Zoho's Arattai Gets Mandatory End-to-End Encryption Rollout
Zoho's Arattai messaging app gets mandatory E2E encryption

In a significant move for digital privacy, Zoho's homegrown messaging platform Arattai is undergoing a major security transformation with the implementation of mandatory end-to-end encryption across its entire system. The announcement came directly from Zoho co-founder and Chief Scientist Sridhar Vembu, who revealed the substantial update through social media.

Phased Rollout Strategy

In a detailed X post on Sunday, Vembu explained that the company has chosen to implement compulsory encryption for all users, beginning with one-to-one conversations before expanding to group chats. The transition requires a forced upgrade for all users due to the fundamental changes to the application's underlying architecture.

Vembu emphasized the complexity of this undertaking, noting that the shift demanded considerable redesign efforts and extensive internal testing. The scale of this change represents one of the most substantial updates since Arattai's initial launch, marking a pivotal moment in the platform's development.

Rigorous Testing Process

Currently, approximately 6,000 Zoho employees are participating in the testing phase of the updated application. Vembu shared that during initial testing cycles, engineers identified and resolved several technical issues, with another round of testing now underway on a fresh build.

If the final validation proceeds without complications, Zoho anticipates deploying the encryption update within days. The company chief highlighted that this would be a mandatory upgrade for all users because of the drastic architectural changes involved in implementing the new security framework.

Current Availability and Performance Enhancements

Interestingly, Vembu clarified that customers can already download the latest version of Arattai, which contains the necessary encryption code, though the feature remains inactive until testing concludes and Zoho officially enables it. The new build also delivers noticeable performance improvements, featuring a faster and more refined user interface.

The Zoho co-founder expressed gratitude to users for their patience as the company works toward delivering a more secure messaging experience. "If all goes well, we plan to deploy in a few days. It will be a forced upgrade on all because it is a drastic change," Vembu stated emphatically.

Technical Insights Revealed

Responding to technical queries from curious users, Vembu provided additional details about the encryption implementation. When asked about protocol-level changes by X user @personalfinx, Vembu explained that the protocol-level components function well as they represent stable code.

The primary challenges emerged in the mandatory switchover process and during larger file transfers. The co-founder noted that while the switchover process has been refined, the company remains cautious as it must execute this transition for millions of users simultaneously. Additionally, large file transfers cause memory issues specifically on Android devices, though iPhone functionality remains unaffected, with engineers currently addressing the Android-specific problem.

This comprehensive security upgrade positions Arattai among the growing number of messaging platforms prioritizing user privacy through end-to-end encryption, reflecting Zoho's commitment to providing enterprise-grade security for its communication tools.