Meta’s decision to remove end-to-end encryption from Instagram direct messages, confirmed for May 8, 2026, is a setback in the fight for a safer and more private internet. The change was disclosed through a quiet help page update. But for those committed to that fight, it is a call to redouble their efforts.
Encryption on Instagram was introduced in 2023 as an opt-in feature following Zuckerberg’s 2019 commitment. Its removal does not mean that safety and privacy are incompatible — it means that Meta chose not to pursue the harder path of achieving both simultaneously.
After May 8, all Instagram DMs will be accessible to Meta. The immediate consequence is a loss of privacy for users. The longer-term consequence depends on how advocates, regulators, and the technology industry respond. A strong response can transform this setback into a catalyst for meaningful change.
Law enforcement agencies including the FBI, Interpol, and national bodies in Australia and the UK had pushed for this change. Child safety advocates backed their position. Australia reportedly saw the feature deactivated before the official global deadline.
Digital Rights Watch is committed to continuing the fight for a safer and more private internet. Tom Sulston argued that the removal of Instagram’s encryption is a reminder of what is at stake. He and others believe that the goal of an internet that is both safe and private is achievable and that the advocacy, policy, and technical work needed to achieve it must intensify in the wake of this decision.