Instagram Abandons End-to-End Encryption Promises, Citing Low User Opt-In

Breaking: Instagram Pulls Plug on Encrypted DMs

Instagram has quietly ended its opt-in end-to-end encryption feature for direct messages, effectively breaking a years-old promise to make the platform's communications more private. The move, confirmed by parent company Meta on Tuesday, means that users will no longer have the option to enable in-transit encryption for their Instagram DMs.

Meta originally committed to rolling out default end-to-end encryption across all its messaging platforms, including Instagram and Messenger, by 2023. In a 2022 white paper, the company stated: “We want people to have a trusted private space that’s safe and secure, which is why we’re taking our time to thoughtfully build and implement e2ee by default across Messenger and Instagram DMs.”

Instead, the company reversed course, citing a lack of user adoption. In a statement, Meta claimed: “Very few people were opting in to end-to-end encrypted messaging in DMs.” The feature required a four-step opt-in process that was poorly advertised, making the low adoption rate unsurprising to many observers.

“Defaults matter,” said Dr. Elena Torres, a digital privacy researcher at the Center for Secure Communications. “Meta’s choice to blame users instead of addressing the cumbersome setup process is a clear abdication of responsibility.”

Background: A Promise Unfulfilled

Meta first teased end-to-end encryption for Instagram DMs in 2021, following its rollout of the same technology in Messenger. The company issued a 2022 white paper detailing its commitment to privacy, and in 2023 announced that Messenger had successfully encrypted messages by default—but Instagram lagged behind.

Users could enable encryption by navigating through multiple menus, a process known to few. The feature was never made default, and now it has been removed entirely. Meta directed users to WhatsApp for encrypted messaging, but Dr. Torres noted: “If Meta truly wanted people to have a trusted private space, it would meet them on all platforms—not shunt them to a separate app.”

Meanwhile, competitors have advanced. Google and Apple are collaborating to bring end-to-end encryption to Rich Communication Services (RCS), while Signal continues to simplify its encrypted messaging for everyday users.

What This Means for User Privacy

The abandonment of Instagram’s encrypted DMs leaves millions of users without an optional privacy layer. With no default encryption, conversations on Instagram remain vulnerable to interception by Meta, hackers, or law enforcement. The decision also undermines trust in Meta’s broader privacy commitments, as other features like group message encryption in Messenger remain pending.

“This is particularly disheartening because Meta was straightforward about dropping the feature,” said Dr. Torres. “Most companies simply let promises go unfulfilled. At least here, the broken promise is explicit—but that doesn’t make it any less damaging.”

The move also signals a broader trend: tech giants may back away from privacy enhancements if they do not see immediate user buy-in, even when the feature is poorly implemented. Security advocates argue that the onus should be on companies to make encryption seamless and default, not on users to jump through hoops.

For now, Instagram users who want end-to-end encryption must use WhatsApp or third-party apps. But for many, the loss of an opt-in option on one of the world’s largest social platforms is a significant step backward in the fight for online privacy.