Meta’s removal of end-to-end encryption from Instagram direct messages, effective May 8, 2026, highlights the profound challenge of protecting privacy at scale. The change was disclosed through a quiet help page update. The difficulty of delivering meaningful privacy for hundreds of millions of users on a commercial platform is real, but it is not an excuse for abandoning the effort.
Encryption on Instagram was introduced in 2023 as an opt-in feature following Zuckerberg’s 2019 commitment. Delivering encryption at Instagram’s scale is technically challenging and commercially costly. But WhatsApp has demonstrated that it is achievable — the platform offers default encryption to billions of users worldwide.
After May 8, all Instagram DMs will be accessible to Meta. The scale argument — that privacy features are too difficult to maintain on a large platform — does not hold when WhatsApp exists as a counterexample within the same corporate family.
Law enforcement agencies including the FBI, Interpol, and national bodies in Australia and the UK had pushed for this change. Child safety advocates backed their position. Australia reportedly saw the feature deactivated before the global deadline.
Digital Rights Watch argued that the challenge of scale is real but manageable. Tom Sulston pointed to WhatsApp as proof that encrypted messaging at scale is not only possible but commercially viable. He and others maintain that Meta’s decision to remove encryption from Instagram is a choice, not a technical necessity. The challenge of protecting privacy at scale is not insurmountable — it requires will, investment, and commitment.