Enabling end-to-end encryption (E2EE) for Zoom meetings

Account owners and admins can enable end-to-end encryption (E2EE) for meetings, providing additional protection when needed. End-to-end encryption for meetings requires all meeting participants to join from the Zoom desktop app, mobile app, or Zoom Rooms.

Meeting hosts on free accounts can also enable end-to-end encryption, but will need to verify their phone number via a code sent to them using SMS. Other participants do not need to verify their phone number.

Once enabled, learn how to use and identify the encryption type in a Zoom meeting and review frequently asked questions about end-to-end encryption.

Before enabling end-to-end encryption, review and understand the limitations, including which meeting features will be disabled.

This article covers:

• Limitations of end-to-end encryption for meetings
• How to enable or disable end-to-end encryption for meetings
  • Account
  • Group
  • User
  • Individual meeting

Prerequisites for enabling end-to-end encryption for meetings

• Account owner or admin privileges for managing web settings at the account or group level
• Host privileges to enable or disable at the meeting level

When end-to-end encryption is enabled in the Zoom web portal for the meeting host, it will be used in a meeting when all participants meet the necessary prerequisites. Learn more about using end-to-end encryption in meetings, including the minimum version requirements for standard and post-quantum end-to-end encryption.

Limitations of end-to-end encryption for meetings

• The Zoom Web App and third-party clients leveraging the Zoom Web SDK are not currently supported. To learn more, refer to the developer documentation for SDKs.
• Users will not be able to join by telephone, SIP/H.323 devices, or on-premise configurations, as these endpoints cannot be encrypted end-to-end.
  • Calling out to SIP/H.323 devices from Zoom Rooms will also be disabled.
• E2EE meetings are limited to 1000 meeting participants. Learn more about meeting participant limits.
• Enabling E2EE will disable the following in-meeting features:
  • AI Companion features
  • Breakout rooms*
    *Note: If you want to use breakout rooms in end-to-end encrypted meetings, submit a request to Zoom Support to have this feature enabled. Each breakout room will have its own unique meeting encryption key.
  • Cloud recording
  • Continuous meeting chat
  • Join before host
  • Live streaming
  • Live transcription
  • Polling and Surveys
  • Zoom Apps
  • Zoom Notes
  • Zoom Whiteboard

How to enable or disable end-to-end encryption for meetings

By default, Zoom meetings use enhanced encryption, but you can change the default encryption type in the Zoom web portal. Once you enable the Allow use of end-to-end encryption setting in the web portal, you can then choose the default encryption type for meetings: Enhanced encryption or End-to-end encryption.

Because end-to-end encryption disables several meeting features, we recommend using E2EE only for meetings where additional protection is needed. Learn how to change the encryption type at the meeting level. 

Account

To enable or disable end-to-end encrypted meetings for all users in the account:

1. Sign in to the Zoom web portal as an admin with the privilege to edit account settings.
2. In the navigation menu, click Account Management then Account Settings.
3. Click the Meeting tab.
4. Under Security, click the Allow use of end-to-end encryption toggle to enable or disable it.
5. If a verification dialog appears, click Enable or Disable to verify the change.
6. If you enabled the Allow use of end-to-end encryption setting in step 4, under Default encryption type, choose the default encryption type you want your account to use: Enhanced encryption or End-to-end encryption.
7. Click Save.
8. (Optional) To prevent all users in your account from changing these settings, click the lock icon , and then click Lock to confirm the setting.

Group

To enable or disable end-to-end encrypted meetings for a group of users:

1. Sign in to the Zoom web portal as an admin with the privilege to edit groups.
2. In the navigation menu, click User Management then Groups.
3. Click the applicable group name from the list.
4. Click the Meeting tab.
5. Under Security, click the Allow use of end-to-end encryption toggle to enable or disable it.
6. If a verification dialog appears, click Enable or Disable to verify the change.
   Note: If the option is grayed out, it has been locked at the account level and needs to be changed at that level.
7. If you enabled the Allow use of end-to-end encryption setting in step 5, under Default encryption type, choose the default encryption type you want the group to use, either Enhanced encryption or End-to-end encryption.
8. Click Save.
9. (Optional) To prevent all users in the group from changing this setting, click the lock icon , and then click Lock to confirm the setting.

User

To enable or disable end-to-end encrypted meetings for your own use:

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Settings.
3. Click the Meeting tab.
4. Under Security, click the Allow use of end-to-end encryption toggle to enable or disable it.
5. If a verification dialog appears, click Enable or Disable to verify the change.
   Note: If the option is grayed out, it has been locked at either the group or account level. You need to contact your Zoom admin.
6. If you enabled the Allow use of end-to-end encryption setting in step 4, under Default encryption type, choose the default encryption type you want your meetings to use, either Enhanced encryption or End-to-end encryption.
7. Click Save.

Individual meeting

If the setting is not locked at the account or group level, you can enable or disable end-to-end encryption when scheduling a meeting, or by editing an existing individual meeting or meeting series where you are the host. This allows you to choose which meetings have enhanced encryption and which ones are end-to-end encrypted when additional protection is required.

In the meeting settings when creating or editing a meeting, you may need to click More Options to see the encryption options, or if you’re using a calendar integration such as the Zoom for Google Workspace add-on, you’ll need to open the add-on settings within the calendar to choose the encryption type.

Note: You can’t use E2EE for an ad-hoc meeting (using your personal meeting ID) unless end-to-end encryption is enabled as the default for all of your meetings in the Zoom web portal. You cannot upgrade a meeting to end-to-end encryption during the meeting.