End-to-End Encryption (E2EE)

End-to-end encryption (E2EE) is a communication method in which data is encrypted on the sender's device and decrypted only on the recipient's device. Servers in between only handle ciphertext and cannot read the content.

Why it matters

With ordinary HTTPS the provider can see your messages after decrypting them. With E2EE the provider cannot, which protects against server breaches, insider access and some legal demands. The trade-offs are that server-side search and recovery are harder, and metadata such as who messaged whom may still be visible.

Well-known messengers use protocols based on the Signal protocol, and some email and file-sharing services offer similar designs.

Example

In an E2EE messaging app, each user has a key pair, and messages are encrypted with keys only the two phones hold. If the server is hacked, the attacker obtains unreadable data.

Common mistakes

• Assuming a lock icon or HTTPS means end-to-end encryption.
• Ignoring unencrypted cloud backups of chats.
• Not verifying contact keys, leaving room for impersonation.

Related

• Encryption
• Asymmetric encryption
• Man-in-the-middle
• SSL/TLS

यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.