Messages are encrypted at rest with a key derived from the room password. Server never stores the password; it is used transiently per request.
Share the room ID and password out-of-band with intended participants.
Share this invite code: