A significant change to Instagram’s privacy architecture is coming in May 2026, and many users may not know it yet. Meta has confirmed through its help documentation that end-to-end encryption for direct messages will be removed from the platform by May 8, 2026. In simple terms: the private conversations you have on Instagram will no longer be technically protected from Meta’s view.
The feature being removed was introduced in 2023, following a commitment Meta CEO Mark Zuckerberg made in 2019 to build an encrypted messaging ecosystem across all of the company’s platforms. That commitment was met with fierce opposition from law enforcement agencies worldwide — the FBI, Interpol, and others — who argued that encryption would shield criminal activity from investigation. When encryption arrived on Instagram, it was opt-in rather than default, a compromise that satisfied no one fully.
Meta says the removal is driven by usage data. Very few Instagram users ever activated the opt-in encryption feature, the company says, making it an inefficient feature to maintain. WhatsApp, which provides end-to-end encryption by default, is being positioned as the privacy-first alternative within the Meta product family.
What does this mean for the average Instagram user? It means that the company operating the platform you use to send private messages can now read those messages. Whether Meta does this today, next year, or ever is a separate question — but the technical capability now exists in a way it did not before. And the commercial incentive to use that capability, through advertising systems and AI development, is significant.
Privacy advocates urge users to treat Instagram DMs as they would treat any unencrypted communication — carefully. For conversations that require genuine privacy, moving to an encrypted platform like WhatsApp, Signal, or iMessage is the most reliable option. The world’s most popular social platforms are increasingly not the appropriate venues for truly private conversations.