Private channels and direct messages are encrypted automatically to known participant devices, beyond the controller's room key. Public channels are intentionally controller-readable so ForkBot, MCP, and incoming webhooks can participate.

In an end-to-end encrypted conversation, a new device can read messages addressed after its public key is learned but cannot retroactively open older history. Changing a channel to Public does not expose its previously encrypted messages.