End-to-end encryption protects a conversation by keeping the ability to decrypt its content at the participating endpoints. A service can deliver the encrypted messages without needing the keys that make them readable. That is a substantial protection, but it does not make every copy of a conversation inaccessible in every situation.
The most useful questions are who holds the keys, which devices count as endpoints and what happens to backups. A padlock icon alone does not answer all three.
Encryption in transit and end-to-end encryption
Encryption in transit protects a connection, such as the connection between your browser and a website. If that connection terminates at the service’s server, the service can ordinarily process what it receives there. An additional end-to-end encryption layer can keep the message content encrypted beyond that server.
Encryption at rest describes stored data. It does not, by itself, say whether the provider, the user or another party holds the decryption keys. These terms describe different properties; they should not be used interchangeably.
Several kinds of cryptography work together
Secure messaging normally combines ways to establish secrets, authenticate participants and encrypt the messages themselves. These are separate jobs. For example, X25519 is used for key agreement, while Ed25519 is a digital-signature scheme. Calling both “encryption algorithms that scramble your message” obscures what they do.
Authentication matters because a secure exchange with an impersonator is still an exchange with the wrong person. Where an app provides a contact-verification mechanism, it helps users check the identity relationship that the encryption is supposed to protect.
Why message keys change
Signal’s Double Ratchet specification describes deriving new keys as messages are exchanged. This limits the damage that exposure of particular keys can cause, including protection for earlier message keys that have been deleted.
Recovery after a compromise is conditional. Fresh secret input must enter the exchange, and an attacker who continues controlling a device can keep learning what happens there. “One stolen key can never affect any other message” is too broad a claim.
The specification has also evolved: its November 2025 revision includes post-quantum ratchet constructions. An explanation limited to an older handshake should not be mistaken for a complete description of every current Signal session, much less every encrypted messaging app.
Backups need their own check
Apple’s iCloud security overview illustrates why backup settings matter. Under standard protection, Messages in iCloud is end-to-end encrypted when iCloud Backup is disabled. If that backup is enabled, it includes a copy of the Messages encryption key for recovery.
With Advanced Data Protection, Apple describes iCloud Backup and the Messages key inside it as end-to-end encrypted. The two configurations have different recovery implications. It is inaccurate to say that all iCloud messages are simply stored as plaintext unless the optional setting is enabled.
This is an example, not a rule for other providers. Check the documentation for the app, account and backup arrangement you actually use.
What it cannot protect by itself
- A compromised endpoint: malware or someone with access to an unlocked device may read content where it is displayed or stored.
- A recipient’s actions: another participant can copy, photograph or share a message.
- Every surrounding detail: message content and metadata are different. What a provider or network observer can learn depends on the service’s design; end-to-end encryption alone does not promise anonymity.
- Every linked device or exported copy: the security boundary includes more than the phone currently in your hand.
For a practical assessment, inspect linked devices, backup protection and recovery options as well as the encryption label. The technology meaningfully reduces who must be trusted with message content. Its value is clearer when we describe its boundaries accurately, instead of promising that a conversation has become impossible to expose.
