What this means: Meta discontinues end-to-end encryption for Instagram direct messages

Meta Platforms has decided to discontinue end-to-end encryption for direct messages on Instagram after May 8, removing a privacy feature that was introduced less than three years ago.

Instagram had launched optional end-to-end encryption (E2EE) for one-on-one direct messages in December 2023. The feature was available only in selected countries and had to be manually enabled for each chat. This was different from the default encryption used in WhatsApp and Facebook Messenger.

After May 8, encrypted chats will revert to standard transport security, which means Meta will be able to access message content for moderation and safety scanning. Users will receive notifications within the app asking them to export their encrypted chats and media before the deadline. If users fail to download their data before the cutoff, their private encrypted chat history will be permanently lost. Some users may also need to update older versions of the app to access the message export option.

The decision follows Meta’s move in 2024 to abandon plans to roll out full end-to-end encryption for Facebook Messenger. The company has increasingly prioritised safety and moderation capabilities over fully private messaging as it faces legal scrutiny and regulatory pressure over harms linked to its platforms.

Once encryption is removed, Instagram will be able to analyse direct messages for content moderation and targeted advertising purposes. The company has not issued a detailed public statement beyond updating a support page, though reports suggest that the feature saw relatively low user adoption.

Another key factor behind the decision is growing regulatory pressure around child safety. Removing end-to-end encryption will allow Instagram to deploy automated tools designed to detect child sexual abuse material, grooming behaviour and threats in private messages, helping the platform comply with regulations in the United States and Europe.

The change could have major implications in markets such as India, where Instagram has an estimated user base of about 400 million people and where authorities have recently introduced stricter digital privacy rules under the Digital Personal Data Protection Act 2023.