Your Facebook Pokes Are Stored For Two Days, Then Their Encryption Keys Are Deleted
Facebook Poke messages self-destruct after a few seconds, but is Facebook saving these potentially embarrassing photos and videos? No. It's deleting them. Pokes are encrypted, and Facebook deletes …
Context & Ripple Effects
Facebook’s claim that Poke content becomes unreadable after two days lands against a record of Facebook photos remaining accessible long after deletion, making the distinction between removing a file and destroying its encryption key consequential. The company is pairing a short-lived messaging feature with a defined backend retention window rather than treating “self-destruct” as immediate erasure.
The disclosure also arrives as Facebook rolls out redesigned privacy controls and changes messaging privacy settings alongside a paid-message test. Poke gives Facebook a narrower, technically specified privacy promise at a time when its broader messaging rules are changing.
First-order effects
- Facebook will retain encrypted Poke data for two days, then delete the keys needed to decrypt it; Poke recipients still lose access within seconds under the product’s self-destruct design.
- Poke users receive a clearer retention boundary than users of Facebook photo features covered by earlier deletion complaints.
Second-order effects
- Facebook’s privacy and product teams face a higher burden to explain whether encryption-key deletion is enforced consistently, because prior reports of lingering deleted photos make user trust hinge on implementation rather than the label “self-destruct.”
- Short-lived messaging products compete not only on disappearing interfaces but on whether their storage and deletion practices can be stated precisely to users.
Third-order effects
- If platforms adopt key deletion as the mechanism for expiring sensitive content, privacy promises will increasingly be judged by cryptographic data-lifecycle controls rather than by whether a user-facing delete button removes every stored copy.
- The contrast between Poke’s two-day key-retention rule and earlier photo-deletion concerns points toward more granular retention policies across different content types, with transparency becoming part of product design.
The trend: Consumer messaging is beginning to differentiate temporary sharing through explicit retention windows and cryptographic deletion rather than interface-level disappearance alone.