Instagram Kills Opt-In Encrypted Messaging
Instagram has permanently removed its end-to-end encryption (E2EE) feature for direct messages, reversing a years‑long promise to bring the privacy protection to all users by default. The feature, which was hidden behind a four‑step opt‑in process, was used by so few people that Meta decided to abandon it entirely.
“Very few people were opting in to end‑to‑end encrypted messaging in DMs,” a Meta spokesperson told reporters. “For those who want encrypted chats, we recommend using WhatsApp.” Privacy advocates say the move shifts blame to users rather than fixing the product.
Background: A Promise Left Unfulfilled
In a 2023 announcement, Meta boasted that it had successfully rolled out E2EE to Messenger and teased that Instagram was next. The company’s own 2022 white paper stated: “We want people to have a trusted private space that’s safe and secure, which is why we’re taking our time to thoughtfully build and implement e2ee by default across Messenger and Instagram DMs.”
Yet Instagram never enabled encryption by default. Instead, users had to manually toggle it on through a multi‑step menu—a barrier that ensured almost no one used it. Meta now says the feature’s low adoption justified its removal.
What This Means for Instagram Users
The loss of E2EE means that any direct message sent on Instagram can be read by Meta, law enforcement, or anyone who gains access to the company’s servers. While WhatsApp remains fully encrypted, the company is effectively telling users to switch platforms if they want privacy.
The decision is especially frustrating given that other tech giants are moving in the opposite direction. Google and Apple are working together to bring end‑to‑end encryption to standard RCS messaging. Signal continues to simplify its encrypted app for the masses. “Meta abandoning this principle is disheartening,” said one privacy researcher. “Instead of blaming users, the company should start by enabling strong privacy features by default.”
Users hoping for future Instagram encryption should not hold their breath. Meta has explicitly stated it will not support or develop the feature further. The broken promise joins a list of undelivered commitments, including default E2EE for Facebook Messenger group chats.
The bigger lesson: Defaults matter. When privacy is optional and hidden, most people will never find it. Meta chose to scrap the feature rather than make it the default.