Enabling End-to-end (E2EE) encryption for Zoom Phone

Zoom Phone calls End-to-End encryption (E2EE) is available for account admins to allow their users to switch their one-on-one calls to E2EE when additional protection is needed. Using Zoom Phone E2EE requires caller and callee to be part of the same Zoom account, to join from the Zoom desktop or mobile client, and automatic call recording to be disabled, or the user is allowed to pause automatic call recording if it is enabled.

Note: To use E2EE, follow these instructions.

This article covers:

• Limitation of End-to-End encryption for Zoom Phone
• How to enable End-to-End encryption for Zoom Phone
  • Enable End-to-End encryption for the account
  • Enable End-to-End encryption for a site
  • Enable End-to-End encryption for a group
  • Enable End-to-End encryption for a user

Prerequisites for enabling End-to-End encryption for Zoom Phone

• Pro, Business, Education, or Enterprise account
• Account owner or admin with privileges
• Zoom Phone licenses in the account

Limitations of End-to-End encryption for Zoom Phone

• E2EE encryption for Zoom Phone one-on-one calls are not supported for Zoom Rooms, Web client, and PSTN calls at this time.
• The following features will be disabled when using E2EE:
  • Automatic call recording and Ad hoc recording
    If Allow extensions to stop and resume automatic call recording is selected for Automatic Call Recording, the call will be encrypted.
  • Call flip
  • Call monitoring
  • In-call controls such as merge, transfer
  • DTMF codes and tones
  • Hold music and hold music setting
  • Park or unpark a call
  • Share line appearance and share line group pick up
  • Switch to carrier
  • Elevate the call to a NON E2EE meeting

How to enable End-to-End encryption for Zoom Phone

Enable End-to-End encryption for the account

To enable End-to-End encryption for Zoom Phone calls for all users in the account:

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Account Management, then Account Settings.
3. Click the Zoom Phone tab.
4. To the right of End-to-End Encryption, click the toggle icon  to enable it.
5. In the pop-up dialog box, click Enable.
6. (Optional) Click the lock icon  to make this setting mandatory for all users in your account, then in the pop-up dialog window click Lock.

Enable End-to-End encryption for a site

If you are using sites, to enable End-to-End Encryption for a specific site:

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Phone System Management, then Company Info.
3. Click on the name of the desired site.
4. Click on the Policy tab.
5. To the right of End-to-End Encryption, click the toggle icon  to enable it.
6. In the pop-up dialog window, click Enable.
7. (Optional) Click the lock icon  to make this setting mandatory, then in the pop-up dialog window click Lock.

Enable End-to-End encryption for a group

Note: For users in multiple groups, the primary group takes priority over other groups, so make sure the policy is applied to the primary group that your users belong to for E2EE to work.

To enable End-to-End encryption for Zoom Phone calls for a group of users:

1. Sign in to the Zoom web portal.
2. In the navigation menu, click User Management, then Groups.
3. Click the Zoom Phone tab.
4. To the right of End-to-End Encryption, click the toggle icon to enable it.
5. (Optional) Click the lock icon  to make this setting mandatory, then in the pop-up dialog window click Lock.

Enable End-to-End encryption for a user

To enable End-to-End encryption for Zoom Phone calls for a specific user:

1. Sign in to the Zoom web portal.
2. In the navigation menu, click Phone System Management, then Users & Rooms.
3. Click the Users tab.
4. Click on the name of the desired user.
5. Click on the Policy tab.
6. To the right of End-to-End Encryption, click the toggle icon  to enable it.
7. In the pop-up dialog window, click Enable.