Ring launches 'self-destructing' encryption to limit police access
The new TAKE system deletes decryption keys after 24 hours, balancing cloud AI features with user privacy.
Amazon-owned Ring is introducing a new encryption standard called Throw Away the Key Encryption (TAKE) as the default for all customers starting in September. The move creates a technical window that limits the company's ability to hand over video footage to authorities.
Under the TAKE system, Ring utilizes unique, rotating encryption keys that change every five minutes of recorded footage. These keys are stored within an AWS Nitro Enclave, where they remain accessible for 24 hours. Once that window expires, Ring permanently deletes the keys, rendering the associated video files undecipherable to the company.
As a result, Ring will be unable to provide decrypted video to law enforcement via legal process once the 24-hour period has passed. Ring will only be able to provide non-video information and encrypted video files in response to valid legal processes after that window closes.
Balancing AI and Privacy
This implementation arrives after years of scrutiny regarding Ring's partnerships with law enforcement and the privacy risks associated with its cloud infrastructure. While the company previously offered traditional end-to-end encryption (E2EE), that setting forced a trade-off: users gained total privacy but lost the cloud-based AI features that define the product, such as smart alerts and AI-driven video search.
TAKE was developed specifically to bridge this gap. By maintaining the keys for a short duration, Ring can still process video in the cloud to power its smart features while ensuring that the data does not remain accessible indefinitely.
Industry Implications
The shift represents a significant change in how cloud-camera providers manage the tension between user privacy and government access. By implementing a "self-destructing" key mechanism, Ring is moving away from a model of permanent data accessibility toward one governed by technical barriers.
For the industry, this suggests a move toward "ephemeral access" models. Ring is effectively automating its refusal to comply with subpoenas for older footage by ensuring the means to decrypt that footage no longer exists. This allows the company to maintain the high-value AI services that drive its market position without maintaining a permanent library of decryptable user data.
What to Watch
As the rollout begins in September, the primary focus will be on whether this technical barrier holds up under legal pressure and how it affects the volume of video evidence provided to police. While the system is designed to prevent retrospective access, the 24-hour window remains a critical point of vulnerability for users who may be targeted by rapid legal requests.