Every call on our new voice and video system will be end-to-end encrypted with DAVE, with no setting to turn it off and no unencrypted fallback. The new system is planned for 2026, and until it's out, calls are encrypted in transit but not end-to-end encrypted.
What will be end-to-end encrypted in a call?
Your microphone audio, camera video, screen share video and screen share audio will all be end-to-end encrypted in every call. This applies to calls that go through a voice server and to peer-to-peer calls that self-hosted instances can run on the new system.
Your device encrypts what it sends, and only the devices of the other people in the call can decrypt it. The voice server forwards your audio and video without being able to decrypt them. Neither Fluxer nor an instance's admins will be able to see or hear the call.
Which encryption protocol will calls use?
Calls will use DAVE, Discord's open protocol built on MLS, an IETF standard published as RFC 9420. Our apps use libdave, Discord's open source DAVE library. It is built natively for the desktop app and compiled to WebAssembly for the browser.
Trail of Bits reviewed Discord's design and implementation in 2024, and both reports are public. Our own code, including how we use libdave, has not been audited.
Can I turn off encryption in a call?
No. End-to-end encryption is mandatory on the new system, and there will be no setting to turn it off and no unencrypted fallback. The apps drop any audio or video frame that arrives without encryption, and an app that doesn't support the encryption can't join the call.
How can I check that a call is end-to-end encrypted?
In a call, you'll be able to see a privacy code for the whole call and compare your verification code with anyone else who is in it, in person or through another app you trust. Once you mark someone as verified, the app will warn you if their key changes after that.
What can the voice server still see?
The voice server can't decrypt your audio or video, but it still needs some information to run the call. It sees who is in the call, when people are speaking and how loudly, and technical details about each stream, such as its bitrate and resolution. End-to-end encryption protects what's said and shown in the call and doesn't hide this information.
The connection from the app to the voice server is also encrypted with QUIC, the transport the new system uses, as a layer under the end-to-end encryption. Once calls are end-to-end encrypted, Fluxer's call relays won't be able to access what's said or shown in a call.
Are calls on Fluxer end-to-end encrypted today?
Not yet. Calls today run on LiveKit and are encrypted in transit between your device and our servers. Our own systems can access call media while they handle it, as section 9 of our privacy policy says. LiveKit's optional encryption mode is off by default, and since its key comes from the server, it isn't end-to-end against whoever runs the instance.
When will encrypted calls be out?
Encrypted calls come with the new voice and video system, which is planned for 2026, and we don't have an exact date yet. Calls get end-to-end encryption before personal notes, DMs and group DMs, planned as a draft in 2026 and stable in 2027.
Around March 2026, we said encrypted calls would come in the next update, and that estimate was too early. Our roadmap has the current plan.