End-to-end encryption: verifiable and reliable

Remote.team
15 December 2025
poster

End-to-end

Many services like to claim “end-to-end encryption,” but in reality, they store the keys on their servers. This means that if they want to, the government, administrators, or third parties can access your correspondence.

How does E2EE work in Remote.Team?

  • Encryption happens directly on your device—all messages and files are converted into gibberish before being sent to the server.
  • The keys are stored only in your browser (LocalStorage/IndexedDB). Neither developers nor administrators have access to them.
  • Verifiable and transparent — open DevTools (F12 → Network) and see for yourself: only encrypted text is sent to the server.

  Security guarantees

  • If you are removed from a thread and the key is updated, you will lose access forever. Even we won't be able to restore it.
  • If all participants in the thread lose access, the correspondence will remain encrypted forever. No backdoor, no master key.
  • When changing devices, download your key on the old device and transfer it to the new one manually. It's inconvenient, but that's how real security works.

 Who is this critical for?

For anyone who works with sensitive information: law firms, financial institutions, medical institutions, journalists, activists, companies in countries with unpredictable legislation.

 

How do I enable end-to-end encryption?

When creating a discussion/request, simply click on the “shield” icon (see screenshot).

image