Skip to main content

Encrypted Mesh Communications

Overview​

Reference material for the Encrypted Mesh Communications tool/feature in ATAK, sourced from the official ATAK 5.7 Software User Manual (chapter 14, "Encrypted Mesh").

Manual Reference​

Enhanced security for all communications can be configured on a mesh network in ATAK. An AES-256 encryption key is generated on one device and is then shared with other devices that require encrypted communications. Once enabled, encrypted devices can securely communicate with one another and exchange SA, Chat, Data Packages, etc. Encrypted devices cannot communicate on the mesh network with non-encrypted devices and vice versa. This feature provides an additional level of security for advanced users.

Encrypted Mesh Communications — figure 1 (manual p. 57)

To configure encryption, navigate to Settings > Network Preferences > Network Connection Preferences > Configure AES-256 Mesh Encryption.

Select the Generate Key button to create an encryption key, enter the desired file name and select OK. The encryption key is saved in the atak/config/prefs folder and can be added to a Data Package to be shared with other users (prior to enabling encryption on the device) or can be preloaded onto the devices. At the time the key is generated, the user has the option to load the key immediately.

Encrypted Mesh Communications — figure 2 (manual p. 57)

To load an encryption key, select the Load Key button and navigate to the location of the key file. Select the Forget Key button to remove the key and revert to unencrypted traffic.

Encrypted Mesh Communications — figure 3 (manual p. 57)

Source​

ATAK 5.7 Software User Manual, 13 March 2026 (Unclassified), pages 57–57.