Meta to Read Your Instagram DMs: End of Encryption

March 24, 2026 Priya Shah – Business Editor Business

Meta Platforms is ending complete-to-end encryption for direct messages on Instagram, a move that will grant the company access to the content of users’ private conversations. The change, initially rolled out to a test group, is now being implemented for all users, according to multiple reports.

Currently, Instagram direct messages are protected by end-to-end encryption, meaning only the sender and receiver can read the content. Meta’s decision reverses a previous commitment to enhanced privacy for its messaging services. The company has stated the change is intended to improve safety features and combat the spread of harmful content, particularly to younger users.

Critics argue that removing encryption weakens user privacy and security, potentially exposing sensitive information to Meta and, by extension, to government requests or data breaches. 9to5Mac reported that the move leaves users more vulnerable, citing concerns about the potential for surveillance and misuse of personal data. Impakter noted that Meta will once again be able to access the content of all Instagram messages.

The shift aligns with Meta’s broader strategy of integrating its messaging platforms – Instagram, Messenger and WhatsApp – and leveraging user data for targeted advertising and content moderation. However, privacy advocates contend that these goals should not come at the expense of fundamental privacy protections.

Meta has not yet detailed the specific safety features that will be enabled by removing encryption, nor has it clarified how it will address concerns about data security and user privacy. The company has indicated that it will continue to invest in safety tools and resources for Instagram users.

The change is already prompting scrutiny from privacy organizations and lawmakers, who are questioning the implications for user rights and data protection. As of Tuesday, March 24, 2026, Meta has not responded to requests for further comment on the implementation of the policy change or its long-term impact on user privacy.