50 rights groups blast Meta for brazen policy reversal of Instagram end-to-end encrypted messaging

Fight for the Future, Access Now, the New York Civil Liberties Union (NYCLU), Electronic Frontier Foundation (EFF), and other leading human rights organizations are demanding Meta immediately course correct and make good on promises to protect Instagram DMs with end-to-end encryption by default.

Led by Fight for the Future, 50 human rights groups are expressing outrage over Meta’s decision to discontinue “opt-in” end-to-end encryption for Instagram messages, as well as its apparent reversal of plans to protect Instagram messages with end-to-end encryption by default. The groups sent a letter to Meta calling on the company to immediately course correct and follow through on promises to ensure users’ direct messages (DMs) are safe from third-party access.

For the communities represented by the organizational endorsers of the letter, including activists, LGBTQ+ people, abortion seekers, journalists and other targeted groups around the world, privacy online is not “optional.” It’s a matter of life and death.

Meta’s removal of “opt-in end-to-end encryption” for direct messages on Instagram—a feature only available to users in certain regions—took effect on May 8, 2026. Meta has claimed the move was driven by “lack of interest from users.”

The decision and rationale represent a complete reversal of Meta’s well-established commitments to end-to-end encrypted communications, as well as its promises to make end-to-end encryption the default setting for Instagram messages.

”Meta has repeatedly articulated the importance of end-to-end encryption, sometimes mirroring the exact language our organizations have used for years to explain why online messages must be protected and private. Does Meta expect us to simply forget this history? Does the company expect us to accept the absurd justification that ‘users aren’t interested in E2EE’ when Meta knows very well we shouldn’t be forced to opt-in to life-saving privacy features?” said Leila Nashashibi, Campaigner at Fight for the Future. “Meta has defended E2EE in the past, even when it wasn’t politically convenient. Clearly the company’s political calculus has shifted. Is Meta axing its E2EE plans in order to curry favor with Trump, who wants unfettered access to our messages so his administration can spy on us and target us? Or does the company believe that the profit potential of violating our privacy and harvesting our most sensitive information—our private messages—is simply too great to pass up? We deserve to know the truth behind this total betrayal of users’ safety and privacy. We’re calling on organizations and users all over the world to reject this shameful move. If Meta wants to keep its Instagram users, it must make DMs safe NOW.”

”Secure E2EE messaging is a BASIC digital need and right. Several years ago, we joined in asking Meta to encrypt DMs. As Meta has acknowledged, privacy online is actually critical to people’s safety online AND offline. Now, Meta says they’re rolling this safety measure back after offering E2EE as a difficult to find optional setting? That’s so disingenuous and disappointing,” said Maya Morales of WA People’s Privacy. “If Meta wants people to use its platforms, it has to ensure that using them doesn’t actively endanger us. Without encryption, our personal conversations have been fed straight to government agencies or officials we might critique, to DHS/ICE, to data brokers, into AI models, you name it. This is not a trivial issue. Unsecured DMs can—and have—resulted in people’s entire lives being destroyed. E2EE should be the default setting for all apps that offer messaging, and AI should never be used in ANY messaging service without non-coerced, opt-in consent. If Meta’s not going to keep users safe, is it prepared for a mass-exodus?”

Fight for the Future and a coalition of civil society organizations strongly applauded Meta’s implementation of default end-to-end encryption on Facebook Messenger in December 2023. The move came after public outcry and pressure in response to Meta handing over unencrypted Messenger direct messages between a Nebraska teenager and her mother to law enforcement—messages that led to the teen’s prosecution for choosing to have an abortion.

In the months preceding the December 2023 announcement, Rob Sherman, VP and Deputy Chief Privacy Officer for Policy at Meta, sent a letter to Fight for the Future stating: “We remain committed to rolling out default end-to-end encryption for private conversations on Messenger in 2023, and shortly afterwards for Instagram.”

In the the letter, Mr. Sherman notes:

People expect technology companies to provide the best security to protect their personal information, and we believe end-to-end [encryption] is an important component of building trust with our users because it:

• Promotes a fundamental right to privacy, which allows loved ones to communicate without fear.
• Helps prevent both serious and common crimes like hacking and identity theft.
• Enables journalists, civil society, religious groups, scholars, and artists to exercise their rights to free and private speech without surveillance or retaliation.

Meta’s backtracking on its end-to-end encryption commitments comes on the heals of yet another disappointing decision: On May 5, Meta announced that the company will be “developing” a tool that can determine a user’s age based on visual, physical characteristics. Under the guise of kids safety, this will mean scanning every single picture posted on the platform to determine people’s ages, with no guardrails. Fight for the Future has been warning for years that online ID checks in all of its forms, regardless of the public relations term in use (age assurance, age verification, age estimation) is a censorship and privacy nightmare that will lead to Big Tech companies cobbling together even more information about users of all ages.