Product1 distinct publisher2 min readPublished
Ring's new TAKE encryption deletes its own copy of video keys within 24 hours, reshaping what law enforcement can legally obtain from the cloud.
The Product Desk · Product desk
Compiled by The Product DeskSomething wrong?How this is made
The mechanism matters more than the name. TAKE is built on Messaging Layer Security, an open IETF standard [6]. Under that design, a single camera's footage cycles through 288 separate five-minute keys over one day [4][16], each one purged by a database that keeps no backups [10][13].
That timing, not the encryption itself, is the real shift. A request that reaches Ring within a day of recording could in theory still be paired with a live key, but a request for footage from last month arrives at an encrypted file with no key anywhere left to open it, according to Ring [10][13]. Ring's own framing acknowledges the limit: the company says it will hand over only non-video information and encrypted files, according to spokesperson Sam McGee [3], while conceding this does not fully remove the privacy trade-off of a cloud-based camera [17]. It is not end-to-end encryption, because Ring temporarily holds a copy of every key inside an AWS Nitro Enclave, unlocked only when its own attestation process confirms a request came from software it approved [5][8][9]. Key delivery is push only, so Amazon's servers cannot pull a key from a device without the customer asking first [11].
The commercial logic behind the compromise is plain. Before TAKE, Ring decrypted footage in the cloud to run its smart features after encrypting it only in transit and at rest [15]. Ring wants to keep selling AI powered search, package alerts and video descriptions, features that still require the cloud to process footage [2]. Full end-to-end encryption, which Ring already offers on newer cameras [7], breaks those features outright because Ring never holds a key at all. TAKE lets Ring claim it limits police access while keeping the processing pipeline its subscription business depends on.
Making TAKE the default for every customer, subscription or not, sets that compromise as the baseline for the largest home camera network with direct law enforcement partnerships [1][14]. Any other cloud video product now making a similar privacy claim has a concrete bar to clear: a stated deletion window and a documented enclave, not just a promise.
Ranked by verification strength, evidence, and original report placement.
TAKE still supports smart alerts for people and packages, AI-powered video search, and video descriptions.
Ring's new TAKE encryption is rolling out gradually starting in September and will become the default encryption for all Ring customers, regardless of subscription.
Ring says that under TAKE it will only be able to provide non-video information and encrypted video files in response to requests.
With TAKE, content encryption keys change for every five minutes of footage.
TAKE is not end-to-end encryption; unlike E2EE, where Ring never has the keys and cannot process video, Ring temporarily holds copies of the keys under TAKE.
TAKE was developed using Messaging Layer Security, an open standard from the Internet Engineering Task Force.
Follow any of these and your For You feed starts watching them — no settings page required.
Evidence-backed comparisons of source perspectives and observed adoption signals. Read the methodology
Which Builder, Operator, and Investor concerns the observed source mix emphasized—not a truth score.
Evidence, demonstrated adoption, hype gap, incentives, and confidence are assessed independently, each on its own current evidence. How these are measured.
Detailed primary disclosure, single outlet, no external verification
The cluster rests on one publisher, but that publisher works from two primary artifacts: a same-day Ring white paper quoted directly on key rotation, enclave attestation and ratcheting deletion, plus on-the-record spokesperson statements about the 24-hour window and legal-process scope. Specificity is high and internally consistent. What is missing is any independent check: no third-party audit, no security researcher, no adversarial testing of the no-employee-access or irreversible-deletion assertions, which is why two of the load-bearing technical claims are marked insufficient.
Announced default rollout, no deployment evidence yet
Adoption evidence is announcement-stage only. The rollout is described as gradual and starting in September, i.e. after publication, and default-on status means uptake will be pushed rather than chosen. There are no installed-base figures, no share of cameras migrated, no opt-out rates, and no third-party confirmation that TAKE is live on any device, so this scores low despite the broad eventual scope.
Vendor framing overstates key exclusivity; reporting partly corrects it
Ring's promotional language - 'leaving you with the keys and full control of your videos' and 'only you retain the keys to your video' - overstates the guarantee relative to the disclosed mechanics, since Ring holds key copies for up to 24 hours, can receive them again whenever a customer views older footage, and continues to decrypt footage in the cloud for feature processing. The gap is modest rather than severe because the same article states plainly that TAKE is not E2EE, that E2EE remains the stronger option, and that the cloud trade-off persists.
Self-reported architecture from a vendor under active privacy scrutiny
Every technical property in this story originates with Amazon-owned Ring - its own white paper and its own spokesperson - and lands during a year of criticism over police partnerships and the Search Party feature, giving the company a direct reputational and commercial interest in how the design is characterized. Ring also states its main reason for building TAKE rather than expanding E2EE is to preserve cloud-processed features, which are the same features that anchor its cloud and subscription product. No independent party in the supplied material has an incentive to test the claims.
Moderate - strong primary detail, no corroboration or usage data
Confidence is capped by structure rather than sloppiness. The reporting is specific, quotes primary documents, and flags its own limits, which supports the descriptive claims about what Ring says and ships. But there is one publisher, zero independent verification of the cryptographic guarantees, and no post-rollout evidence, so claims about real-world key destruction and real-world limits on law-enforcement production cannot yet be held with high confidence.
product
Google's Pet Memory names your pets, then calls all three cats Smokey1 distinct publisher
product
A $103,265 fee turns every H-1B hire into a capital approval1 distinct publisher
invest
Amazon stopped eating the memory bill, and the Echo Dot went up 60%1 distinct publisher
product
Amazon puts forced arbitration back in its terms, and rival legal teams will ask for a copy1 distinct publisher
Distinct publishers with included, body-backed reporting in this cluster.
1 article · August 26, 2026