// definition
End-to-end encryption
Content protected between the participants’ devices
Short definition
Communication protection in which content is encrypted on the sending device and decrypted on the recipient’s device. In this architecture, a relay carrying the message handles encrypted content. Confidentiality also depends on participant authentication, device security and the handling of backups and copies. Metadata may remain available, depending on the service.
risk atlas
Knowledge map
Related analyses
Primary sources
- CNIL, access to encrypted data30 August 2017 analysis: accessible copies, access mechanisms and content protection.
- CISA, Mobile Communications Best Practice Guidance, version 224 November 2025, pages 1–2: end-to-end encryption, metadata and linked devices.