How end-to-end encryption in Google Messages provides more security

Google Messages supports end-to-end encryption when messaging other users using Google Messages over Rich Communication Services (RCS). When available, RCS messages and their attachments, such as photos and videos, will be end-to-end encrypted. End-to-end encryption is a security method that keeps your communications secure. With end-to-end encryption, no one, including Google and third parties, can read eligible messages as they travel between your phone and the phone you message.

To use end-to-end encryption in Google Messages, you and the person or group you message must both:

Use the Google Messages app.
Have RCS chats turned on.
Use data or Wi-Fi for RCS messages.

Tips:

Text messages are dark blue in the RCS state and light blue in the SMS/MMS state.
End-to-end encryption is automatic in eligible conversations.
You’ll see " RCS chat with [contact name or phone number]” when end-to-end encryption is active in a conversation. Your messages will also include a lock on the send button.

Important: End-to-end encryption isn’t available for SMS/MMS messages.

How end-to-end encryption works

When you use the Google Messages app to send end-to-end encrypted messages, all chats, including their text and any files or media, are encrypted as the data travels between devices. Encryption converts data into scrambled text. The unreadable text can only be decoded with a secret key.

The secret key is a number that’s:

Created on your device and the device you message. It exists only on these two devices.
Not shared with Google, anyone else, or other devices.
Generated again for each message.
Deleted from the sender's device when the encrypted message is created, and deleted from the receiver's device when the message is decrypted.

Neither Google or other third parties can read end-to-end encrypted messages because they don’t have the key.

Each end-to-end encrypted conversation has a unique verification code. This code must be the same for you and your contact to verify that your messages are end-to-end encrypted.

Tip: As an added measure, you can make sure you and your contact have the same verification code.

You can learn more in the Google Messages end-to-end encryption technical paper.

How to tell when end-to-end encryption is on

If you have a lock on the send button when you compose a message and next to the message’s timestamp, end-to-end encryption is used.

If you or your contact lose RCS chats, end-to-end encryption is no longer possible for messages you send or receive. If that happens, you won’t have a lock next to the timestamp of the conversation's latest message or on the send button when you compose a message.

Learn how to control the way messages are sent when end-to-end encryption isn’t available.