Instagram is removing end-to-end encryption from DMs

Instagram is removing end-to-end encryption from direct messages tomorrow, May 8, 2026. The change affects the opt-in encrypted DM feature Meta introduced in December 2023. Once it is gone, Meta will regain the technical ability to read the content of every message sent on Instagram. Users who want to keep their conversations private have until the end of today to download any encrypted chats they want to keep.

Meta's official explanation is low adoption. "Very few people were opting in to end-to-end encrypted messaging in DMs, so we're removing this option from Instagram in the coming months," a spokesperson told The Guardian in March. The company is redirecting users who want encryption to WhatsApp, where it remains the default for all conversations. The feature was never set as a default on Instagram, never made available in all regions, and was buried in settings most users never accessed. Privacy advocates have pointed out that removing a feature because few people found it is not the same as removing it because few people wanted it.

The bigger picture

The removal lands 11 days before the Take It Down Act comes into force in the United States on May 19, 2026. The law requires platforms to detect and remove non-consensual intimate imagery, including AI-generated deepfakes, within 48 hours of receiving a takedown notice. A platform that cannot read message contents cannot scan them for prohibited material. Meta has not publicly connected the two events, but the timing has not gone unnoticed by security researchers and legal analysts.

That is not the only pressure Meta has been navigating. Law enforcement agencies, child safety groups, and governments across the US, UK, EU, and Australia have spent years pushing social media platforms to limit or remove encryption, arguing it shields criminal activity. Instagram has faced more of that pressure than most, given its younger user base and its track record of CSAM-related enforcement actions. WhatsApp, which has a more legally defined privacy expectation baked into its identity, is a harder target for the same argument. Applying that pressure there carries a higher political and reputational cost.

Without encryption, Meta can run automated scanning on DM content, respond to law enforcement subpoenas for message logs, and potentially use conversation data to inform advertising algorithms or train its AI systems. Meta has not confirmed plans to do any of this. The technical capability will exist regardless, and that distinction is what privacy advocates have been saying for years.

What to do before May 8

Users with encrypted DMs enabled will see instructions inside the Instagram app on how to download their message history and any shared media. Some users may need to update the app before the download tool becomes available, so checking for updates now rather than waiting is advisable. After May 8, all Instagram DMs will operate as standard unencrypted messages, visible to the platform in the same way Facebook Messenger messages are.

Anyone who wants to keep using encrypted messaging for private conversations should move those chats to WhatsApp or Signal. WhatsApp is Meta-owned but retains default end-to-end encryption across all messages and calls. Signal is independently operated, open-source, and widely regarded as the most private option available. Instagram remains a convenient platform for casual messaging, but it is no longer a private one for anyone who needs that protection.