TikTok doesn't end-to-end encrypt your DMs

TikTok doesn't encrypt your direct messages like other platforms including Instagram, Messenger, and X, which offer the privacy option.

According to a report by the BBC, TikTok will not add end-to-end encryption to DMs. It's not an update, but users might not know this about their messages. The company told the news outlet it believes encryption puts users at risk, as it stops law enforcement and safety teams from accessing private messages.

This argument has come under scrutiny with Big Tech companies when it comes to users handing over their private chats, as companies including Meta have been required to turn data, including DMs, over to police.

TikTok told Mashable its direct messages are encrypted, though not end-to-end encrypted. The difference? On its public safety page, TikTok reiterates that "your direct messages on TikTok are kept safe through encryption as they're being sent and stored. However, at the moment, end-to-end encryption isn't currently available."

The company also said that access to message content is limited to trained staff with a proven need to view them, whether part of compliance with law enforcement or safety investigations.

So, what is end-to-encryption and why is it important?

A means of securing up your communication online, end-to-end encryption ensures that only you and your recipient can see your messages. Christianna Silva summarises it for Mashable:

End-to-end encryption means no one — not hackers, not government officials, not the company that owns your device — can read your message while it's being sent. It basically takes your message, jumbles it up, sends it, and unjumbles it once it reaches your recipient. So anyone who tries to intercept your message in between you and your recipient just gets a bunch of mess instead of the message itself. This is important because messages can pass through loads of hands on their way from sender to recipient, such as the service you use to send the message, the internet service providers involved, and servers that store the message data for any amount of time.

Apps and platforms like Signal, iMessage, and WhatsApp all provide end-to-end encryption, but it's not that straightforward — and the technology's backdoors and compliance with authorities can lead to major problems.

Apple's iMessage kicked off the party in 2011 as the first messaging service with end-to-end encryption enabled by default — Apple boosted it in 2024 with post-quantum encryption key PQ3. Law enforcement can request data from Apple with a search warrant, but they've been foiled before.

Meta has had a rollercoaster ride through end-to-end encryption, slowly adding it to platforms like Facebook and Instagram. WhatsApp switched it on in 2016, but law enforcement can request access to your metadata. As for Facebook and Messenger, between January and June 2025, over 374,000 data requests were logged by government sources with Meta, of which the company says 78 percent had data supplied. Some of these have made headlines; in the immediate aftermath of the reversal of Roe v. Wade, police used Facebook chat logs to prosecute a person seeking an abortion.

Signal has long been associated with its end-to-end encryption, becoming a communication method of choice for activists, journalists, and those worried about privacy. Signal says its services "do not provide access to emergency service providers like the police, fire department, hospitals, or other public safety organizations," though the FBI has found ways to spy on users.

Telegram, which has been around since 2013, doesn't have end-to-end encryption on by default. There are two types of encryption in Telegram, one for private and group chats and one for "Secret Chats" which adds another layer of encryption (that has to be enabled). But Telegram has had multiple controversies over the years, including a colossal revenge porn problem and a case of human rights violation.

Elon Musk's X replaced its DMs with Chat, which is end-to-end encrypted but not by default. Users must set up a private-public key pair when they first use the feature and X says it uses "a combination of strong cryptographic schemes to encrypt every single message, link, and reaction that are part of an encrypted conversation before they leave the sender’s device and remain encrypted while stored on X's infrastructure. Once messages are received by the recipient devices, they are decrypted so that they can be read by the user." It's not watertight though.

Zoom, meanwhile, straight-up lied about its encryption in 2020, resulting in a class-action lawsuit and an $85 million settlement.

There are plenty more apps and platforms using end-to-end encryption, which makes TikTok's decision stand out. And it's not the only reason TikTok is raising concerns with users.

Want more tech news? Sign up for Mashable's Top Stories newsletter.

UPDATE: Mar. 4, 2026, 4:40 p.m. UTC Added information from TikTok provided to Mashable after request for comment.