{% hint style="info" %} IMPORTANT: E2E encryption functionality is currently in beta and includes notable restrictions that workspace owners should carefully consider before activating this feature for production use as follow:
- E2E encrypted messages will not appear in search operations
- Bots or other ancillary systems interacting via webhooks or REST API will not be able to read E2EE encrypted messages
- File uploads are not encrypted
- Rocket.Chat enables users to reset their private E2EE key to avoid permanent loss of data during the beta period {% endhint %}
To be able to use E2E Encryption, your Rocket.Chat workspace administrator must turn on the End to End Encryption feature.
{% content-ref url="../../workspace-administration/settings/e2e-encryption.md" %} e2e-encryption.md {% endcontent-ref %}
{% hint style="success" %} With E2E enabled, users can create encrypted rooms and send encrypted messages. {% endhint %}
If E2E Encryption is enabled on your workspace, you see a banner notifying you to Save Your Encryption Password
- Click on the banner
- A modal is seen with Your password
- Copy and store the password securely. It will be needed when using Rocket.Chat on another device
- Confirm by clicking on I Saved My Password
To change your Encryption password,
- Click on your User Profile
- Navigate down to My Account
- Click Security to open up the security tab
- Open E2E Encryption
- Set the new encryption password
- Save changes
To create an End to End Encrypted room,
- Follow this guide create-a-new-channel.md to create a room and switch on Encrypted
To convert an existing room to an encrypted room, it must be a private room
- Open the desired room
- Click on the room info icon by the top right
- Click on Edit to edit the room information
- Toggle on Encrypted
- Save to commit the changes
How can I tell if the room is encrypted?
If the room is using End to End Encryption you should see a key icon by the channel name.
How can I tell if a message is encrypted?
You will see a key icon by the username.