Meta Removes End-to-End Encryption from Instagram Direct Messages
AI-generated from multiple sources. Verify before acting on this reporting.
SAN FRANCISCO — Meta on Sunday removed end-to-end encryption for direct messages on Instagram, reversing a security feature that had been available to users for several years. The change affects millions of accounts that previously enabled the privacy setting, leaving direct communications vulnerable to scanning by the platform.
The company stated the decision was driven by the low adoption rate of the encryption feature and the technical complexity of maintaining separate messaging systems. Meta said the move would streamline operations and improve the consistency of user experience across its global network.
However, the timing of the announcement has drawn scrutiny from privacy advocates and legal analysts. The decision coincides with the implementation of the U.S. Take It Down Act, legislation that requires social media platforms to retain the ability to access user content for moderation purposes. Critics argue that removing end-to-end encryption is a necessary step for Meta to comply with the law, which mandates that platforms can detect and remove illegal content.
End-to-end encryption ensures that only the sender and recipient can read messages, preventing even the service provider from accessing the content. By disabling the feature, Meta regains the ability to scan messages for policy violations, including child sexual abuse material and other prohibited content.
The change was implemented on May 11, 2026, and applies to all Instagram users in the United States and globally. Users who had previously enabled the feature were notified that their messages would no longer be encrypted. Meta said it would not be able to restore the feature in the future.
Privacy groups have expressed concern over the move, warning that it sets a dangerous precedent for digital privacy. The Electronic Frontier Foundation said the decision undermines user trust and weakens security for millions of people.
Meta has not commented on whether the change was influenced by the Take It Down Act. The company has previously stated that it prioritizes user safety and compliance with local laws.
The move has also raised questions about the future of encrypted messaging on other platforms. WhatsApp, which is also owned by Meta, continues to use end-to-end encryption for all messages. Analysts say the decision to remove the feature from Instagram but not WhatsApp could create confusion among users.
It remains unclear whether Meta will face legal challenges over the decision. The Take It Down Act has been criticized by civil liberties groups for infringing on user privacy. The outcome of any potential lawsuits could have significant implications for the future of encrypted messaging on social media platforms.
Meta said it will continue to invest in safety tools and moderation capabilities to protect users from harmful content. The company has not announced any plans to reintroduce end-to-end encryption for Instagram direct messages.