Radio encryption rules depend entirely on which service your license covers. Public safety and business licensees under FCC Part 90 may encrypt, and on 700 MHz narrowband systems they must use the Advanced Encryption Standard on equipment built after August 11, 2014. Amateur radio operators are barred from sending messages meant to obscure their meaning. Personal services like GMRS and FRS prohibit coded or scrambled transmissions, and the FCC has blocked the sale of new equipment that could send them. The sections below walk through each service, the technical requirements, and the penalties for getting it wrong.
What Encryption Means in This Context
Encryption in modern land mobile radio applies a mathematical algorithm to a digital voice or data stream, producing output that cannot be reconstructed without the matching key. It only works on digital protocols such as Project 25 (P25), Digital Mobile Radio (DMR), and NXDN. Older analog voice scrambling, which simply rearranges audio frequencies, offers almost no real protection: anyone with a receiver supporting the same inversion scheme can undo it.
Two algorithm families dominate the licensed side of the spectrum. The Advanced Encryption Standard (AES), published by the National Institute of Standards and Technology as FIPS 197, supports 128-, 192-, and 256-bit keys and is the baseline the FCC now requires for P25 systems on the 700 MHz public safety band.1National Institute of Standards and Technology. FIPS 197 – Advanced Encryption Standard (AES)2eCFR. 47 CFR 90.553 – Encryption The older Data Encryption Standard (DES) uses a 56-bit key and can be broken by ordinary computer hardware in hours. Proprietary options like Motorola’s Advanced Digital Privacy (ADP) use a 40-bit RC4-based key and are marketed for casual privacy rather than sensitive operations.3Motorola Solutions. Supported Algorithms
Part 90 Rules for Public Safety and Business Radio
Encryption is permitted on Part 90 public safety and business frequencies, and the most detailed technical requirements sit in Subpart R, which governs the 700 MHz narrowband public safety spectrum. Three rules define what a compliant deployment looks like.
AES Is Required on Newer Equipment
Any transmitter manufactured after August 11, 2014 for these bands must support AES as specified in the ANSI/TIA-102.AAAD-A standard. Manufacturers may still include DES or Triple DES alongside AES for backward compatibility with older radios in the field, but not as a substitute.2eCFR. 47 CFR 90.553 – Encryption
DES Sunsets in 2030
After 2030, DES and Triple DES will no longer be permitted at all, even as a secondary option kept for legacy interoperability.2eCFR. 47 CFR 90.553 – Encryption Agencies still running DES-only radios on 700 MHz need a replacement plan before that date.
Interoperability Channels Must Stay in the Clear
The two nationwide interoperability calling channels cannot carry encrypted traffic. The FCC also effectively prohibits encryption on the VHF, UHF, and 800 MHz nationwide interoperability channels by requiring analog FM on those frequencies, so mutual-aid units from any jurisdiction can join the conversation.2eCFR. 47 CFR 90.553 – Encryption
Every Encrypted Radio Needs a Kill Switch
Radios that use encryption must have a readily accessible switch or control that lets the operator disable it on the spot, so a user can drop back to plain communication when interoperability demands it.2eCFR. 47 CFR 90.553 – Encryption
All Part 90 users need a valid FCC license for their frequencies, and their equipment must meet the applicable technical and emission standards.
Amateur Radio: Obscured Messages Are Banned
Amateur radio sits at the opposite end. Under 47 CFR 97.113, amateur stations cannot transmit “messages encoded for the purpose of obscuring their meaning.”4eCFR. 47 CFR 97.113 – Prohibited Transmissions The rule opens with “except as otherwise provided herein,” leaving room for narrow exceptions elsewhere in Part 97, but the general prohibition is unambiguous: encrypting voice or data to prevent other hams from understanding it violates your license.
The design premise is that amateur radio is an open, self-policing service. Operators listen to each other for interference, improper use, and technical faults, and encrypted traffic would defeat that oversight. Using encryption on amateur frequencies exposes an operator to license action and to the forfeiture penalties described below.
GMRS, FRS, and Personal Radio Services
The General Mobile Radio Service (GMRS) and Family Radio Service (FRS) both fall under Part 95, and neither allows encrypted or scrambled transmissions. GMRS stations may not send coded messages or messages with hidden meanings, although plain-language “10 codes” are permitted.5eCFR. 47 CFR Part 95 – Personal Radio Services
The FCC has also stopped the problem at the equipment level. Since December 2017, the Commission will not certify any transmitter that includes voice scrambling or other obscuring features for personal radio services that allow voice communications on shared channels.5eCFR. 47 CFR Part 95 – Personal Radio Services Some GMRS-capable radios sold today include a “descrambler,” but that feature is meant for receive-only monitoring of other bands where scrambling is allowed. Transmitting a scrambled signal on GMRS or FRS frequencies remains a violation no matter what the hardware can do.
Penalties for Violating the Rules
Operating outside the encryption rules for your service can bring forfeiture penalties under 47 U.S.C. § 503 of up to $10,000 per violation, with continuing violations capped at $75,000 for a single act or failure to act.6Office of the Law Revision Counsel. 47 USC 503 – Forfeitures Those figures are subject to periodic inflation adjustments. License revocation is available for repeat or serious violations, and the same 503 framework reaches amateur, Part 90, and Part 95 licensees.
A separate federal statute protects the content itself. The Electronic Communications Privacy Act at 18 U.S.C. § 2511 prohibits the intentional interception of wire, oral, or electronic communications, with penalties of up to five years in federal prison, a fine, or both.7Office of the Law Revision Counsel. 18 USC 2511 – Interception and Disclosure of Wire, Oral, or Electronic Communications Prohibited For encrypted radio traffic that means unauthorized decryption is a federal crime on top of any FCC licensing consequences.
The Interoperability Trade-off
Adding encryption without an interoperability plan is one of the most common mistakes in public safety communications. Neighboring agencies may run different algorithms or different keys, and mutual-aid responders arriving from outside the region may carry radios with no encryption module at all. Even with coordination, patching encrypted and unencrypted channels together can produce inadvertent in-the-clear transmissions that give away operational security.
This is the reason the FCC mandates the accessible kill switch on Part 90 encrypted radios and keeps the nationwide interoperability channels unencrypted. Agencies weighing encryption need a documented process for disabling it when the incident calls for it, and training so field personnel know which channels are protected and which are not.
Export Controls on Encrypted Radio Equipment
Buyers and manufacturers should be aware that U.S. export rules restrict sending high-level encryption technology overseas. The Export Administration Regulations, administered by the Bureau of Industry and Security, and the International Traffic in Arms Regulations both cover certain encryption products. Radios with AES-256 encryption intended for military or public safety use may require an export license depending on the destination country and end user. Domestic users rarely encounter these controls, but any organization operating internationally or selling to foreign agencies should verify compliance before shipping.