How to enable end-to-end Encryption for one-to-one Calls in Microsoft Teams

Microsoft Teams had recently announced supporting end-to-end encryption for Team calls. This update is now available in Public Preview. Once the users receive this update, the IT admins in every organization can make this feature available to all.

What is end-to-end encryption (E2EE)?

End-to-end encryption or E2EE is the encryption of original information followed by its decryption at the said destination so that intermediaries cannot decrypt information midway and it is kept secure.

With this recent update, both parties on a one-to-one call can turn on E2EE, and the communication between these parties in the call will be encrypted from end to end. No other intermediate party, including Microsoft, will have access to this decrypted conversation on call.

Also, only the real-time media flow, i.e video and voice data on Team calls can be encrypted. Both parties should turn on this setting to enable end-to-end encryption. With encryption in Microsoft Teams, chats, file sharing, presence, and other files stay protected.

Enable end-to-end Encryption for one-to-one Calls in Microsoft Teams

To enable Microsoft Teams end-to-end encryption, follow the below steps (For IT admins):

1. Sign in to Microsoft Teams Admin Center
2. Go to Other settings > Enhanced encryption policies.
3. Name the new policy.
4. For end-to-end encryption, you can then choose the users for who the same can be turned on and then choose to save.
5. Once, the policy is created, you can assign it to respective users, or groups, or the entire tenant.

But, please note that end-to-end encryption is not available to users in the tenant. Once the policy is configured, the users need to turn on end-to-end encryption in their Teams settings before a call.

[Image source – Microsoft]

How can users enable end-to-end encryption in one-to-one Team calls?

Once the policy is configured by the IT admin, users can see a setting to turn on end-to-end encryption for their one-to-one calls. Follow the below steps:

1. Select the profile picture or the ellipses next to the profile picture. It is located on the top right of the Teams window.
2. Select Settings > Privacy.
3. The user can then turn on end-to-end encryption by toggling the switch.

How to know if you are on a Teams end-to-end encrypted call?

Once the setting is turned on, users can see an encryption indicator on the Teams call window in the upper left corner. Please note that Microsoft 365 encryption technologies encrypt every Teams call. But, if a call is end-to-end encrypted, the respective indicator will be seen in the Teams call window for both parties. This indicator is a shield with a lock.

To confirm end-to-end encryption, both parties can also access a security code, which once verified by both confirms end-to-end encryption working correctly on Teams call. This end-to-end encryption update is available on the latest update of the Teams desktop client for Windows or Mac. It is also available on a mobile device with the latest update for iOS and Android.

How to turn on Teams end-to-end encryption from mobile?

1. In Teams mobile, select Settings > Calling.
2. Under Encryption, turn on end-to-end encryption calls.

Once it is on, the mobile call will show a lock + shield icon. The user can tap on the encryption indicator to know the 20-digit security code for the call. Similar to desktop/laptop, both parties can verify that the said code matches on an end-to-end encrypted call.

When end-to-end encryption is not on, the Teams encryption is a regular shield without a lock. This shield shows that the call is protected by Microsoft 365 encryption and there is no end-to-end encryption.

Which features are not available with end-to-end encryption in Microsoft Teams?

The features are:

1. Recording
2. Call transfer (blind, safe, and consult)
3. Call Park and Call Merge
4. Live caption and transcription
5. Call companion and transfer to another device
6. Add participant to convert one-to-one call to a group call.

You can also turn on these features by going to Settings and turning off end-to-end encryption.

Can you make one on one calls in Teams?

Yes, it is possible to make one-on-one calls in Microsoft Teams. No matter if the person is in your organization or not, you can call him/her through Teams. Apart from calling, it is possible to text the person via Teams. For your information, it works like Skype.

Hope this guide helped.