AI News Feed
Market watch
Cybersecurity

Ring's new TAKE encryption limits what it can give police

Ring is rolling out a new encryption standard, TAKE, that defaults on all cameras in September, limiting police access to video while keeping cloud features.

TAKE uses unique encryption keys that rotate every five minutes for each piece of footage. Ring stores copies of those keys inside an AWS Nitro Enclave, a secure hardware environment, and deletes each copy within 24 hours. According to a white paper published by Ring, the deletion is continuous and irreversible, with the database configured to have no backups.

Ring says the approach allows it to temporarily decrypt and process videos so it can offer intelligent features like Smart Alerts, which notify users when people, vehicles, or packages appear in the camera's view. “With TAKE, Ring delivers the intelligent features you love and rely on, like Smart Alerts, and then throws away and deletes the encryption key. Only you retain the keys to your video,” the company said in a blog post. A Ring spokesperson, Sam McGee, told The Verge that “Ring will only be able to provide non-video information … and encrypted video files in response” to law enforcement requests.

However, TAKE is not end-to-end encryption (E2EE). With E2EE, Ring never has the keys and cannot process video for cloud features. With TAKE, Ring has access to the keys for up to 24 hours and can receive the keys again when a user views older footage through the Ring app. Users of newer cameras that encrypt on-device can manually choose E2EE instead of TAKE; older cameras only support TAKE.

The change arrives during a year of intense scrutiny for Ring over its ties to law enforcement and the privacy implications of its facial recognition feature, Familiar Faces. In June, a class action lawsuit accused Amazon of storing images of passersby without consent. Ring says TAKE will roll out gradually from September and become the default for all customers worldwide, regardless of whether they have a subscription.

If a user loses access to their device, Ring says there are several recovery methods, including cloud backup via phone, a passphrase, a passkey, another authorized device, or standing near the camera. If all recovery methods fail, the encrypted content will remain inaccessible.