e2ed - End to End for Discord Chrome extension security report

e2ed adds end to end encryption (e2ee) to Discord, in both direct messages and server channels. Encryption is password based. You and the other person agree on a password ahead of time and each enter the same password for that conversation. From that password, each side derives an identical AES-256-GCM key locally using PBKDF2. The password is never sent anywhere, so the keys match as long as the password matches. Both people need e2ed installed with the same password set as encryption can't happen one sided. How it works: - Click the lock icon in the message toolbar and enter the shared password. This works the same in DMs and in server channels. - Green means messages you send are encrypted. Red means encryption is off. Grey means no password has been set yet. - Incoming encrypted messages are decrypted in place once the matching password is set. - A short confirmation code lets both people check they typed the same password. - If an encrypted message is edited or no longer verifies, it is flagged instead of shown as trusted. Notes: - Only text messages are supported. Files, attachments, and images are sent to Discord as normal. - Custom Discord emojis, Unicode emojis, and any other text supported by discord work. - Your password is stored locally in your browser and never transmitted. You can actually clear all passwords from the extension. e2ed is an unofficial project and is not affiliated with or endorsed by Discord.