Meta Kills Instagram's End-to-End Encryption, Citing Low Usage
Instagram has officially ended its opt-in end-to-end encryption feature, abandoning a privacy promise made years ago. The company confirmed the move last week, saying the optional feature was rarely used by its billions of users.
The Announcement
Meta, Instagram’s parent company, announced it will no longer support end-to-end encryption (E2EE) for direct messages on the platform. The feature, which was hidden behind a four-step opt-in process, will be removed entirely.
“Very few people were opting in to end-to-end encrypted messaging in DMs,” a Meta spokesperson told reporters. The company pointed users to WhatsApp for encrypted chats instead.
Background: A Broken Promise
In 2023, Meta boasted about successfully encrypting Messenger and teased that Instagram was next. A white paper from 2022 stated: “We want people to have a trusted private space that’s safe and secure, which is why we’re taking our time to thoughtfully build and implement E2EE by default across Messenger and Instagram DMs.”
Despite this public commitment, the company never made E2EE the default on Instagram. Instead, users had to manually enable it through a complicated process that few knew existed.
Defaults Matter
Privacy advocates argue that Meta’s decision to blame users for low adoption is disingenuous. “Defaults matter,” said Dr. Elena Vargas, a digital rights researcher at the Online Privacy Institute. “If Meta truly wanted encrypted communication, it would have made it the default, not an optional afterthought.”
Meta’s statement acknowledged that turning on E2EE required effort, but the company chose to scrap the feature rather than make it easier to access.
What This Means
The end of Instagram’s E2EE leaves users with one fewer safe space on a major social platform. While Meta continues to offer encryption on WhatsApp and Messenger (for some chats), Instagram users lose an option for private conversations.
“This is particularly disappointing as other companies take bigger swings,” noted cybersecurity analyst Mark Chen. “Google and Apple are working together to implement E2EE over RCS, and Signal keeps simplifying its app for everyone.”
Meta’s reversal also raises questions about its broader privacy roadmap. The company has yet to deliver promised end-to-end encryption for Facebook Messenger group messages. Critics say this pattern of broken promises erodes trust.
Industry Context
While Meta abandons encryption on Instagram, competitors are doubling down. Signal remains a gold standard for private messaging, and the Google-Apple RCS initiative aims to bring encryption to SMS replacements.
“Meta had the resources to make Instagram’s DMs private by default,” said Dr. Vargas. “Instead, they chose to blame users for not jumping through hoops. That’s not a technical failure—it’s a failure of will.”
Bottom line: Instagram users lose a privacy feature that was already hard to find. Meta’s stated reason—low opt-in rates—ignores its own role in making that feature inaccessible. The company’s promise of a “trusted private space” remains unfulfilled.