SourceEngadget•Stalecollected in 49m
Discord implements end-to-end encryption for all calls
Privacy-first communication is becoming the standard. Learn how major platforms are securing real-time data.
30-Second TL;DR
What Changed
Full end-to-end encryption applied to all voice and video calls
Why It Matters
This update sets a new baseline for privacy in social communication apps. It may influence how developers integrate secure real-time communication protocols in future AI-driven social tools.
What To Do Next
Review your application's security architecture to ensure E2EE is implemented if you are building real-time communication features.
Who should care:Developers & AI Engineers
Key Points
- •Full end-to-end encryption applied to all voice and video calls
- •Enhanced privacy standards for millions of daily active users
- •Security upgrade aligns with modern industry standards for communication apps
Deep Insight
Background and context from public sources — not the original article. 18 sources cited.
Enhanced Key Takeaways
- •Discord's end-to-end encryption for calls is powered by its custom, open-source protocol named DAVE (Discord Audio & Video Encryption), which was developed with assistance and auditing from cybersecurity firm Trail of Bits.
- •The full migration to E2EE for voice and video calls was completed in early March 2026, making it a mandatory requirement for all supported Discord clients to adopt the DAVE protocol to participate in calls.
- •While E2EE is automatically enabled by default for direct messages (DMs), group DMs, voice channels, and Go Live streams, Stage channels remain an exception and are not end-to-end encrypted due to their design for large public broadcasts rather than private conversations.
- •Discord currently has no plans to extend end-to-end encryption to text messages, citing significant engineering challenges as many existing features were built on the assumption of non-encrypted text.
- •The implementation of DAVE was designed to operate seamlessly across a diverse range of platforms, including desktop, mobile, web browsers, PlayStation, Xbox, and Discord's Social SDK, making it one of the internet's most platform-diverse E2EE voice and video implementations.
Competitor Analysis
Discord
- E2EE for Voice/Video Calls
- Yes (DMs, Group DMs, Voice Channels, Go Live)
- Default/Opt-in
- Default
- Protocol/Notes
- DAVE (Discord Audio & Video Encryption), open-source, audited. Excludes Stage Channels.
Signal
- E2EE for Voice/Video Calls
- Yes
- Default/Opt-in
- Default
- Protocol/Notes
- Signal Protocol, strong privacy, no user data collection.
WhatsApp
- E2EE for Voice/Video Calls
- Yes (up to 8 participants)
- Default/Opt-in
- Default
- Protocol/Notes
- Signal Protocol, owned by Meta.
Zoom
- E2EE for Voice/Video Calls
- Yes
- Default/Opt-in
- Opt-in, often inconsistent
- Protocol/Notes
- AES-256 encryption, TLS 1.2, SRTP/DTLS.
Google Meet
- E2EE for Voice/Video Calls
- Yes
- Default/Opt-in
- Opt-in, disabled by default
- Protocol/Notes
- E2EE available but not standard.
Microsoft Teams
- E2EE for Voice/Video Calls
- Yes (1:1 calls), encrypted media streams (group)
- Default/Opt-in
- Optional E2EE for 1:1 calls
- Protocol/Notes
- Encryption in transit and at rest.
FaceTime
- E2EE for Voice/Video Calls
- Yes (Apple devices only)
- Default/Opt-in
- Default
- Protocol/Notes
- E2EE for Apple ecosystem.
Wire
- E2EE for Voice/Video Calls
- Yes
- Default/Opt-in
- Explicit user activation
- Protocol/Notes
- Double Ratchet and MLS protocols, backend closed-source but audited.
Element (Matrix)
- E2EE for Voice/Video Calls
- Yes (per room)
- Default/Opt-in
- Manual activation for calls
- Protocol/Notes
- Open Matrix protocol, E2EE by default for DMs.
| Platform | E2EE for Voice/Video Calls | Default/Opt-in | Protocol/Notes |
|---|---|---|---|
| Discord | Yes (DMs, Group DMs, Voice Channels, Go Live) | Default | DAVE (Discord Audio & Video Encryption), open-source, audited. Excludes Stage Channels. |
| Signal | Yes | Default | Signal Protocol, strong privacy, no user data collection. |
| Yes (up to 8 participants) | Default | Signal Protocol, owned by Meta. | |
| Zoom | Yes | Opt-in, often inconsistent | AES-256 encryption, TLS 1.2, SRTP/DTLS. |
| Google Meet | Yes | Opt-in, disabled by default | E2EE available but not standard. |
| Microsoft Teams | Yes (1:1 calls), encrypted media streams (group) | Optional E2EE for 1:1 calls | Encryption in transit and at rest. |
| FaceTime | Yes (Apple devices only) | Default | E2EE for Apple ecosystem. |
| Wire | Yes | Explicit user activation | Double Ratchet and MLS protocols, backend closed-source but audited. |
| Element (Matrix) | Yes (per room) | Manual activation for calls | Open Matrix protocol, E2EE by default for DMs. |
Technical Deep Dive
- Discord's end-to-end encryption for audio and video is implemented using its proprietary, open-source protocol called DAVE (Discord Audio & Video Encryption).
- DAVE leverages WebRTC encoded transforms to encrypt each individual audio and video frame.
- A per-sender symmetric key is used for the encryption of media frames.
- The Messaging Layer Security (MLS) protocol is utilized for scalable group key exchanges, ensuring efficient key management in multi-participant calls.
- Ephemeral identity keys are employed to further enhance privacy and minimize disruptions when participants join or leave sessions.
- For web browser support, Discord compiled its C++ codebase to WebAssembly, enabling the same battle-tested DAVE implementation across platforms.
- The WebRTC Encoded Transform API was a crucial choice for DAVE on web browsers, allowing encryption and decryption within the WebRTC pipeline.
- Dedicated Web Workers are used in the browser environment to handle the encryption and decryption of media streams before they are processed by the browser's encoder or decoder.
- The DAVE protocol underwent independent auditing by the cybersecurity firm Trail of Bits.
Future ImplicationsAI analysis grounded in cited sources
Increased user trust and adoption among privacy-conscious users.
The implementation of default E2EE for calls addresses a significant privacy concern, aligning Discord with industry best practices and potentially attracting users prioritizing secure communication.
Potential for further regulatory and user scrutiny regarding text message encryption.
Discord's explicit statement about having no current plans to extend E2EE to text messages may draw attention from privacy advocates and regulators, given the comprehensive E2EE for calls.
Strengthened competitive position against other communication platforms.
By offering default E2EE for calls across its highly diverse platform ecosystem, Discord enhances its security posture, potentially gaining an edge over competitors with opt-in or more limited E2EE offerings for calls.
Timeline
2020-04
Mozilla Foundation report highlights Discord's security vulnerabilities, which Discord promptly addresses.
2023-08
Discord begins experimenting with end-to-end encryption (E2EE) for voice and video communications.
2024-09
Discord introduces DAVE (Discord Audio & Video Encryption), an open and audited E2EE protocol for audio and video.
2025-09
DAVE support is extended to all remaining Discord platforms, including web browsers, gaming consoles, bots/apps, and the Social SDK.
2025-10
A data breach occurs through a third-party customer service provider, exposing government ID photos and other sensitive data of approximately 70,000 Discord users.
2026-03
Discord completes the full migration to E2EE for all voice and video calls (excluding Stage channels), making DAVE support mandatory for clients.
- 2020-04Mozilla Foundation report highlights Discord's security vulnerabilities, which Discord promptly addresses.
- 2023-08Discord begins experimenting with end-to-end encryption (E2EE) for voice and video communications.
- 2024-09Discord introduces DAVE (Discord Audio & Video Encryption), an open and audited E2EE protocol for audio and video.
- 2025-09DAVE support is extended to all remaining Discord platforms, including web browsers, gaming consoles, bots/apps, and the Social SDK.
- 2025-10A data breach occurs through a third-party customer service provider, exposing government ID photos and other sensitive data of approximately 70,000 Discord users.
- 2026-03Discord completes the full migration to E2EE for all voice and video calls (excluding Stage channels), making DAVE support mandatory for clients.
Sources (18)
Factual claims are grounded in the sources below. Forward-looking analysis is AI-generated interpretation.
1lowyat.netvertexaisearch.cloud.google.com2discord.comvertexaisearch.cloud.google.com3bleepingcomputer.comvertexaisearch.cloud.google.com4thenextweb.comvertexaisearch.cloud.google.com5discord.comvertexaisearch.cloud.google.com6discord.comvertexaisearch.cloud.google.com7helpnetsecurity.comvertexaisearch.cloud.google.com8shacknews.comvertexaisearch.cloud.google.com9pcgamer.comvertexaisearch.cloud.google.com10blocksurvey.iovertexaisearch.cloud.google.com11alibaba.comvertexaisearch.cloud.google.com12trueconf.comvertexaisearch.cloud.google.com13forbes.comvertexaisearch.cloud.google.com14getstream.iovertexaisearch.cloud.google.com15nationalcioreview.comvertexaisearch.cloud.google.com16discord.comvertexaisearch.cloud.google.com17eff.orgvertexaisearch.cloud.google.com18cnet.comvertexaisearch.cloud.google.com
Weekly AI Recap
Read this week's curated digest of top AI events →
Related Updates
AI-curated news aggregator. All content rights belong to original publishers.
Original source: Engadget ↗
This is a summary, not the original. Read the source, or get the weekly briefing.
The weekly digest
One email a week. Unsubscribe anytime.