End-to-end encryption

↩ home

End-to-end encryption encrypts your messages, files, and calls, so the server - whether it is a malicious operator, or someone coercing them, or someone breaking into the server - cannot see them.

OMEMO is the main end-to-end encryption protocol used in XMPP (replacing the older OTR). It uses the same Double Ratchet Algorithm as Signal, Matrix, and (allegedly) WhatsApp. All up-to-date XMPP clients support OMEMO.

key, fingerprint…

Each device has a key assigned to it. While people usually trust keys blindly, the ideal thing to do (especially in sensitive situations) is to verify fingerprints by scanning each others' QR codes.

OMEMO is only enabled in direct messages and private group chats.

"Message could not be decrypted" errors - ensure mutual presence subscription, send a message from each of your clients

PFS, and preserving history