Instagram to Remove Critical Security Protection from Direct Messages Feature, Taking Effect May 2026
Instagram is overhauling the security and protection standards for communications on its platform. In the coming months, conversations via the Direct Message (DM) feature will no longer be protected by end-to-end encryption (E2EE).
This change was implemented quietly, as it was not announced through an official statement. Instagram only added a new note to its Help page stating that Direct Message conversations will no longer be protected by end-to-end encryption.
“Messages encrypted by end-to-end encryption will not be enforced after 8 May 2026,” Instagram stated on its Help page.
E2EE is a security feature in instant messaging services that ensures messages can only be read by the sender and recipient. With this system, third parties, including the application provider, cannot access the contents of messages.
The removal of this protection has raised questions. Meta, Instagram’s parent company, has been known to actively promote message security through E2EE encryption, particularly on the WhatsApp platform.
The platform has set a deadline of 9 May 2026, giving users the opportunity to download, save, or delete important conversations before the new rules take effect.
Without E2EE protection, messages sent through DM could potentially be accessed by the service provider. This means Meta, Instagram’s parent company, can technically view, read, or process the contents of users’ messages on Instagram.
This condition presents several risks, including reduced conversation privacy, potential data misuse if a breach occurs, and the possibility that message contents could be analysed for content moderation or advertising systems.
E2EE is a protection feature provided to users to ensure that conversations sent and received cannot be accessed by third parties. The system protects more than just sent conversations. It protects all interactions within the application, including sending text messages, voice messages, sharing files/photos/videos, and more. This feature uses the same mechanism as WhatsApp. E2EE not only provides security but also ensures that communication privacy is truly maintained.
The impact of Instagram’s new policy could potentially raise concerns that user security is no longer fully guaranteed, even in private conversation spaces. Thus far, Instagram has not provided any alternative protection systems. Users are only being asked to immediately download and save important data files/photos/videos/messages before the deletion policy takes effect.