Ring's New Encryption: Your Data, Your Control

Beginning this September, Amazon's Ring security brand is enhancing data encryption for its cameras, including video used for AI analysis such as generating on-device video descriptions.

This new approach, termed Throw Away the Key Encryption (TAKE), significantly increases transparency regarding Ring's cloud data handling practices. Previously, the specifics of Ring's access to customer videos for analysis were not fully clear, raising privacy concerns.

Under the TAKE system, videos are encrypted using rotating keys. Ring holds one copy of the key in a secure cloud enclave, accessible only under specific conditions. This key is used once to power active AI features like video descriptions or familiar face detection.

Following analysis, Ring deletes its copy of the key, permanently relinquishing access to that specific video footage. The company asserts it only trains AI models on publicly available videos or those with explicit user permission, which can be revoked at any time. Users retain the master key to their videos, ensuring continuous access until cloud storage limits are reached, with storage typically lasting 180 days.

Ring's founder, Jamie Siminoff, stated the goal was to achieve E2EE-like security while preserving expected device features. The existing end-to-end encryption mode, requiring a password and disabling most AI features, will remain available for users prioritizing maximum privacy.

The TAKE standard will be enabled by default for users with a Ring subscription, which is necessary for cloud storage. Subscriptions start at approximately $5 for a single camera, with advanced AI features and monitoring requiring a $20 plan.