Technical reference for IT and developers. The business overview is in the company documentation.
End-to-end encryption · overview
End-to-end encryption
Messages and media are encrypted on participants' devices. The server and nodes relay encrypted data and must not read the content. This is the public overview; the technical specification is E2EE v1.
Status: beta, encryption v1. The independent implementation is not complete; no external audit has been performed. Updated 05.11.2026.
What is protected
- Personal and group messages. Text and attachments are encrypted on the sender's device.
- Device keys. Private keys stay on the device and do not go to the server.
- Rooms. Admission is the invitation
/i/<token>; the room key travels in the protected part of the link and is not admission. - Media. Audio and video can be encrypted on devices; the node relays the encrypted stream.
What the server sees
The server sees employee wallet addresses, guest roles, time, room composition, IP and technical connection parameters. It also sees encrypted envelopes and some parameters needed to establish a session. Message content and device keys are not available to it.
End-to-end encryption does not make the server completely blind: metadata, sizes and packet timing remain visible. This matters when assessing privacy.
Limits
- Draft. Key exchange order, formats and test vectors are not fixed yet. Compatibility with an independent implementation is not confirmed.
- Media in the web room. End-to-end media encryption depends on the room password. Without it, the connection is protected in transit but not end-to-end.
- Modified node. The standard node does not decrypt the stream, but the operator controls the machine. In the current beta, a modified browser or mobile node may obtain the room password.
- Screenshots and recording. A participant can take a screenshot or record the conversation on their device.
- No audit. Internal reviews and tests do not replace an independent audit.
Documents
- E2EE v1 — technical specification — keys, envelopes, groups and media.
- Meeter protocol — sign-in, app permissions and messaging.
- Security policy — how to report a vulnerability.
MEETER / DOCS