Is Discord End-to-end Encrypted Now? What Changed, What Didn’t

Discord calls across the app can be end-to-end encrypted, though text messages still are not. So, voice and video calls in DMs, group DMs, voice channels, and Go Live live streams are well-protected with a new protocol called the DAVE protocol. How to test whether encryption works? You’ll see a green lock icon in the call details when E2EE (end-to-end encrypted) is active, and you can compare verification codes with others to confirm the connection.
In this article, we’ll walk through what’s protected, how to verify your calls, where E2EE doesn’t apply, and the simple settings that add an extra layer of security. We’ll also show how VeePN helps with network-level privacy.

Oliver Bennett

Oct 10, 2025

7 min read

Get the week’s best marketing content

Is Discord end-to-end encrypted? The short answer

Yes for calls, no for text. Here’s the snapshot you can share with a friend:

Calls. One-to-one, small groups, and server voice channels can be end-encrypted when everyone’s client supports DAVE. You’ll see the green lock icon in call details. Discord calls fall back if an old client joins. Default will be E2EE on all supported surfaces.
Text. Direct messages and private messages are NOT end-to-end encrypted. Discord says this lets it apply safety tooling and meet legal requests, which keeps abuse controls working on the platform.
Streams. Go Live video is covered, but public stream previews are not. Stage channels remain outside E2EE.

Next up is how the process works under the hood and how you can confirm a secure call.

End-to-end encryption on Discord: how calls are protected

Discord’s DAVE uses MLS, a group key exchange standard, to protect media for each specific group of participants. That means fresh encryption keys per call and per epoch when people join or leave, so leavers can’t decrypt future media and newcomers can’t read the past. Discord.com

Verification codes and privacy codes. In the call’s Privacy tab, you’ll find a Voice Privacy Code. Compare it out-of-band to ensure,
Persistent verification keys. You can enable persistent verification keys so trusted contacts see you as verified across multiple calls from the same device. This is optional and stored locally per device.
Signature keys and identity. DAVE uses ECDSA signature keys for identity and MLS for media key updates. Discord notes Trail of Bits reviewed both the design and the implementation of the protocol and libraries.

This design keeps Discord’s audio and video content locked end-to-end while still letting the app route packets efficiently. Think of it as modern technologies working together so you can connect and talk without giving up privacy.

Video calls and voice channels: what is covered and what is not

Rollout details matter. Here’s what you’ll actually see in the apps.

Where E2EE applies. One-to-one calls, group DMs, voice channels in public servers and private servers, plus Go Live video calls. You’ll verify status with the green lock icon.
Where E2EE does not apply. Stage channels are excluded. Stream previews aren’t encrypted. If any participant uses an unsupported client, the call may break E2EE temporarily. Feature support is expanding across desktop, phone, and web.
Timeline. Discord is standardizing E2EE across surfaces and says old clients will be blocked from joining calls when the switch fully completes. Keep your apps enabled for updates.

As you can see, this is not a checkbox. It’s an evolving implementation that gets stronger as users update their devices.

When to use persistent verification keys

This setting eases re-verification with people you talk to often.

Why might you turn it on? If you have recurring scrims or creator standups with the same group, persistent keys save time. Others can store that you’re verified on that device and see the badge next time you join a call.
The privacy trade-off. Opting in reveals you’re using the same device across multiple calls. That increases convenience but reduces deniability. Use it for trusted other users, not open communities.
How to enable it. Go to User Settings → Privacy & Safety → Encryption and toggle the option that lets contacts remember your device. The UI also lets you manage verified devices.

We’re not done yet. Let’s talk about expectations for private conversations.

Private conversations vs public spaces: realistic expectations

Discord protects the content of E2EE calls, but not everything you do on the app is private.

Private conversations in calls are protected by end-to-end encryption. However, messages are still server visible. This is a control decision to keep community safety tools working. User privacy improves for media; moderation remains for text.
Metadata exists. Your Discord account, devices, time, and services you use can still leave traces like connection logs. That is typical of any communications platform.
Practical tip. Treat text as shareable. Move sensitive talk to an E2EE call and compare verification codes. If you must write things down, keep it short and avoid sensitive details.

Bridge to security habits next: keeping your account tight is just as important as encryption.

Two-factor authentication and account safety

Good crypto won’t help if someone logs in as you:

Turn on two-factor authentication. Add TOTP or a hardware key so a stolen password can’t access your Discord account. This protects your ability to control settings like E2EE verification and device trust.
Watch for malware links. Attackers have abused Discord’s content hosting to deliver malware. Be picky about links and files, especially in big servers or random DMs. Use antivirus and keep browsers patched.
Verify codes in another app. EFF recomm ends sharing the Voice Privacy Code via a separate app like Signal so you can confirm the code without relying on the same channel you are trying to secure.

Almost there. Let’s make the verification steps concrete.

How to verify and control your E2EE call

Short steps you can follow on desktop or phone:

Start or join a call. In the lower left, open Voice or Video Details. Look for the green lock icon that says End-to-end encrypted. If you don’t see it, someone’s client isn’t updated.
Open the Privacy tab. Copy the Voice Privacy Code or per-person verification codes. Share them out-of-band with the participants and compare at the same time. Tap confirm if they match.
Optional: enable persistent verification keys. This stores trust for that device so verified labels carry into future calls with the same folks. You can clear it later in settings.

If any step fails, keep talking, but assume the encryption didn’t fully protect your media. Fix the mismatch and retry.

What changed in the past few months with DAVE

Discord rolled out DAVE widely and published whitepaper, code, and third-party reviews so outsiders can check the math and implementation. The company also clarified that voice and video are E2EE while text is not. These updates arrived over the past few months, with details on MLS, signature keys, and how the process rotates keys when people join or leave a specific group call.

What this means for creators, teams, and communities:

Streamers and hosts. Use E2EE video when you plan to screen-share sensitive dashboards. Remember that stream previews aren’t encrypted, and Stage channels are excluded.
Esports and scrims. Persistent verification makes sense for a specific group you meet often. It reduces setup friction across multiple calls.
Open servers. E2EE helps during staff syncs in public servers, but it won’t fix phishing or social engineering. Keep roles tight and stick to least-privilege norms.

Why a VPN still matters for Discord privacy

E2EE protects media contents inside Discord. A reliable VPN protects the road your traffic takes and the data around it. VeePN adds that extra layer outside the app so you can stay secure on any network.

AES-256 tunnel for every connection. VeePN wraps your traffic in strong encryption, shielding session cookies and data from café Wi-Fi snoops while you connect to calls or browse services.
Change your IP address to reduce tracking. The app swaps your IP with a shared one, which makes other users and ad systems less able to tie activity to you. It also helps cut ISP throttling when voice and video spikes.
Kill Switch. If the VPN connection glitches, Kill Switch blocks traffic so no plain messages or call setup leaks. That protects logins and keeps your privacy posture intact.
Breach Alert for early warnings. If the email tied to Discord appears in a leak, you get a heads-up so you can rotate passwords and re-secure 2FA before crooks try to reuse it.
No Logs VPN. VeePN doesn’t store your traffic log, which helps keep your footprint smaller across devices you use for Discord.

Try using VeePN without risks, as we offer a 30-day money-back guarantee.

FAQ

They are not publicly accessible to other users, but direct messages are not end-to-end encrypted, and therefore Discord is able to observe what is on its servers to implement safety mechanisms. To have a sensitive conversation, make an E2EE call and compare verification codes. Discover more in this article.

Calls can be end-to-end encrypted using the DAVE protocol, which locks audio and video content from any service provider. Text messages are not E2EE, so use E2EE calls for private conversations and keep two-factor authentication on. Discover more in this article.

Officials might demand server side data in case of legal obligation. As DMs are not E2EE, the material can be accessible via Discord. The difference in E2EE Discord calls is that the encryption keys remain with the participants and not the provider.

Discord says it uses automated and human systems to enforce rules, which requires access to non-E2EE text. The company cannot read the contents of end-to-end encrypted calls because only participants hold the key material. Discover more in this article.

Written by Oliver Bennett Oliver Bennett is a dedicated cyber security content writer with a knack for breaking down intricate cyber topics into accessible and actionable insights.