Loading story…
Meta said it will discontinue Instagram’s optional end-to-end encrypted direct messages on May 8, 2026, ending a feature introduced in 2023 after reporting that few users enabled it. After the cutoff, Instagram DMs will rely on standard transport encryption instead of end-to-end encryption, allowing message content to be decrypted on Meta’s servers. Users with existing encrypted threads are being notified to save or export content they want to keep before the feature is turned off, and Meta has pointed privacy-conscious users toward WhatsApp for encrypted messaging.
The change has triggered criticism from privacy advocates, who warn that server-readable messages expand the risk surface for breaches, internal access, moderation scanning, and legal disclosure. Reports also say the move could make private message content more available for automated processing and other internal uses, though Meta’s public rationale focused on low adoption and operational needs rather than explicitly confirming advertising or AI training. The decision also contrasts with earlier public commitments by Meta leadership favoring broader deployment of private, encrypted communications.
See the reporting duties and controls this puts on the clock.
7 events from the most recent confirmed update back to the earliest known activity.
After Instagram removed optional end-to-end encrypted direct messages, the Global Encryption Coalition publicly criticized Meta's decision, arguing encryption is fundamental to safety and human rights and should have been made default rather than eliminated. Proton editor Edward Komenda also warned the change could expose sensitive messages to Meta for analysis, advertising, AI training, or sharing with third parties, while questions remained about the fate of existing encrypted chats.
On May 8, 2026, Instagram's optional end-to-end encrypted direct messages are set to stop working, after which DMs will use standard transport encryption instead of end-to-end encryption. This means message contents can be decrypted on Meta's servers for functions such as moderation and compliance.
Ahead of the cutoff, Meta started prompting affected Instagram users to export or save content from encrypted chat threads before the feature is shut down. These notices were tied to the impending removal of encrypted DM support.
Meta announced that Instagram will discontinue its optional end-to-end encrypted direct message feature on May 8, 2026, citing very low user adoption. The company also pointed privacy-focused users toward WhatsApp for end-to-end encrypted messaging.
Meta indicated on a help page in March 2026 that Instagram's optional end-to-end encrypted direct messages would be discontinued. The notice also said users with encrypted threads would receive prompts about saving content they wanted to keep.
Meta initially launched optional end-to-end encryption for Instagram direct messages, making encrypted chats available as an opt-in feature rather than the default. Later reporting said adoption remained very low.
Mark Zuckerberg publicly argued for stronger encryption across Meta's messaging platforms, framing private communications as an important direction for the company. This serves as an earlier baseline before Instagram later reversed course on encrypted DMs.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
6 references tracked. Mallory keeps watching after this page renders.
securityaffairs.com
Open sourcehelpnetsecurity.com
Open sourceghacks.net
Open sourcetheregister.com
Open sourcecybersecuritynews.com
Open sourceboingboing.net
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
**Meta** said it will discontinue **end-to-end encryption (E2EE)** for Instagram direct messages after **May 8, 2026**, reversing an earlier privacy push that began with testing in 2021 and a limited rollout in 2023. The feature was never enabled by default, remained available only in some regions, and Meta said adoption was low. Users with affected encrypted chats are being told to download messages and shared media before the cutoff, and some may need to update the Instagram app to export that data. The change means Instagram DMs that had been protected by E2EE will revert to a standard format accessible to Meta for moderation and other internal purposes. Reporting also notes broader tension around encrypted messaging: privacy advocates and researchers criticized the rollback as a retreat from user privacy, while child-safety and law-enforcement voices have long argued that E2EE can hinder detection of **CSAM**, terrorist content, and other abuse. The move follows years of debate inside and outside Meta over whether stronger message privacy should outweigh platform safety and compliance concerns.
Jun 29, 2026
Meta has launched **Incognito Chat** for Meta AI on WhatsApp and the standalone Meta AI app, introducing a private conversation mode that the company says even Meta cannot access. The feature is built on WhatsApp’s **Private Processing** technology, which Meta says handles prompts in a secure environment, avoids storing conversations on its servers, and deletes messages by default when the session ends. Meta published a technical whitepaper on the system and said the feature will roll out gradually over the coming months. The launch extends WhatsApp’s privacy positioning into AI interactions and arrives amid broader regulatory and public scrutiny over how AI assistants embedded in messaging platforms handle user data. Meta also announced **Side Chat**, an upcoming WhatsApp capability that will use the same Private Processing approach to provide AI help inside ongoing conversations without disrupting the main chat, though the company has not yet provided a firm release date or clarified whether availability will be global or limited by region.
Jun 29, 2026
Meta launched an Instagram AI capability powered by its **Muse Image** model that let users generate images from text prompts, uploaded photos, and references to public Instagram accounts, including posts and Reels invoked through `@` mentions. The feature was made available through Meta AI surfaces including the web, iOS and Android apps, and chats in Instagram and WhatsApp, as part of a broader push of AI creative tools and Story effects. Meta then removed the public-account image reference feature after backlash over privacy and misuse risks, saying public feedback showed it had "missed the mark." Critics warned that public Instagram content could be repurposed into misleading or unflattering images without meaningful consent, and SAG-AFTRA urged members to opt out; researcher Neal K. Shah also cited scam ads allegedly using his likeness. Meta said users had controls in Instagram's **Sharing and reuse** settings to limit reuse of Posts, Reels, and original audio, and it kept the rest of its AI creative features online while discontinuing only the public-account reuse function.
Jul 11, 2026