Enabling end-to-end (E2EE) encryption for Zoom Phone

End-to-End Encryption (E2EE) for Zoom Phone calls is available for account owners and admins to allow their users to switch their one-on-one calls to E2EE when additional protection is needed. Using Zoom Phone E2EE requires the caller and callee to be part of the same Zoom account, to join from the Zoom desktop or mobile app, and for automatic call recording to be disabled, or the user is allowed to pause automatic call recording if it is enabled.

Learn more about using end-to-end encryption (E2EE) during a Zoom Phone call.

Requirements for enabling End-to-End Encryption for Zoom Phone

• Pro, Business, Education, or Enterprise account
• Account owner or admin with privileges
• Zoom Phone licenses in the account

Limitations of End-to-End Encryption for Zoom Phone

End-to-End Encryption for Zoom Phone has the following limitations:

• E2EE encryption for Zoom Phone one-on-one calls is not supported for:
  • Zoom Rooms
  • Web client
  • PSTN calls
  • Zoom Rooms, web client, PSTN, call, and extensions within the geographic region of India
• The following features will be disabled when using E2EE:
  • Automatic call recording and Ad hoc recording
    If Allow extensions to stop and resume automatic call recording is selected for Automatic Call Recording, the call will be encrypted.
  • Call flip
  • Call monitoring
  • In-call controls such as merge, transfer
  • DTMF codes and tones
  • Hold music and hold music setting
  • Park or unpark a call
  • Share line appearance and share line group pick-up
  • Switch to carrier
  • Elevate the call to a non-E2EE meeting

How to enable End-to-End Encryption for Zoom Phone

Account

To enable End-to-End Encryption for Zoom Phone calls for all users in the account:

1. Sign in to the Zoom web portal as an admin with the privilege to edit account settings.
2. In the navigation menu, click Account Management then Account Settings.
3. Click the Zoom Phone tab.
4. Under General, click the End-to-End Encryption toggle to enable or disable it.
5. If a verification dialog appears, click Enable or Disable to verify the change.
6. (Optional) To prevent all users in your account from changing this setting, click the lock icon , and then click Lock to confirm the setting.

Site

If you are using sites, to enable End-to-End Encryption for a specific site:

1. Sign in to the Zoom web portal as an admin with the privilege to edit account settings.
2. In the navigation menu, click Phone System Management then Company Info.
3. Click the name of the desired site.
4. Click the Policy tab.
5. Under General, click the End-to-End Encryption toggle to enable or disable it.
6. If a verification dialog appears, click Enable or Disable to verify the change.
7. (Optional) To prevent all users in your account/site from changing this setting, click the lock icon , and then click Lock to confirm the setting.

Group

Note: For users in multiple groups, the primary group takes priority over other groups, so make sure the policy is applied to the primary group that your users belong to for E2EE to work.

To enable End-to-End Encryption for Zoom Phone calls for a group of users:

1. Sign in to the Zoom web portal as an admin with the privilege to edit groups.
2. In the navigation menu, click User Management then Groups.
3. Click the applicable group name from the list.
4. Click the Zoom Phone tab.
5. Under General, click the End-to-End Encryption toggle to enable or disable it.
6. If a verification dialog appears, click Enable or Disable to verify the change.
7. (Optional) To prevent all users in the group from changing this setting, click the lock icon , and then click Lock to confirm the setting.

Phone user

To enable End-to-End Encryption for Zoom Phone calls for a specific user:

1. Sign in to the Zoom web portal as an admin with the privilege to edit account settings.
2. In the navigation menu, click Phone System Management, then Users & Rooms.
3. Click the Users tab.
4. Click the applicable phone user name from the list.
5. Click the Policy tab.
6. Under General, click the End-to-End Encryption toggle to enable or disable it.
7. If a verification dialog appears, click Enable or Disable to verify the change.