9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.
Meta quietly updated its Instagram Help Center recently announcing that end-to-end encrypted (E2EE) messaging will no longer be supported on the platform after May 8, 2026. If you have encrypted chats, you will want to export them before the deadline.
The company’s official reasoning: low adoption. “Very few people were opting in to end-to-end encrypted messaging in DMs, so we’re removing this option from Instagram in the coming months,” a Meta spokesperson said. “Anyone who wants to keep messaging with E2EE can easily do that on WhatsApp.”
That explanation could be technically true, but still a little hard to take seriously…
About Security Bite: The weekly Security Bite column and biweekly podcast is your deep dive into the ever-evolving world of Apple security. Arin Waichulis is a degreed IT professional and third-year security writer at 9to5Mac. Here, Arin takes a bite out of the most critical headlines impacting privacy and security so you can stay better informed.
End-to-end encryption ensures that messages are encrypted on your device before they ever leave it. Only the devices on either end of the conversation hold the keys to decrypt them, not Meta or even a bad actor. It is one of the strongest privacy protections a messaging platform can offer, really.
A lot of reports made it out like this feature was enabled by default. That isn’t the case. The user always had to manually go into the chat settings and toggle on end-to-end encryption.
Matthew Green, a cryptographer and professor at Johns Hopkins University, flagged the move publicly on X, pointing out that Meta previously made a very public commitment to rolling out E2EE as a default on Instagram, not just an opt-in. The company went as far as to conduct a human rights impact assessment in 2022 and found that expanding end-to-end encryption supports a range of fundamental human rights.
Now, a few years later, that paper tiger commitment is being quietly walked back and rightfully called out.
The fact that Instagram never made it the default, and now points to low opt-in rates as justification for removing it entirely, is a bit like a restaurant removing the smoke detectors because they weren’t used enough.
What makes the timing particularly notable is that in December 2025, Meta confirmed that interactions with its Meta AI tools inside private conversations may be used for targeted advertising. Encrypted messages cannot be used for that purpose, because Meta cannot read them. Remove encryption, and that changes. Meta has not connected these two decisions publicly, but the timing is worth sitting with.
WhatsApp still has E2EE on by default, and Meta was quick to point users there, which is fine for now. But this week is a good reminder that privacy features on ad-supported platforms are not guarantees.
All in all, removing E2EE is…a choice. But also one that just happens to be very convenient for Meta’s business as a low-orbiting ion cannon of data collection.
Unfortunately, I’m casting serious doubt on whether the blowback this week will be enough to reverse Meta’s decision. At most, I could see the company paywall encrypted messaging behind its paid verified program, similar to X.
Follow Arin Waichulis: LinkedIn, Threads, X
Subscribe to the 9to5Mac Security Bite Podcast for biweekly deep dives and interviews with leading Apple security researchers and experts:
FTC: We use income earning auto affiliate links. More.
