Instagram drops encryption: A risky step Apfelpatient

Instagram has long since become more than just a platform for photos and videos. Direct messaging is part of everyday life for many. This makes the question of how secure this communication actually is all the more important. Meta's recent decision to abolish a previously implemented encryption feature has drawn criticism and raised fundamental questions about data privacy.

The introduction of end-to-end encryption has long been considered a necessary step to better protect private communication. Large platforms like Instagram, in particular, find themselves caught between technical feasibility, economic interests, and political pressure. Current developments show that even implemented security measures are not guaranteed to remain in place.

The long road to end-to-end encryption

Meta began implementing end-to-end encryption (E2EE) for its messaging services back in 2019. At the time, it was openly communicated that this was an extremely complex undertaking. The existing infrastructure for messages and calls had to be almost completely rebuilt.

Despite these challenges, the company made progress. In August 2023, the rollout of E2EE in Facebook Messenger began and was completed by the end of the year. At the same time, Meta announced plans to extend this technology to Instagram as well.

Instagram DMs: Encryption only as a hidden option

However, the implementation on Instagram went differently than expected. End-to-end encryption was not enabled by default, but only offered as an optional feature.

This option was buried deep in the settings and difficult for many to find. Consequently, its use was low. Many simply didn't know that this option even existed.

The abolition of the function

Instead of improving the feature's visibility or enabling it by default, Meta has reversed course. End-to-end encryption for Instagram direct messages is being completely removed.

The reason given was that very few users had activated the feature. Therefore, it will be removed in the coming months.

This argument is viewed critically. The accusation is that a function that is difficult to find was deliberately designed to be rarely used. This low usage is then used to justify its removal.

Criticism of Meta's approach

Security experts have voiced strong criticism. They believe the feature was designed from the outset to be virtually undetectable. The subsequent explanation of "low usage" appears contradictory in this light.

This approach is considered cynical because it gives the impression that a lack of use was deliberately accepted.

Impact on privacy and security

Instagram's removal of end-to-end encryption has concrete consequences:

Messages are no longer consistently protected from access.
The risk of data leaks or unauthorized access increases.
Control over one's own communication decreases.

Furthermore, there is a structural problem: there is no free choice about which platforms are used in one's personal environment. Often, parallel communication channels emerge across multiple apps.

If one of these platforms is less secure, this automatically affects parts of one's own communication.

A problematic precedent

Meta's decision goes beyond Instagram. It sends a signal to other technology companies.

If a major provider removes a previously implemented security feature, this could serve as a template. Particularly under political pressure, other companies might react similarly and put data protection on hold.

This sets a precedent that could have long-term effects on the entire industry.

Comparison with other companies

Not all companies follow the same approach. Apple is often cited as an example when it comes to a consistent stance on data protection.

The company has made it clear in the past that it will not weaken encryption. In one specific case, it even threatened to remove iMessage from the UK rather than compromise on security. The British government subsequently withdrew its demands.

This comparison shows that it is indeed possible to take a clear position in favor of privacy.

Instagram's U-turn and its consequences for data privacy

The developments surrounding Instagram make it clear that progress in data protection is not guaranteed. Even after years of development and implementation, features can disappear again.

For Instagram users, this means reduced security for direct messages and less control over their own communication. At the same time, it sends a signal that data privacy is negotiable under certain circumstances.

This decision therefore affects not only Instagram, but trust in digital communication as a whole. (Image: Shutterstock / Diego Thomazini)