In end-to-end encryption (E2EE), each user holds a key pair—the public key is used for encryption and the private key for decryption—and the private key never leaves the user's device.