End-to-end encrypted rooms. The server only ever relays ciphertext — it never sees your passphrase or your messages.
Pick a passphrase, then share the room ID and this passphrase with the other person over a different channel (Signal, in person, etc).
Enter the room ID and passphrase you were given.