Ring TAKE Encryption Explained: How It Works and When It Becomes the Default

Ring’s TAKE—short for “Throw Away the Key Encryption”—is a new video-encryption design from Amazon-owned Ring. It aims to solve a familiar smart-camera trade-off: keeping cloud-powered features available without allowing Ring to retain a permanent decryption key for stored footage. Ring says phased rollout begins in September 2026, and TAKE will become the default for all Ring customers worldwide once the rollout is complete. Optional end-to-end encryption (E2EE) will remain available. 56

How Ring TAKE works

Under TAKE, each recorded video is protected with a unique encryption key that rotates every five minutes. A temporary copy of the relevant key is placed in a protected cloud secure enclave—a restricted environment intended to limit how the key can be used. 57

Ring says its cloud systems can access the temporary key only when needed to perform an active feature that the customer has enabled, such as Smart Alerts, AI-generated video descriptions, or video search. After the task, Ring deletes the cloud-held key within 24 hours. The customer’s enrolled devices retain the keys, as do the enrolled devices of Shared Users authorized by the account owner. 58

The key distinction is what happens after deletion: Ring says it no longer has an enduring key that it could use to decrypt the retained video. That is the privacy promise behind the “throw away the key” name. 26

Is TAKE the same as end-to-end encryption?

No. TAKE is designed to provide stronger default protection while still allowing limited server-side processing. Because Ring’s cloud can temporarily access a key for enabled features, TAKE is not conventional E2EE. 45

Ring’s optional E2EE setting imposes a stricter technical limit: only enrolled customer devices hold the keys needed to decrypt videos. The trade-off is that features requiring cloud processing—including video search, video descriptions, and Smart Alerts—are unavailable, and Shared Users cannot access the footage through the usual cloud-based arrangement. Live view, playback, and ordinary video sharing remain available. 810

Customers will be able to manage the encryption mode in the Ring app on a per-device basis and switch between TAKE and E2EE. 8

What does TAKE mean for Ring, Amazon, and police access?

Ring says that once the temporary cloud key has been deleted, it cannot provide readable footage to Amazon, law enforcement, or another third party without the customer’s cooperation or consent, because Ring no longer possesses the necessary decryption key. 256

That protection is not an absolute block on access in every situation. While a temporary key is available for an enabled feature, Ring’s cloud can process the associated video. Customers can also choose to share footage with other people, law enforcement, or services such as the Neighbors app. Shared Users remain supported because the account owner can authorize their enrolled devices to receive video keys. 278

The supplied material does not establish every legal-process scenario or the exact controls governing every type of Neighbors sharing. The practical privacy outcome therefore depends not only on TAKE’s encryption design, but also on the customer’s sharing settings and choices.

Why Ring is making TAKE the default

Ring is positioning TAKE as a middle ground between conventional cloud access and full E2EE. It preserves cloud features that depend on temporary server-side processing, including:

• Smart Alerts for people, vehicles, and packages
• AI-powered video search and video descriptions
• Shared User access

Those features are restricted or unavailable under Ring’s E2EE mode. Making TAKE the default allows Ring to retain its cloud-based experience while reducing the company’s continuing ability to decrypt stored footage. 457

Technical documentation and privacy caveats

Ring has published a white paper describing the encryption upgrade, and reporting says TAKE is based on Messaging Layer Security (MLS), an IETF-developed open messaging standard. 58

The design addresses one major home-camera privacy concern: a cloud provider’s ability to access, analyze, retain, or disclose footage showing residents, visitors, and people passing a property. It does not eliminate every surveillance concern. AI analysis still involves processing enabled by the customer, and users can voluntarily distribute recordings through sharing features. 57

The strongest caveat is verification. Claims about secure-enclave restrictions, the 24-hour deletion window, and Ring’s inability to satisfy later footage requests depend on how the system is implemented and audited. The provided evidence identifies Ring’s white paper but does not establish independent security auditing of TAKE. That makes the announcement significant, while leaving implementation and auditability important questions for security researchers and customers.

New Ring doorbells announced alongside TAKE

Ring is also introducing its first battery-powered doorbell with 4K video, identified in the announcement as the Battery Doorbell Pro. The company is introducing three additional 2K doorbells for battery-powered and wired setups. The supplied evidence does not name those three models or establish their full specifications. 8

The bottom line

TAKE is best understood as a privacy-focused default rather than a replacement for E2EE. It uses rotating keys, temporary cloud access, and key deletion to limit Ring’s long-term ability to decrypt stored footage, while preserving features that require cloud processing. Customers who prioritize those features can use TAKE; customers who prioritize the smallest possible cloud access footprint can choose E2EE and accept its feature limitations. 568