N-013Messaging

Encrypted Files

Files are encrypted on the sender's device before upload — the key is shared only through the protected conversation.

Updated August 2026 · 3 minute read

Encrypted file sharing works within direct messages and groups, described here at the protocol level. For the product surface, see Null Files.

File flow

  1. The file is encrypted on the sender's device.
  2. The encrypted object is uploaded.
  3. The encryption key is shared through the protected conversation.
  4. The recipient downloads the ciphertext.
  5. The recipient decrypts the file locally.

File controls

  • expiration;
  • download limit;
  • recipient scope;
  • integrity hash;
  • malware scanning with clearly disclosed privacy trade-offs;
  • maximum size;
  • revoke future access where technically possible.

Related records