How the Encryption Rollout Works
Discord has enabled end to end encryption for all voice and video calls across its platform, covering direct messages, group calls, voice channels, and Go Live streams. The company completed the technical rollout in March and is now formally announcing the change after extensive testing. The encryption is applied by default with no opt-in required, and Discord is actively removing client code that allowed unencrypted fallback connections.
To achieve this, Discord extended its open source encryption protocol DAVE to all supported clients including desktop, mobile, web browsers, PlayStation, Xbox, and Discord SDKs. The protocol was first introduced in September 2024 and was developed with auditing assistance from Trail of Bits. DAVE uses WebRTC encoded transforms and Messaging Layer Security for scalable group key exchanges, along with ephemeral identity keys to maintain privacy while minimizing latency when participants join or leave calls. One notable challenge was compatibility with Firefox, which Discord engineers resolved by working directly with Mozilla instead of limiting browser support.
Impact and Scope
The encryption covers the vast majority of Discord’s voice and video communications, which serve an estimated 690 million registered users and over 200 million monthly active users worldwide. The only exception is Stage channels, which Discord considers large public broadcasts rather than private conversations. Discord has stated there are currently no plans to extend end to end encryption to text based communications, citing major engineering challenges since text features were built from the ground up around non encrypted messaging assumptions.
For automotive cybersecurity professionals, this development is relevant because Discord is widely used by automotive security researchers, bug bounty hunters, and industry communities for real-time collaboration and secure communications when discussing vulnerabilities, exploit research, and security findings. The encryption upgrade ensures that sensitive technical discussions and vulnerability disclosures remain confidential during voice and video calls on the platform.
Source: BleepingComputer
