Zoom tries to buy its way out of its security problems

A woman looks at Zoom on a laptop.Zoom now boasts 300 million daily users, after seeing a surge in popularity in the pandemic. | Maja Hitij/Getty Images

The videoconferencing service has acquired Keybase to beef up its encryption offerings.

Zoom has bought Keybase, a small New York-based startup that offers various encryption products. This is Zoom’s first major acquisition in a campaign to reverse the company’s many security woes. Zoom did not disclose the terms of the deal, but it could be a bargain if it gets Zoom out of trouble.

You might know Zoom as the once-enterprise-focused video chat service that emerged as a hero in the early days of the coronavirus pandemic. Then, seemingly overnight, a spate of “Zoombombings” and privacy debacles cast it as a sort of villain, and just as quickly, tech giants like Facebook and Google swept in to swallow up Zoom’s customer base with their own competing products.

The Keybase acquisition seems like a good next move for Zoom. The acquisition comes just over a month after Zoom was widely criticized following an Intercept report that revealed that its end-to-end encryption claims weren’t exactly true. While text chats within video meetings were encrypted, the video chats themselves were not. Zoom now intends to fix that with Keybase’s technology.

The company has scrambled lately to fix this and a number of other problems. After Zoom became one of the most popular apps in the world — it currently boasts 300 million users a day — the company was also beset by numerous reports over its substandard or lax security measures. Children being “Zoombombed” by Nazi imagery and porn in their own virtual classrooms is not a good look.

So Zoom brought on former Facebook chief security officer Alex Stamos as a security adviser, announced a 90-day plan to shore up its security practices, and has rolled out multiple improvements. In the meantime, Facebook announced Messenger Rooms, and Google has expanded its Meet video chat service. Both companies stressed that the security of their products can be trusted, but with its Keybase acquisition, Zoom will have a few more security credentials to brag about, too.

If you were a fan of Keybase’s encrypted messaging and file-sharing services, by the way, the future may not be so bright. Keybase’s immediate plans do not appear to include anything but Zoom.

“Initially, our single top priority is helping to make Zoom even more secure,” Keybase said in a statement. “There are no specific plans for the Keybase app yet. Ultimately Keybase’s future is in Zoom’s hands, and we’ll see where that takes us.”

This might be especially galling to Keybase’s users, who are typically security-savvy — that’s why you’d use Keybase in the first place — and whose information is now likely owned by Zoom, as is standard with company acquisitions and spelled out in Keybase’s privacy policy.

The Zoom encryption service, whenever it becomes available, will only be offered to paying customers, Zoom said. So if you want your virtual happy hours with friends to be end-to-end encrypted, not to be accessed even by Zoom or law enforcement, you’ll have to pay for the privilege.


Support Vox’s explanatory journalism

Every day at Vox, we aim to answer your most important questions and provide you, and our audience around the world, with information that has the power to save lives. Our mission has never been more vital than it is in this moment: to empower you through understanding. Vox’s work is reaching more people than ever, but our distinctive brand of explanatory journalism takes resources — particularly during a pandemic and an economic downturn. Your financial contribution will not constitute a donation, but it will enable our staff to continue to offer free articles, videos, and podcasts at the quality and volume that this moment requires. Please consider making a contribution to Vox today.