No. Instagram DMs are not end-to-end encrypted. Instagram's Help Center says end-to-end encrypted messaging "is no longer supported as of 8 May 2026", which ended the opt-in encrypted chats Meta had offered in some regions since 2021. Every Instagram direct message, including Vanish Mode messages, now reaches Meta's servers in a form Meta can read. Meta says it made the change because "very few people" used the feature, and it points anyone who wants encryption to WhatsApp.
| App or chat type | End-to-end encrypted? |
|---|---|
| Instagram DMs (since 8 May 2026) | No: Meta can read message content |
| Instagram encrypted chats (2021 to May 2026) | Opt-in only: per chat, in some regions, never the default |
| Facebook Messenger personal chats and calls | Yes: default since December 2023 |
| WhatsApp chats and calls | Yes: default for every chat and call |
| TikTok DMs | No: TikTok told the BBC in March 2026 it won't add it |
Sources: Instagram Help Center, as quoted by Security Affairs, 11 May 2026; Launching Default End-to-End Encryption on Messenger, Meta, 6 December 2023; TechCrunch, 4 March 2026.
What Changed on 8 May 2026
Meta didn't announce the change with a blog post. In March 2026 it updated an Instagram Help Center page, first published in 2022, to say end-to-end encrypted messaging would no longer be supported after 8 May 2026. The Hacker News and Help Net Security picked it up within days, and Meta confirmed it to reporters. On 8 May the page changed again: "End-to-end encrypted messaging on Instagram is no longer supported as of 8 May 2026."
For most Instagram users nothing visible happened, because most people never had an encrypted chat. For people who did turn the feature on, the protection simply stopped. Their conversations continue as ordinary Instagram DMs, the same kind Meta has always been able to read.
How Instagram's Encrypted Chats Worked
Meta began testing end-to-end encryption for Instagram DMs in 2021, as part of the "privacy-focused vision for social networking" Mark Zuckerberg set out in 2019. It never became the default. You had to start a separate encrypted chat with someone, and the option was only available in some regions.
The one broad expansion came in February 2022, a few weeks after Russia invaded Ukraine, when Meta made encrypted Instagram DMs available to all adult users in both countries. That is a telling detail: the company opened encryption up to everyone where the risk of messages being read was obvious, and left it as a limited option everywhere else.
Meanwhile Messenger went the other way. In December 2023 Meta made all personal Messenger chats and calls end-to-end encrypted by default, built on the Signal Protocol and Meta's own Labyrinth protocol for encrypted message history. Instagram was expected to follow. It didn't.
Why Meta Says It Removed Encrypted DMs
Meta's explanation is short. A spokesperson told reporters: "Very few people were opting in to end-to-end encrypted messaging in DMs, so we're removing this option from Instagram in the coming months. Anyone who wants to keep messaging with end-to-end encryption can easily do that on WhatsApp." Meta has not published how many people used the feature.
The timing sits inside a wider fight over encrypted messaging on social apps, though Meta has not linked its decision to any of it:
- Child safety pressure. Groups such as the UK's NSPCC and National Crime Agency have argued for years that encryption on social platforms makes grooming and abuse material harder to detect. Reuters reported in February 2026 that Meta pressed ahead with encrypting Messenger despite internal warnings from 2019 about exactly that, and Platformer and Reuters reported an internal Meta analysis projecting that default encryption could cut its reports to the US National Center for Missing & Exploited Children by about 65%.
- TikTok. In early March 2026, days before Meta's Help Center change, TikTok told the BBC it would not add end-to-end encryption to DMs, arguing that it would stop its safety teams and police from reading messages when needed.
- The TAKE IT DOWN Act. The US law, signed in May 2025, requires platforms to remove reported non-consensual intimate images within 48 hours, with compliance systems due by 19 May 2026, eleven days after Instagram's cutoff.
- The EU. In March 2026 the European Parliament voted to extend temporary rules that let platforms voluntarily scan for child sexual abuse material until August 2027, while the permanent law is still being negotiated.
Critics rejected the low-uptake argument. The Center for Democracy & Technology urged Meta to reverse course, saying "without default encryption, millions of Instagram users are left exposed to surveillance." Open Terms Archive called the feature "built to fail": an option buried behind a separate chat type, available only in some places, will always have low uptake, whatever people actually want.
What Happened to Old Encrypted Chats
Before the cutoff, Instagram showed people with encrypted chats "instructions on how you can download any media or messages you may want to keep", and warned that some would need to update the app first. That was the only guidance Meta gave.
Meta has not said publicly whether the old encrypted threads were deleted, left inaccessible, or converted into ordinary readable chats, a gap Proton and others pointed out on the day. What we can say from how end-to-end encryption works: messages that were encrypted with keys held only on your devices could not be decrypted by Meta after the fact, unless a device or backup that held the keys gave them up. Anything you downloaded is now a plain file on your device, so keep it off cloud storage if it was sensitive.
What Meta Can Now See in Instagram DMs
Without end-to-end encryption, Instagram DMs are protected in transit but readable on Meta's servers. That means Meta can:
- Scan message text, photos, videos and voice messages for policy violations, spam and abuse, as TikTok and Discord do with their DMs
- Review messages that someone reports
- Hand message content to law enforcement in response to valid legal requests, which it couldn't do for encrypted chats
- See metadata such as who you message, when and how often, which it could see even when chats were encrypted
Whether ordinary Instagram DMs feed Meta's AI or advertising systems is a question Meta has not answered for this change. Its privacy policy update in December 2025 did say that interactions with Meta AI, including inside private conversations, may be used to personalise ads. If you mention @Meta AI in a chat, treat that part of the conversation as something Meta uses. We looked at how messaging apps use chats for AI in AI and your chats.
Vanish Mode doesn't change any of this. It removes messages from the chat after you leave it, but a disappearing message is not an encrypted one; we explain the difference in are disappearing messages really safe?
Instagram vs Messenger vs WhatsApp
Meta now runs three messaging products with three different answers to the same question:
- WhatsApp: every chat, group and call is end-to-end encrypted by default with the Signal Protocol, and there is no way to turn it off. Its weak points are phones, phone numbers and metadata, as our WhatsApp security incident timeline shows.
- Messenger: personal chats and calls have been end-to-end encrypted by default since December 2023. Meta told reporters that end-to-end encryption remains available on Messenger after the Instagram change.
- Instagram: not end-to-end encrypted at all since 8 May 2026.
The practical upshot: the same person can be safe talking to you on WhatsApp and fully readable to Meta on Instagram. Which app a conversation happens in matters more than which company runs it. Our list of end-to-end encrypted messaging apps covers the rest.
The Opt-In Problem
Instagram isn't the first app where optional encryption went nowhere. Telegram has offered end-to-end encryption only in opt-in Secret Chats since 2013, and they still don't cover groups or sync across devices; we cover that in is Telegram end-to-end encrypted? Facebook's own Secret Conversations sat behind a menu for years before Messenger made encryption the default.
The pattern is consistent. When encryption is a setting, most people never find it, the encrypted chat lacks features the normal one has, and the low numbers become the argument for removing it. When encryption is the default, as on WhatsApp, Signal and iMessage, it protects everyone, including the people who would never have thought to turn it on and the ones who most need it. Instagram's history in Ukraine and Russia shows Meta understood the stakes: it opened the feature to every adult there when it mattered, but even then people still had to turn it on.
There's a second lesson. A feature controlled by a single company can be withdrawn with a Help Center edit. End-to-end encryption that is built into how an app works, rather than layered on as an option, is much harder to quietly take back.
What to Do If You Use Instagram DMs
- Assume Instagram DMs are readable by Meta. Don't send passwords, ID documents, bank details, medical information or anything you'd regret appearing in a legal request.
- Move sensitive conversations to an app that encrypts by default. WhatsApp and Signal for personal chats; for teams and communities, a tool whose group chats are end-to-end encrypted too.
- Keep downloaded encrypted chats local. If you exported old encrypted threads, they are now plain files. Don't upload them to Google Drive or iCloud if the content was sensitive.
- Don't rely on Vanish Mode for privacy. It limits what stays in the chat, not what Meta can see while the message passes through.
- Be careful with Meta AI in chats. Messages you send to Meta AI are processed by Meta and may be used to personalise ads.
Frequently Asked Questions
Are Instagram DMs end-to-end encrypted in 2026?
No. Instagram's Help Center says end-to-end encrypted messaging on Instagram is no longer supported as of 8 May 2026. Instagram DMs are still protected in transit, but Meta can read their content.
Were Instagram DMs ever end-to-end encrypted?
Only if you turned it on. Meta began testing encrypted Instagram chats in 2021 as an opt-in, per-chat option available in some regions. It was never the default, and it was removed on 8 May 2026.
Can Meta read my Instagram messages?
Yes. Without end-to-end encryption, Instagram DMs are readable on Meta's servers, which lets Meta scan them, act on reports and respond to legal requests for their content.
Is Vanish Mode on Instagram encrypted?
Vanish Mode makes messages disappear from the chat, but disappearing is not the same as end-to-end encryption. With encrypted chats removed, Vanish Mode messages pass through Meta's servers in a form Meta can read.
Are Facebook Messenger chats still end-to-end encrypted?
Yes for personal chats. Meta made personal Messenger chats and calls end-to-end encrypted by default in December 2023, and the Instagram change did not affect Messenger. WhatsApp also remains end-to-end encrypted by default.
Encryption You Don't Have to Switch On
Lupyd is built on the other side of the opt-in problem. Direct messages use the Signal Protocol and group channels use MLS, both end-to-end encrypted by default, with no unencrypted mode to fall back to and keys that stay on your devices. Our group calls through Cloudflare are not yet end-to-end encrypted, and we say so. Try Lupyd.
Final Takeaway
Instagram DMs have not been end-to-end encrypted since 8 May 2026, and for almost everyone they never were. Meta offered encryption as a hidden, opt-in, region-limited option for about five years, then removed it because few people used it, while keeping encryption on by default in WhatsApp and Messenger. Treat Instagram DMs as messages Meta can read, and take anything private to an app where encryption is the default rather than a setting.
Sources & References
- End-to-end encryption on Instagram, Instagram Help Center
- Meta to Shut Down Instagram End-to-End Encrypted Chat Support Starting May 2026, The Hacker News, Ravie Lakshmanan, 13 March 2026
- Meta ditches end-to-end encrypted messaging on Instagram, Help Net Security, Sinisa Markovic, 16 March 2026
- Instagram ends encrypted DMs on May 8, 2026, Bitdefender, Vlad Constantinescu, 16 March 2026
- Meta U-turns on encryption push for Instagram as DMs go plaintext, The Register, Carly Page, 8 May 2026
- Instagram removed end-to-end encryption for DMs. What should users do?, Security Affairs, Pierluigi Paganini, 11 May 2026
- Built to fail: Instagram, encryption, and the opt-in problem, Open Terms Archive, Asma Sifaoui, 5 May 2026
- TikTok won't add end-to-end encryption to direct messages, report says, TechCrunch, 4 March 2026
- Launching Default End-to-End Encryption on Messenger, Meta, Loredana Crisan, 6 December 2023
Last updated: 7 November 2026.
- ✓ Instagram DMs are not end-to-end encrypted. Instagram's Help Center says end-to-end encrypted messaging "is no longer supported as of 8 May 2026", so Meta can read the content of every Instagram direct message.
- ✓ Encrypted chats on Instagram were never the default: Meta began testing them in 2021, they were opt-in per chat and only available in some regions, apart from a 2022 expansion to adults in Russia and Ukraine.
- ✓ Meta's stated reason is low uptake: "Very few people were opting in to end-to-end encrypted messaging in DMs." It points people who want encryption to WhatsApp.
- ✓ Before the cutoff, affected chats showed instructions for downloading messages and media; Meta has not said publicly whether old encrypted threads were deleted, kept inaccessible or made readable.
- ✓ WhatsApp chats and personal one-to-one Messenger chats and calls are still end-to-end encrypted by default. TikTok told the BBC in March 2026 that it won't add end-to-end encryption to DMs at all.
The workspace where nothing leaks
End-to-end encrypted channels and chat for your team, built on the Signal Protocol and MLS. Available on macOS, Windows, Linux and Android.
