The debate around Meta’s removal of end-to-end encryption from Instagram direct messages involves technical terms, policy concepts, and commercial considerations that can be difficult to parse for those not already familiar with the field. Here is a glossary of key terms and concepts for understanding what happened and why it matters.
End-to-end encryption (E2EE): A method of securing digital communications in which messages are encrypted on the sender’s device and can only be decrypted on the recipient’s device. The platform operator cannot access the content of end-to-end encrypted messages, even with legal authorization. This is the feature Meta is removing from Instagram DMs.
Transport encryption (TLS): A security measure that protects data as it travels between devices and servers. Unlike E2EE, transport encryption does not prevent the server — and therefore the platform operator — from accessing message content once it arrives. Instagram DMs will use transport encryption after May 8, but not E2EE.
Opt-in vs. default: An opt-in feature requires users to actively enable it. A default feature is enabled automatically for all users unless they choose to disable it. Instagram’s E2EE was opt-in; WhatsApp’s is default. The difference significantly affects adoption rates.
Metadata: Information about communications rather than the content of communications — who communicated with whom, when, how often, and from where. Even E2EE platforms typically collect some metadata. Signal collects the minimum; WhatsApp collects more; Instagram will now collect both metadata and content.
Privacy by design: A principle that privacy protections should be built into technical systems by default, rather than added as optional features. Instagram’s opt-in E2EE design was inconsistent with privacy by design principles.
Surveillance capitalism: A term describing the economic model in which personal data is collected and monetized to enable targeted advertising. The concept, developed by Shoshana Zuboff, helps explain the commercial incentives that drive privacy rollbacks at advertising-based platforms like Meta.