TikTok Admits User Accounts Can Be Intercepted, Explains Why

TikTok has admitted that the Direct Message feature does not use end-to-end encryption (E2EE). This approach is somewhat different from platforms such as WhatsApp, Instagram, and Facebook, which have adopted E2EE for a long time.

E2EE is touted as a security measure, because the contents of conversations cannot be spied on by anyone, including the platform owner. Only the sender and recipient can view the messages.

However, beyond its security guarantees, E2EE makes it difficult for law enforcement to look directly into the feature.

This is also the reason TikTok does not use E2EE. The company says the feature would prevent police and security teams from reading direct messages if needed, citing the BBC, Thursday (5 March 2026).

Even without that feature, TikTok said all DMs remain protected by security measures. Namely by standard encryption, such as that used by Gmail.

These features have long been criticised by governments, police, and child protection organisations. They say E2EE can disadvantage users and enable sharing of illegal content without authorities or the platform being able to investigate it.

TikTok’s decision has been described by social media industry figure Matt Navarra as a smart move. In this way, he says the platform can claim to have prioritised proactive security.

‘The risk of abuse and exploitative behaviour is very real in DMs, so TikTok can now argue that they prioritise proactive security over the absolutism of privacy, which remains a potent slogan,’ Navarra said.

A similar view was also voiced by the UK-based child protection charity NSPCC. The organisation welcomed the decision taken by TikTok.

‘We know how risky end-to-end encrypted platforms can be for children, which hinders detection of abuse and child sexual exploitation and contributes to a globally worrying trend,’ said online child safety policy lead, Rani Govender.

According to the Internet Watch Foundation (IWF), it gave the same praise to TikTok. IWF’s Chief Technology Officer Dan Sexton referenced platforms with end-to-end encryption but warned about the implications.

‘The deliberate move away from this for security reasons sets an important precedent,’ Sexton stated.