Meta rolls out end-to-end encryption to Messenger by default for one-on-one chats and calls, fulfilling a yearslong promise; E2EE for group chats remains opt-in

Meta is now rolling out end-to-end encryption for one-on-one chats and calls on Messenger and Facebook, finally fulfilling …

The Verge 2023-12-07 Jay Peters

Context & Ripple Effects

Meta had been moving Messenger encryption from an optional capability toward the default, reiterating that target in its August commitment to complete the rollout by year-end. The company had also added features such as themes, custom emoji, and link previews to encrypted conversations, reducing the feature gap between protected and conventional chats.

This rollout marks the practical completion of that one-on-one transition: encryption now applies without users having to select it, while group conversations retain a separate opt-in path. That split matters because it makes privacy protection the baseline for the most common private exchanges without extending the same default to every Messenger use case.

First-order effects

One-on-one Messenger and Facebook chats and calls are encrypted by default for users covered by the rollout; group chats remain opt-in.
Meta must operate Messenger’s core one-on-one experience around encrypted messaging rather than a parallel optional mode, building on its earlier effort to bring familiar chat features into encrypted conversations.

Second-order effects

Users no longer need to discover or enable a privacy setting for individual chats, making the remaining opt-in status of group chats more conspicuous.
The rollout raises the product bar for messaging services: encryption must coexist with the everyday chat features users expect, rather than being treated as a stripped-down privacy alternative.

Third-order effects

If default encryption continues to spread across major messaging products, privacy architecture becomes a baseline product-design choice rather than a niche setting users must activate.
Messenger’s group-chat exception shows that adoption may remain uneven across conversation types, with the harder product and technical trade-offs determining where default encryption reaches next.

The trend: Major messaging platforms are shifting end-to-end encryption from an opt-in feature toward a default for private communications, while extending it consistently across richer and group-based experiences remains harder.

Discussion

@chriscox Chris Cox on threads
We just announced we're today beginning the rollout of default E2E encryption for all personal chats and calls on Messenger and Facebook, built on top of the Signal protocol and our own Labyrinth protocol. …
@robsherman Rob Sherman on threads
Huge privacy news: Today @messenger is starting to roll out default end-to-end encryption globally, adding an extra layer of security to your personal calls and messages. We're also adding new controls like edit messages and read receipts. More from @loredanasf: https://messeng…
@alexheath Alex Heath on threads
Years after it was promised, Meta is starting to turn on default encrypted chats in Messenger. That means a big chunk of private messages sent everyday online are about to be removed from access by law enforcement A big deal as some govs like the UK increasingly want to ban encr…
@suojellaanlapsi @suojellaanlapsi on x
Meta's decision to roll out end-to-end encryption will have disastrous consequences for the fight against online child sexual abuse and exploitation. As @IWFhotline mentions, our latest report warns that encrypted services & messaging apps are being used to contact children and..…
@matthew_d_green Matthew Green on x
Folks on HN are speculating that Facebook Messenger's encryption won't work on the web, and it's a ploy to push people to their app. No: it works on the web too. Very seamlessly. You use a PIN to access your past messages from their backup HSMs.
@gazthejourno Gareth Corfield on x
Facebook Messenger's rollout of end-to-end encryption has provoked an angry backlash. James Babbage, late NCF chief and now a director at the National Crime Agency, says Meta's “alternative safety measures” won't “produce sufficient evidence for a search warrant”.
@profwoodward Alan Woodward on x
Meta introducing E2EE - that's not what the Online Safety Act wanted - next move now with Ofcom https://about.fb.com/...
@justinhendrix Justin Hendrix on x
This is a move Meta had promised by end of year- glad to see it has followed through. Meta Platforms will start fully encrypting messages on Facebook and Instagram by default - @JeffHorwitz https://www.wsj.com/... via @WSJ
@jonmillican Jon Millican on x
Meta is rolling out End-to-End Encryption for Messenger! I am so proud to finally be able to say this. https://engineering.fb.com/...
@_andyburrows Andy Burrows on x
As of today, @messenger's child abuse and grooming risk profile sharply increases. Inherently preventable harm, dressed up as a privacy measure, that's really a Trojan horse for @Meta's antitrust objectives (1/2)
@matthew_d_green Matthew Green on x
This is a really big deal. Although the full rollout will take a little while, this isn't opt-in encryption. It'll be full end-to-end encryption for billions of users, complete with encrypted backup and disappearing messages built in.
@joshthomas_iwf Josh Thomas on x
The @IWFhotline is outraged Meta has chosen to prioritise the privacy of paedophiles over the safety of our children. We strongly urge other platforms not to follow this dreadful example.
@loredanacrisan Loredana Crisan on x
We're starting to roll out default end-to-end encryption for personal calls and messages on @messenger. This isn't a routine security update: we rebuilt the app from the ground up, in close consultation with privacy and safety experts. We added some new features too: you can now.…
@lukolejnik @lukolejnik on x
Facebook is enabling strong, end-to-end encryption in messengers in FB Messenger and Instagram. By default! https://engineering.fb.com/... Technical documentation is here (uses oblivious functions!): https://engineering.fb.com/... https://engineering.fb.com/... [image]
@messenger @messenger on x
📣New features to improve your security, give you more control over your messages and calls and improve your overall experience on Messenger. 🫶 1) 🔐Messenger chats and calls are becoming end-to-end encrypted by default, which means your personal messages and calls have an... [imag…
@matthew_d_green Matthew Green on x
I got a chance to play with the new Messenger a little while ago, and it's remarkable for... basically not being remarkable. It looks exactly like the existing Messenger, but everything is protected using Signal protocol. Supports web and mobile, and just kind of works invisibly.
@mlsutherland25 Megan Sutherland on x
“By starting to roll out end-to-end encryption on their services, Meta are choosing to turn a blind eye to crimes against children we know to be proliferating on their platforms” @PeterWanless @NSPCC
@jonmillican Jon Millican on x
In 2020 I announced at Real World Crypto that we're definitely shipping end-to-end encryption in Messenger. There was no timeline then, except to say it will take years. But we now have a timeline: we are beginning global rollout now. https://twitter.com/...
@iwfhotline @iwfhotline on x
We're outraged at Meta's catastrophic decision to roll out end-to-end encryption, which will allow illegal and harmful content to spread undetected on its platforms, prioritising the privacy of paedophiles over the safety of our children. Read more. https://www.iwf.org.uk/...
@matthew_d_green Matthew Green on x
It feels very anticlimactic, given that a number of governments have been working for years to stop or slow down this deployment. Universal deployment of end-to-end feels basically unstoppable at this point.
r/privacy r on reddit
Questions regarding meta e2e encryption
r/technology r on reddit
Messenger is finally getting end-to-end encryption by default

Chronicles