Instagram, no more all-private chats: what changes for us and what privacy alternatives there are
Instagram has closed a path that in recent years seemed inevitable fate, for this social as for the internet in general: the path of (truly) private messaging. As of 8 May 2026, the platform will no longer support messages with end-to-end (i.e. full) encryption in direct. For many users the difference will be almost invisible, because on Instagram that protection had never become the standard. But for those who had activated it on some conversations, the novelty is there: the technical guarantee that not even Meta can read the content of chats disappears.
The point needs to be clarified. When it comes to 'protected messages', not all protections are equal. Even without end-to-end encryption, a service can encrypt data as it travels between device and server. But with end-to-end, the content remains readable only to the participants in the conversation. Without this architecture, the service provider at least theoretically returns to being able to access the messages, manage them or deliver them if required under the applicable rules.
There is a bit of media chaos on the issue these days. Well to know that not all Instagram DMs were covered by end-to-end encryption. The feature was optional, not active by default. This means that for a large proportion of users, the novelty does not change the actual privacy level of many daily conversations: those chats were already outside that protection perimeter.
Instead, users who had chosen encrypted chats for more sensitive, personal or confidential exchanges were directly affected. In these cases, Instagram indicated that the affected chats would show instructions to download messages and media content that may need to be stored. In some cases, it may also be necessary to update the app to complete the operation.
For the user, there are some practical consequences.
Instagram is now no longer the place for conversations that require strong confidentiality: financial data, sensitive documents, health issues, credentials, sensitive work information or personal exchanges that one would not want exposed to the service provider.

