Meta’s removal of end-to-end encryption from Instagram direct messages, set for May 8, 2026, is drawing alarm from the privacy community. The change was announced through a subdued update to Meta’s help pages. Privacy experts warn that the decision has consequences that go far beyond Instagram.
Encryption on Instagram had been available since 2023, following Mark Zuckerberg’s 2019 promise. It required users to opt in and never attracted a significant audience. Meta has now used this low uptake as justification for removing the feature entirely.
After May 8, Meta will be able to read every Instagram DM. The company had previously been restricted from accessing messages sent by encrypted users. With that restriction removed, Meta’s access to private conversation data expands dramatically.
Law enforcement agencies across the globe had pushed for this outcome. The FBI, Interpol, and national agencies in Australia and the UK argued encryption was enabling child exploitation. Australia reportedly began enforcing the change before the global deadline, suggesting the rollback was already in progress.
Digital rights advocates argue that the consequences extend beyond Instagram users. By removing encryption, Meta sets a precedent that other platforms — and even regulators — may follow. Tom Sulston of Digital Rights Watch warned that commercial incentives will push Meta toward using private message data for advertising and AI, making this decision about far more than child safety.