Discord has taken a significant step in privacy by activating the End-to-end encryption on all private voice and video calls of its platform. The measure, which is applied automatically and without the need for configuration, affects hundreds of millions of users worldwide, including a very large community in Spain and the rest of Europe.
With this change, the company assures that Neither third parties nor Discord itself can listen to or see the content of protected calls.provided they are not stage channels. This new feature places the service in a unique position within the current debate on how major platforms balance privacy, moderation, and regulatory compliance.
What exactly has changed in Discord calls?
The main novelty is that end-to-end encryption (E2EE) is no longer a limited test or a feature for a select few, but It has become the standard for all private voice and video calls on Discord. Activation is global and by default, so the user doesn't have to change any settings to benefit from the protection.
According to Mark Smith, the company's vice president of core technologies, E2EE coverage applies to all voice and video calls outside of stage channelsThese latter ones, used for more public audio events with a large number of listeners, are expressly excluded from the scope of the change and continue to operate under the previous model.
In practice, it works simply: Only those participating in the call can access the contentVoice and video are encrypted on each participant's device and only decrypted on the other participants' equipment, so the information is not readable by intermediate nodes or provider servers.
Discord had already started testing this technology in 2024, but until now Availability did not cover the entire user base nor to all compatible calls. The current implementation marks the definitive leap towards widespread coverage on the platform.
The company also emphasizes that the feature is designed to integrate seamlessly into the everyday experience: There's no need to activate special buttons or create separate rooms.Simply start a voice or video call as usual for end-to-end encryption to kick in.
The DAVE system: how Discord protects voice and video
To deploy this protection, Discord has developed DAVE, an acronym for Discord Audio & Video End-to-End EncryptionA technical system specifically designed to ensure real-time media transmission. The project was built in collaboration with Trail of Bits, a firm specializing in cryptographic security auditing that participated in reviewing the approach.
DAVE relies on WebRTC for audio and video transportIt uses the same technology found in many browser-based video calling tools and employs the MLS (Messaging Layer Security) standard for key exchange in group contexts. This design allows end-to-end encryption to scale beyond one-on-one conversations.
The result is that, in a protected call, Each participant shares secure keys with the rest without those keys being exposed in plain text to Discord's servers. In this way, the provider manages the infrastructure necessary for the call to function, but cannot reconstruct the content of what is said or shown.
In addition to E2EE, the company maintains transport encryption between client and SFU (Selective Forwarding Unit)This is an additional layer that protects data in transit even before end-to-end encryption is applied. This combination strengthens the security of communications against external interception during transmission.
In calls considered especially sensitive, Discord suggests that users employ verification mechanisms, such as Voice privacy code represented by a padlock iconto ensure everyone sees the same information and reduce the risk of man-in-the-middle attacks.
Scope and limitations: what is encrypted and what is not
Although the progress is significant, it is important to fully understand its scope: End-to-end encryption applies only to voice and videoText messages, both on servers and in direct messages, still do not have E2EE functionality due to a strategic decision by the company.
The reason Discord gives is that Keeping the text outside the E2EE facilitates content moderation and the fight against abuse.This is especially critical in large online communities with users of all ages. Detection tools, reporting systems, and compliance processes rely on this ability to restrict access to certain types of content.
This implies that, for conversations where the following are discussed especially sensitive data in written format —such as financial, contractual or health information—, it may not be the best idea to rely on Discord chats, at least from a maximum privacy perspective.
The company itself and various cybersecurity experts also point out that E2EE It does not solve problems associated with compromised devices., as research on wave of scams and malwareIf a computer has malware, the attacker can capture the information before or after it is encrypted, a risk that no protocol can eliminate.
Another known limitation is the possibility that a participant Record the call using external tools or physical devicesThis is something that even end-to-end encryption cannot prevent. The technology protects against interceptions along the way, but it cannot control how users behave at their end.
Comparison with Signal, WhatsApp, Telegram and other platforms
Discord's move places it in a select group of services that offer End-to-end encryption by default for voice and video communications, although with nuances when compared to other popular apps in Spain and Europe.
Signal, for example, provides Full E2EE for voice and video and text From the very beginning. It's the strictest option in terms of privacy, but in return, it gives up many social features and community tools that Discord offers.
WhatsApp, which uses the Signal Protocol for calls and messagesIt also encrypts all content by default. However, its membership in Meta raises concerns in certain corporate environments and among organizations seeking to distance themselves from large technology conglomerates.
Telegram maintains a hybrid approach: Only secret chats are protected using E2EEWhile regular groups and channels are not. This flexibility has helped it grow, but it means that many everyday conversations don't achieve the same level of privacy.
In the area of ​​work tools, platforms such as Zoom, Microsoft Teams, or Google Meet allow E2EE in some scenariosHowever, it is often limited to certain payment plans or very specific configurations. It is not always the default setting and may require additional management by IT administrators.
In this context, Discord is situated at an intermediate point.It protects voice and video calls by default, but keeps text accessible for moderation. This balance reflects its nature as a social network and community space, rather than a strictly private messaging service.
Impact on companies, startups and communities in Spain and Europe
In the European context, where the General Data Protection Regulation (GDPR) sets the agenda, Discord's decision has practical implications. End-to-end encryption It favors principles such as data minimization and protection by design.by reducing the amount of information the provider can access.
However, this same approach can complicate compliance with obligations related to internal audits or with the right of access to certain communication records, especially in highly regulated sectors such as finance, health or legal, which are very present both in Spain and in the rest of the Union.
For startups and SMEs that use Discord as an internal coordination channel, the activation of E2EE in calls It clearly improves the security posture. in product meetings, technical sessions, or operational conversations with distributed teams. It is a particularly interesting reinforcement in contexts of widespread remote work.
In the realm of user communities—for example, software projects, gaming, online education, or brand fan groups—the novelty allows Increase the level of privacy in events, beta programs, or feedback sessionsHowever, it will still be advisable not to transfer overly sensitive information to text channels.
For organizations with very strict compliance requirements, such as those in the fintech or healthtech sectors in Spain and the EU, the recommendation from several specialists is combine Discord with other communication toolsThat is, use the platform for community and operational coordination, and reserve solutions with comprehensive E2EE or enterprise platforms for particularly sensitive data.
When does it make sense to use Discord's E2EE and when should you opt for alternatives?
With this new scenario, it's helpful to outline recommended use cases. On the positive side, Discord is a good fit for Distributed internal team, coordination with freelancers, and calls with partnersprovided that the content of the conversation does not require exhaustive traceability or formal recording.
User communities and early-stage projects often value a mix of Agility, social features, and now an additional layer of privacy in voice and video. For these types of environments, the default E2EE is a plus that reinforces trust without adding excessive technical complexity.
However, when it comes to heavily regulated sectors or communications that may require subsequent monitoring —such as B2B consultative sales that are recorded for quality control or training—, things get complicated. E2EE makes audits more difficult and can conflict with certain legal or contractual obligations.
It is also worth considering alternatives if the workflow requires clear and accessible retention of communications historySomething that end-to-end encryption, by design, makes less manageable for administrators and compliance teams.
A practical approach for European companies involves define internal communication policies: determine what type of conversations go to Discord (daily coordination, operational meetings, community) and which ones are moved to channels with full E2EE for all or integrated corporate solutions with archiving and monitoring systems.
Common risks and misunderstandings about end-to-end encryption
Although Discord's announcement has been interpreted as a major victory for user privacy, it's easy to overestimate what E2EE offers. It's not a magic bullet that solves all security problems.but one more piece of a broader set of measures.
As mentioned, if a device is infected or misconfigured, The attacker can record the conversation at the source or destination. without needing to break the encryption. In remote work environments, this makes it essential to take basic device security seriously, from updates to anti-malware protection.
It's also important to remember that end-to-end encryption It does not prevent a participant from recording the screen or using another capture program. or even an external device to record the call. From a legal and trust standpoint, clear policies and prior agreements regarding the use of recordings remain necessary.
Regarding text messages, many users assume that, because they are on a platform that now encrypts calls, All content within the service enjoys the same level of protectionThis is not the case on Discord: written messages remain accessible to moderation systems, so it is not prudent to transfer critical data requiring maximum confidentiality there.
Finally, some experts point out that the deployment of E2EE on massive platforms It opens up complex debates regarding the prosecution of crimes and abuses.European regulators are already discussing how to balance privacy protection with the ability to investigate serious cases, a debate in which movements like Discord's are playing an increasingly visible role.
However, the activation of end-to-end encryption for Discord voice and video calls consolidates the platform as one of the major social services that has decided to put the privacy of real-time communications at the heart of its offering. The decision comes at a time when other companies have slowed down or cut back on similar features.This forces users, companies, and European regulators to rethink how they use and what they expect from these tools. For those who communicate daily through Discord, the landscape changes: there is more protection in each call, but also new decisions to make about what is said, how it is said, and in which channel it is shared.
