Meta is removing end-to-end encryption for private and direct messages on Instagram globally starting in May 2026 [1].

The move represents a significant shift in user privacy for millions of people. By removing the encryption that prevents third parties from reading messages, Meta gains the ability to access and monitor the content of private conversations.

Meta said the decision addresses child-safety concerns and pressure from law-enforcement agencies [1]. The company said that removing the encryption allows for better monitoring to protect minors and assist in legal investigations [1].

Privacy advocates and critics have responded negatively to the change. One critic said that ending end-to-end encryption is a “white flag to surveillance and a gift to their own AI training sets” [2]. These critics argue that the removal of this security layer enables broader surveillance, and allows Meta to harvest more data for its artificial intelligence models [2].

Instagram has officially pulled end-to-end encryption for direct messages [3]. The transition will be applied to the messaging platform worldwide [3].

This change marks a reversal of previous trends in the tech industry, where many platforms have moved toward default encryption to ensure user privacy. Meta's decision prioritizes safety and regulatory compliance over the technical guarantee that only the sender and recipient can read a message [1].

“Instagram has officially pulled end-to-end encryption (e2ee) for direct messages.”

This shift signals a prioritization of content moderation and regulatory cooperation over absolute user privacy. By making direct messages accessible, Meta can more easily comply with government data requests and implement automated safety tools, but it also removes the primary technical barrier preventing the company from scanning private user data for AI development and advertising profiles.