Thanks to Meta, Your DMs Aren’t Private Anymore

Every receipt, every situationship screenshot, every “don’t tell nobody I said this.” Meta can read it all starting today.

Go check your Instagram DMs. That last message you sent? Meta can read it now.

As of today, May 8, 2026, end-to-end encryption is gone from Instagram. No more sealed envelope. Mark Zuckerberg and his algorithm are sitting in the group chat, and nobody asked them to pull up. Meta announced it back in March through a quietly updated help page, which is corporate for “we hope y’all don’t notice.”

What Changed

End-to-end encryption (E2EE) means only the sender and recipient can read a message. Not even the platform can peek. Instagram introduced it as an opt-in feature in 2023, buried it deep enough that finding it required a small expedition, then announced this spring that not enough people were using it.

“Very few people were opting in to end-to-end encrypted messaging in DMs, so we’re removing this option,” a Meta spokesperson told The Guardian. Translation: we hid it, you didn’t find it, therefore you don’t want it. Make it make sense.

As of today, all Instagram DMs run on standard encryption: protected in transit, but readable by Meta whenever it feels like it.

Why It Matters

Meta can now see the contents of your DMs: text, images, videos, voice notes. The company says it doesn’t currently use that content for targeted ads, but its policies leave room for “product improvement,” a phrase doing a lot of heavy lifting. Law enforcement requests also get easier to fulfill, because Meta finally has something to hand over.

The timing is suspicious. The encryption rollback lands 11 days before the Take It Down Act takes effect on May 19, requiring platforms to scrub non-consensual intimate imagery (including AI deepfakes) within 48 hours. A platform that can’t read its messages can’t scan them. Meta hasn’t connected the dots publicly. Make of that what you will.

What To Do Today

If you ever turned on encrypted chats (lock icon on the thread), here’s the move:

1. Update the Instagram app. The download tool may not show on older versions.
2. Look for in-app instructions to download messages and media you want to keep. What happens to encrypted chats after today is still unclear, so save what matters.
3. Store the backup locally. Upload it to iCloud or Google Drive and you’ve handed the contents to a cloud provider, defeating the whole point. Keep it on your device.
4. Move private conversations off Instagram. WhatsApp still uses E2EE by default (also Meta-owned, fair warning). Signal is independent, open-source, and the gold standard. iMessage works if everyone you talk to is on Apple.

The Bigger Picture

In 2019, Zuckerberg published a 3,200-word manifesto arguing that E2EE was the future of Meta’s messaging. Seven years later, Meta is removing E2EE from one of its messaging platforms. Visions evolve.

The official reason (low adoption) is true the way “I didn’t eat the cake because the fork was in another room” is true. Encryption was opt-in, per-conversation, and never on by default. It was a gym membership Meta hoped you’d forget about.

Instagram is fine for memes, marketplace haggling, brunch plans, and group chats full of blurry TikTok screenshots. It is not, as of today, a place to send anything you wouldn’t want read out loud at a deposition.

Move accordingly.