Discord Enables Default End‑to‑End Encryption for All Voice & Video Calls
What Happened — Discord has flipped a switch: every voice and video call on the platform is now encrypted end‑to‑end by default, with the sole exception of stage channels. The change required no user action and is built on the open‑source DAVE protocol that has been audited by Trail of Bits.
Why It Matters for TPRM —
- Guarantees that third‑party communications hosted on Discord cannot be intercepted by the platform itself, reducing data‑exfiltration risk.
- Sets a higher baseline security posture for vendors that rely on Discord for internal or customer‑facing collaboration.
- Demonstrates a proactive privacy stance that may affect vendor risk scores and contractual security clauses.
Who Is Affected — Gaming studios, tech‑SaaS firms, education institutions, community groups, and any organization that uses Discord for real‑time voice/video collaboration.
Recommended Actions —
- Update your vendor risk register to reflect Discord’s enhanced encryption controls.
- Verify that any integrated bots or third‑party apps used on Discord comply with the DAVE protocol and do not introduce side‑channel leaks.
- Re‑assess data classification policies for communications that now enjoy stronger confidentiality guarantees.
Technical Notes — The DAVE protocol (introduced 2024, fully rolled out March 2026) provides low‑latency, open‑source E2EE for calls across PC, mobile, console, and browser clients. It has undergone external audit by Trail of Bits and is covered by a public bug‑bounty program. Stage channels remain unencrypted to preserve broadcast‑style functionality. Source: SecurityAffairs