Instagram DMs aren't end-to-end encrypted, starting today

Instagram has officially pulled end-to-end encryption (e2ee) for direct messages.

The privacy feature, which prevents messages from being intercepted and read in transit between users, was previously an opt-in setting for Instagram users. Now, all chats will be under standard encryption. Under the latter, service or network providers can potentially access messages.

Meta announced an investment in end-to-end encryption in 2019, with plans to roll out the feature as a default chat setting across its platforms, including Messenger and Instagram. But the company has since reversed its course under wider industry pressure.

The platform quietly announced the feature would be retired in March, with a spokesperson explaining that the decision was spurred by low usage. Privacy groups have raised alarm about tech giants turning over private user communications to law enforcement and for use in AI training — Meta has said it does not use private messages to train its AI models.

Other online safety groups have welcomed greater transparency to improve platform moderation, including those fighting against the proliferation of child sexual abuse material (CSAM) and child predator networks.

I had end-to-end encryption on. What do I do now?

For those who still want the privacy of end-to-end encryption, the company has recommended users turn to WhatsApp or Meta's standalone Messenger app, which still offers the feature.

Meta also said it notified users who had end-to-end encryption turned on in chats with friends, prompting them to download their chat histories and media. Users may need the latest app update to archive their encrypted chats, the company noted.