To enable end-to-end encryption (E2EE) on both the LiveKit Android client and Python agent, follow these steps: Python Agent/Client 1. Configure

E2EEOptions

with your shared key and encryption type:

import logging
from livekit import rtc
from livekit.agents import JobContext

async def entrypoint(ctx: JobContext):
    e2ee_config = rtc.E2EEOptions(
        key_provider_options=rtc.KeyProviderOptions(
            shared_key=b"my_shared_key",
        ),
        encryption_type=rtc.EncryptionType.GCM,
    )
    await ctx.connect(e2ee=e2ee_config)

• All participants must use the same shared key. • You can manage keys and ratchet them for added security using the

e2ee_manager

after connecting. Android Client 1. Create a

BaseKeyProvider

and

E2EEOptions

before connecting:

val keyProvider = BaseKeyProvider(
    ratchetSalt = "LKFrameEncryptionKey",
    magicBytes = "LK-ROCKS",
    ratchetWindowSize = 16,
    sharedKey = true,
    failureTolerance = -1,
    keyRingSize = 16,
    discardFrameWhenCryptorNotReady = false
)
val e2eeOptions = E2EEOptions(
    keyProvider = keyProvider,
    encryptionType = Encryption.Type.GCM
)
room.e2eeOptions = e2eeOptions
keyProvider.setSharedKey("your_shared_key".toByteArray())
room.connect(url, token)

• Set the shared key before connecting. • Key management (enable/disable, ratcheting) is available via the E2EE manager. Key Management and Security Notes • You are responsible for securely generating, storing, and distributing encryption keys. LiveKit does not store or transport keys. • E2EE must be configured before connecting to the room. • Encryption applies to media tracks (audio/video), not signaling or data messages. Sources: examples/primitives/e2ee.py | livekit-rtc/livekit/rtc/room.py | livekit-android-sdk/src/main/java/io/livekit/android/e2ee/E2EEOptions.kt | End-to-end encryption | LiveKit Docs