๐Ÿ“ฑStalecollected in 49m

Discord implements end-to-end encryption for all calls

Discord implements end-to-end encryption for all calls
PostLinkedIn
๐Ÿ“ฑRead original on Engadget

๐Ÿ’กPrivacy-first communication is becoming the standard. Learn how major platforms are securing real-time data.

โšก 30-Second TL;DR

What Changed

Full end-to-end encryption applied to all voice and video calls

Why It Matters

This update sets a new baseline for privacy in social communication apps. It may influence how developers integrate secure real-time communication protocols in future AI-driven social tools.

What To Do Next

Review your application's security architecture to ensure E2EE is implemented if you are building real-time communication features.

Who should care:Developers & AI Engineers

Key Points

  • โ€ขFull end-to-end encryption applied to all voice and video calls
  • โ€ขEnhanced privacy standards for millions of daily active users
  • โ€ขSecurity upgrade aligns with modern industry standards for communication apps

๐Ÿง  Deep Insight

Web-grounded analysis with 18 cited sources.

๐Ÿ”‘ Enhanced Key Takeaways

  • โ€ขDiscord's end-to-end encryption for calls is powered by its custom, open-source protocol named DAVE (Discord Audio & Video Encryption), which was developed with assistance and auditing from cybersecurity firm Trail of Bits.
  • โ€ขThe full migration to E2EE for voice and video calls was completed in early March 2026, making it a mandatory requirement for all supported Discord clients to adopt the DAVE protocol to participate in calls.
  • โ€ขWhile E2EE is automatically enabled by default for direct messages (DMs), group DMs, voice channels, and Go Live streams, Stage channels remain an exception and are not end-to-end encrypted due to their design for large public broadcasts rather than private conversations.
  • โ€ขDiscord currently has no plans to extend end-to-end encryption to text messages, citing significant engineering challenges as many existing features were built on the assumption of non-encrypted text.
  • โ€ขThe implementation of DAVE was designed to operate seamlessly across a diverse range of platforms, including desktop, mobile, web browsers, PlayStation, Xbox, and Discord's Social SDK, making it one of the internet's most platform-diverse E2EE voice and video implementations.
๐Ÿ“Š Competitor Analysisโ–ธ Show
PlatformE2EE for Voice/Video CallsDefault/Opt-inProtocol/Notes
DiscordYes (DMs, Group DMs, Voice Channels, Go Live)DefaultDAVE (Discord Audio & Video Encryption), open-source, audited. Excludes Stage Channels.
SignalYesDefaultSignal Protocol, strong privacy, no user data collection.
WhatsAppYes (up to 8 participants)DefaultSignal Protocol, owned by Meta.
ZoomYesOpt-in, often inconsistentAES-256 encryption, TLS 1.2, SRTP/DTLS.
Google MeetYesOpt-in, disabled by defaultE2EE available but not standard.
Microsoft TeamsYes (1:1 calls), encrypted media streams (group)Optional E2EE for 1:1 callsEncryption in transit and at rest.
FaceTimeYes (Apple devices only)DefaultE2EE for Apple ecosystem.
WireYesExplicit user activationDouble Ratchet and MLS protocols, backend closed-source but audited.
Element (Matrix)Yes (per room)Manual activation for callsOpen Matrix protocol, E2EE by default for DMs.

๐Ÿ› ๏ธ Technical Deep Dive

  • Discord's end-to-end encryption for audio and video is implemented using its proprietary, open-source protocol called DAVE (Discord Audio & Video Encryption).
  • DAVE leverages WebRTC encoded transforms to encrypt each individual audio and video frame.
  • A per-sender symmetric key is used for the encryption of media frames.
  • The Messaging Layer Security (MLS) protocol is utilized for scalable group key exchanges, ensuring efficient key management in multi-participant calls.
  • Ephemeral identity keys are employed to further enhance privacy and minimize disruptions when participants join or leave sessions.
  • For web browser support, Discord compiled its C++ codebase to WebAssembly, enabling the same battle-tested DAVE implementation across platforms.
  • The WebRTC Encoded Transform API was a crucial choice for DAVE on web browsers, allowing encryption and decryption within the WebRTC pipeline.
  • Dedicated Web Workers are used in the browser environment to handle the encryption and decryption of media streams before they are processed by the browser's encoder or decoder.
  • The DAVE protocol underwent independent auditing by the cybersecurity firm Trail of Bits.

๐Ÿ”ฎ Future ImplicationsAI analysis grounded in cited sources

Increased user trust and adoption among privacy-conscious users.
The implementation of default E2EE for calls addresses a significant privacy concern, aligning Discord with industry best practices and potentially attracting users prioritizing secure communication.
Potential for further regulatory and user scrutiny regarding text message encryption.
Discord's explicit statement about having no current plans to extend E2EE to text messages may draw attention from privacy advocates and regulators, given the comprehensive E2EE for calls.
Strengthened competitive position against other communication platforms.
By offering default E2EE for calls across its highly diverse platform ecosystem, Discord enhances its security posture, potentially gaining an edge over competitors with opt-in or more limited E2EE offerings for calls.

โณ Timeline

2020-04
Mozilla Foundation report highlights Discord's security vulnerabilities, which Discord promptly addresses.
2023-08
Discord begins experimenting with end-to-end encryption (E2EE) for voice and video communications.
2024-09
Discord introduces DAVE (Discord Audio & Video Encryption), an open and audited E2EE protocol for audio and video.
2025-09
DAVE support is extended to all remaining Discord platforms, including web browsers, gaming consoles, bots/apps, and the Social SDK.
2025-10
A data breach occurs through a third-party customer service provider, exposing government ID photos and other sensitive data of approximately 70,000 Discord users.
2026-03
Discord completes the full migration to E2EE for all voice and video calls (excluding Stage channels), making DAVE support mandatory for clients.
๐Ÿ“ฐ

Weekly AI Recap

Read this week's curated digest of top AI events โ†’

๐Ÿ‘‰Related Updates

AI-curated news aggregator. All content rights belong to original publishers.
Original source: Engadget โ†—