E2E Encryption

End-to-end encryption (E2EE) is a system of communication where only the communicating users can read the messages. Rocket.Chat uses this to prevent potential eavesdroppers.

IMPORTANT: E2E encryption functionality is currently in beta and includes notable restrictions that workspace owners should carefully consider before activating this feature for production use, as follows:

• E2E encrypted messages will not appear in search operations

• Bots or other ancillary systems interacting via webhooks or REST API will not be able to read E2EE encrypted messages

• File uploads are not encrypted

• Rocket.Chat enables users to reset their private E2EE key to avoid permanent data loss during the beta period.

To access this setting, go to Administration > Workspace > Settings > E2E Encryption.

• Enabled: When set to true, users can create encrypted rooms, change rooms, and set direct messages to be encrypted.

• Unencrypted messages in encrypted rooms: Enable this option to allow plain text messages to be sent in encrypted rooms. These messages will not be encrypted.

• Enable encryption for Direct Rooms by default: When set to true, direct rooms will be encrypted by default.

• Enable encryption for Private Rooms by default: When enabled, private rooms will be encrypted by default.

Refer to the following guide to learn how to use the E2E feature:

End-to-End Encryption User Guide