Using video end-to-end encryption
Video end-to-end encryption¹ is an optional security feature designed to give you maximum control for your Ring videos. When enabled, your video recordings are encrypted with keys that only you control. Only your enrolled mobile devices can view videos, and no one else, including Ring services, can access your encrypted content.
End-to-end encrypted videos are not accessible through Alexa, Fire TV, or ring.com. Videos recorded before enabling end-to-end encryption¹ are still accessible while end-to-end encryption¹ is enabled.
Important note: By design, Ring cannot access or help recover access to your end-to-end encrypted videos when end-to-end encryption¹ is enabled. It is important to keep your passphrase and cloud backup safe, so you don't lose access to your end-to-end encrypted videos.
To learn about TAKE (Throw Away the Key Encryption), visit Using TAKE (Throw Away the Key Encryption).
Requirements
Mobile device:
- iOS 17+ or Android 9+
- Latest Ring app version
Most Ring cameras support end-to-end encryption¹, except for the following:
- Video Doorbell (1st Gen)
- Video Doorbell (2nd Gen)
- Video Doorbell Wired
- Stick Up Cam (1st Gen)
- Stick Up Cam (2nd Gen)
- Spotlight Cam Battery (1st Gen)
- Door View Cam
Setting up end-to-end encryption
To set up end-to-end encryption¹ in the Ring app:
- Open the Ring app.
- Tap the menu (☰).
- TapControl Centre.
- TapVideo Encryption.
- TapLet's turn on End-to-End Encryption.
- TapContinue.
- Set up your recovery options.
If you'd like to set up TAKE (Throw Away the Key Encryption) as your video encryption, visit Using TAKE.
Recovery options
When enabling end-to-end encryption¹, you'll set up recovery options so you can regain access to your encrypted videos if you switch, lose, or set up a new mobile device. Ring strongly recommends enabling automatic cloud backup alongside your 12-word passphrase.
Important note: If all recovery methods fail, your encrypted videos cannot be accessed.
Automatic cloud backup (recommended)
iOS: iCloud Keychain automatically saves your encrypted recovery key. When you sign in on a new iPhone or iPad with the same Apple ID, the Ring app automatically restores access to your encrypted content with no extra steps needed.
Android: Ring uses two options to protect your recovery key:
- Google Blockstoreautomatically backs up and restores your recovery key during the device-to-device transfer process. When you set up a new Android device by restoring access from a backup with the same Google account, your key is automatically available.
- Google Drive backupprovides an additional cloud-based recovery path. Ring can store your encrypted recovery key in your Google Drive, to give you more recovery options. This requires you to grant Ring permission to access Google Drive during enrolment.
To recover your access with cloud backup:
If you set up iCloud Keychain, Google Blockstore, or Google Drive backup, access restores automatically when you sign in to the Ring app on your new mobile device.
12-word passphrase
When you set up end-to-end encryption¹, the app generates a unique 12-word passphrase. This is your default recovery option and cannot be disabled.
- Store your passphrase securely in a password manager, physical safe, or secure note.
- Never share your passphrase with anyone.
- This method works on any mobile device, making it your most reliable option if other methods are unavailable.
- You can regenerate a new passphrase from any enrolled mobile device at any time.
Recover access with your 12-word passphrase:
- Install the Ring app on your new mobile device and sign in to the Ring app.
- Tap the menu (☰).
- TapControl Centre.
- TapVideo Encryption.
- TapEnter Passphrase.
- Enter all 12 words in the correct order (lowercase, with spaces).
Generate a new passphrase
- Open the Ring app.
- Tap the menu (☰).
- TapControl Centre.
- TapVideo Encryption.
- TapRecovery Settings.
- TapGenerate New Passphrase.
- Save the new passphrase securely.
Important note: Your previous passphrase will no longer work after generating a new passphrase.
Feature compatibility
Ring cameras without end-to-end encryption¹ enabled will retain all features.
Available features with end-to-end encryption¹:
- Event History Playback
- Live View
- Download and Delete Videos
- Rich Notifications
- 24/7 Recording2
- Timeline Scrubber
- Motion Warning
- Extended Live View3
- Advanced Pre-Roll (wired)
- Acoustic Event Detection
Not available with end-to-end encryption¹:
- Alexa and Fire TV integration
- Alexa+ Greetings
- Bird's Eye View
- Familiar Faces4
- Motion Tracking
- ring.com viewing
- Shared Users
- Single Event Alert5
- Smart Alerts
- Third-party integrations
- Video Descriptions5
- Video links
- Video Search6
Managing personal devices
You can always view or manage which mobile devices are enrolled in your encryption in the Ring app.
To view your enrolled mobile devices in the Ring app:
- Tap the menu (☰).
- TapControl Centre.
- TapVideo Encryption.
- TapPersonal Devices.
Verify a personal device
Device verification confirms the identity of a mobile device on your personal device list using a QR code or a 60-digit number to verify enrolled personal devices.
To verify an enrolled personal device:
- Tap the menu (☰).
- TapControl Centre.
- TapVideo Encryption.
- TapPersonal Devices.
- From the Personal Devices list, select a device.
- TapScan the QR code.
- Scan the QR code displayed on one mobile device with the other mobile device to confirm the Verification Number matches on both mobile devices.
- If you cannot scan, tapCompare a 60-digit numberand confirm the number matches on both.
Important note: If the verification check cannot be completed, the Ring app will display a message that the mobile device cannot be verified. Make sure you have the correct mobile device and try again.
Remove a personal device
Removing a personal device revokes its access to encrypted video and signs it out of your encryption.
To remove a personal device:
- Tap the menu (☰).
- TapControl Centre.
- TapVideo Encryption.
- TapPersonal Devices.
- From the Personal Devices list, select a device.
- TapRemove Device.
Managing end-to-end encryption
Identify end-to-end encrypted videos
To identify an end-to-end encrypted video:
- Open the Ring app on any enrolled device.
- Navigate to Event History or Dashboard.
- Look for the end-to-end encryption lock icon on the video thumbnail.
Enrolling additional Ring cameras
End-to-end encryption¹ can be enabled for eligible Ring devices or on a per-camera basis.
To enrol additional cameras in the Ring app:
- Tap the menu (☰).
- TapControl Centre.
- TapVideo Encryption.
- TapEnd-to-End Encryption.
- Toggle on the cameras you want to protect.
Recovering access
You will need to use one of the recovery options to regain access if you get a new phone, reinstall the app, or lose access to your enrolled device.
Reset end-to-end encryption
If you reset your account end-to-end encryption:
- All enrolled cameras will be unenrolled from end-to-end encryption¹, go offline, and will stop streaming. This is a security measure to prevent unauthorised access. You will need to set up your Ring cameras to bring them back online and continue streaming.
- All enrolled mobile devices will be unenrolled.
- All previously encrypted videos will become permanently inaccessible.
Reset end-to-end encryption¹ for your account:
- Open the Ring app.
- Tap the menu (☰).
- TapControl Centre.
- TapVideo Encryption.
- TapReset Account Encryption.
- Follow the on-screen instructions to complete the reset.
To resume streaming, set up your Ring devices.
