policy](https://rocketchat.atlassian.net/wiki/x/QAVqB): How Rocket.Chat manages security internally.
- [White hat hall of fame](https://rocketchat.atlassian.net/wiki/x/EoB5B): Researchers who helped improve Rocket.Chat security.

To report a vulnerability or ask a security question, email [security@rocket.chat](mailto:security@rocket.chat).