Zoom set to launch end-to-end encryption for all users next week

All Zoom users, free and paid, will be able to use the end-to-end encryption feature starting next week as the video conferencing company rolls out the first phase of a four-step security plan. The end-to-end encryption feature will be available both for those who join and those who host sessions with up to 200 participants as a technical preview, which means Zoom will seek feedback from users in the first 30 days of the feature's launch.

"End-to-end encryption is another stride toward making Zoom the most secure communications platform in the world. This phase of our E2EE offering provides the same security as existing end-to-end-encrypted messaging platforms, but with the video quality and scale that has made Zoom the communications solution of choice for hundreds of millions of people," Zoom CEO Eric Yuan said in a blog post.

Previously, the end-to-end encryption feature was only going to be made available for paid users but the assertion on privacy and security made the company extend the feature to all users.

Yuan noted that the end-to-end encryption feature has certain limitations when it comes to compatibility with other functions of Zoom. "Enabling this version of Zoom's E2EE in your meetings disables certain features, including joining before host, cloud recording, streaming, live transcription, Breakout Rooms, polling, 1:1 private chat, and meeting reactions," Yuan said. He added, however, that Zoom plans to roll out further improvements in 2021.

End-to-end encryption can be made mandatory by admins and they will be able to change that setting at the user, group or even entire account level. Users will see a green padlock on their screen if they are in an E2EE conversation.

Max Krohn, head of security Zoom wrote, “Zoom’s E2EE offering uses public-key cryptography. In short, the keys for each Zoom meeting are generated by participants’ machines, not by Zoom’s servers. Encrypted data relayed through Zoom’s servers is indecipherable by Zoom since Zoom’s servers do not have the necessary decryption key. This key management strategy is similar to that used by most end-to-end encrypted messaging platforms today.”