There's more interest in secure and private online communication than ever. One tool used by many modern communication services is end-to-end encryption.
What makes end-to-end encryption unique is that whatever you're sending is encrypted on your device and travels in encrypted form all the way to its destination. It's only decrypted there so it can be read by the recipient.
End-to-end encryption, explained
The best way to understand end-to-end encryption is in contrast to a more traditional system called encryption-in-transit. Typically, if a service uses encryption, it will be encrypted on your device and sent to the server. There, it is decrypted for processing, then re-encrypted and sent on to its final destination. The data is encrypted anytime it's in transit, but decryptedwhen it's "at rest." This protects the information through the most critical part of the trip — in transit — when it's often most vulnerable to hackers, interception, and theft.
In contrast, end-to-end encryption is the act of applying encryption to the data on your device and not decryptingit until it reaches the destination. Even the service that is sending the data can't see the content of your message when it passes through the server.
This is important because end-to-end encryption can give you the confidence that your communication is safe from prying eyes. In addition to simple two-way text chats, you might want to ensure that financial transactions and business communication use end-to-end encryption.
Advantages of end-to-end encryption
End-to-end encryption has some obvious advantages over "cleartext" (when messages or data are sent without any encryption at all) and encryption-in-transit. It's protected every step of the way, for one example.
When an app uses encryption-in-transit, that means the service you're using owns the key to encrypt and decrypt the message at the server. That provides a point of vulnerability and a vector for hackers or malicious actors to intercept your information before it travels to its destination.
Advertisem*nt
Disadvantages of end-to-end encryption
But end-to-end encryption isn't the perfect solution to every kind of communication need. If an app's communication is fully encrypted, that can prevent the app from offering additional features like contextual services based on the content of the message, or the ability to automatically generate calendar invites, message history, and other additional features. Simply put, the data is a black box to everyone except the sender and receiver, which might not always be desirable.
The security that end-to-end privacy offers might be limited if a third party gets physical access to the device at either end of the transmission — not only can they read existing messages, but also send new ones. That's why it's critical to use passwords, passcodes or biometrics to protect access to your device.
While end-to-end encryption can prevent anyone (including, in general, the government and law enforcement) from reading the content of your messages, it doesn't hide or encrypt the metadata. That means it's possible to determine who you sent messages to, and when, even if the content is encrypted.
Advertisem*nt
Apps that use end-to-end encryption
If you're looking to get started with end-to-end encryption, here are some apps and services that offer it:
- Signal
Thomas Trutschel/Getty Images - Telegram
- Threema
- Viber
- Facebook Messenger's "Secret Conversations"
You can get end-to-end encryption with email, as well. Here are a few apps that feature end-to-end encryption, though be forewarned that configuring the encryption is not straightforward, relies on a fairly deep understanding of how public and private keys work, and often requires both users using the same mail app to get the benefits of end-to-end encryption. Bottom line: Using encrypted email requires a substantial investment, much more so than messaging apps.
Freelance Writer
Dave Johnson is a technology journalist who writes about consumer tech and how the industry is transforming the speculative world of science fiction into modern-day real life. Dave grew up in New Jersey before entering the Air Force to operate satellites, teach space operations, and do space launch planning. He then spent eight years as a content lead on the Windows team at Microsoft. As a photographer, Dave has photographed wolves in their natural environment; he's also a scuba instructor and co-host of several podcasts. Dave is the author of more than two dozen books and has contributed to many sites and publications including CNET, Forbes, PC World, How To Geek, and Insider.
