Discord Enhances Platform Privacy with New End-to-End Encryption Protocol

Discord has officially upgraded its infrastructure to bolster user privacy, launching a custom end-to-end encryption (E2EE) system known as the DAVE protocol. This move represents a significant shift for the platform, which has grown from a niche tool for gamers into a global communication hub serving over 200 million users.

What is the DAVE Protocol?

The DAVE protocol—short for “Discord Audio and Video Encryption”—is a custom-built system designed to secure audio and video communications from unauthorized access. By implementing E2EE, Discord ensures that media frames are encrypted after encoding and before transmission. This means that data is protected while in transit, and only the intended participants in a call can decrypt and view the content.

To ensure the technical integrity of this implementation, Discord collaborated with cybersecurity experts from Trail of Bits. These experts conducted a comprehensive audit of the code and the overall implementation of the protocol. Discord has made the protocol open-source and released a detailed whitepaper, allowing the broader security community to review its technical specifications, and libraries.

Scope of the Encryption Update

The migration to E2EE is comprehensive, covering a wide array of communication formats on the platform. According to the company’s announcement, the new encryption standards now apply to:

• One-on-one audio and video calls
• Group direct messages (DMs)
• Voice channels within servers
• Go Live streaming sessions

Technically, the DAVE protocol leverages the WebRTC encoded transform API. To manage security in real-time, the system generates identity key pairs using the Elliptic Curve Digital Signature Algorithm (ECDSA). When the composition of a group changes—such as when a participant joins or leaves a call—the system automatically generates new encryption keys to maintain security without disrupting the user experience.

User Verification and Transparency

Beyond the automated encryption, Discord has introduced features that empower users to verify the security of their interactions. Participants in encrypted calls have the ability to confirm the encryption status and verify the identities of other participants, adding a layer of transparency to the communication process.

Key Takeaways

• Broad Coverage: The update secures voice and video across DMs, group chats, and server-based voice channels.
• Expert Oversight: The DAVE protocol was audited by Trail of Bits and is now open-source for community review.
• Minimal Disruption: The system is designed to handle key rotations seamlessly when group membership changes.
• User Control: Users can verify the encryption status and identity of participants during their calls.

Looking Ahead

As digital communication platforms face increasing scrutiny regarding data privacy, Discord’s transition to E2EE marks a critical milestone in its evolution. By prioritizing the security of its voice and video infrastructure, the platform is aligning itself with industry standards for privacy-focused communication. While the focus remains on audio and video, the move underscores a broader commitment to safeguarding the privacy of the millions of creators, communities, and businesses that call Discord home.