TikTok Rules Out End-to-End Encryption for DMs, Citing User Safety Over Privacy

TikTok has confirmed it will not introduce end-to-end encryption (E2EE) for its direct messages, setting itself apart from nearly every major social media rival by arguing that the privacy technology actually puts users at greater risk rather than protecting them.

The platform made the announcement in a briefing about security at its London office, telling the BBC that end-to-end encryption prevents police and safety teams from being able to read direct messages when needed, a capability TikTok says it wants to preserve, particularly to protect young users from harm.

What Is End-to-End Encryption?

End-to-end encryption is a form of communication security where only the sender and recipient of a message can view its contents. It is widely regarded by privacy experts as the most secure form of messaging available to the general public, as it prevents third parties, including the platform itself, corporations, hackers, and government authorities, from accessing message content.

The technology is already the default on Signal, WhatsApp, Facebook DMs and Messenger, Apple’s iMessage, and Google Messages. Instagram is in the process of making it the default for its DMs. X (formerly Twitter) offers an E2EE-like system for DMs, though some critics argue it does not meet the full industry standard. Telegram offers it as an opt-in feature rather than a default, and Snapchat uses it for picture and video DMs with plans to expand to text. Discord recently announced that voice and video calls will soon be E2EE by default.

TikTok is now the most notable holdout among major platforms.

TikTok’s Reasoning

TikTok describes its decision as a deliberate choice to prioritise user safety over privacy absolutism. The platform says all direct messages are still secured using standard encryption, similar to the level used by services like Gmail, and that only authorised employees can access direct messages, and only in specific situations such as in response to a valid law enforcement request or a user report about harmful behaviour.

Social media industry analyst Matt Navarra stated that TikTok’s move is strategically savvy but comes with what he called “pretty combustible optics”. He noted that TikTok can now credibly argue it is prioritising proactive safety but added that the decision also puts the platform out of step with global privacy expectations.

Child Protection Groups Welcome the Decision

The announcement has drawn praise from child safety organisations. The NSPCC, the UK’s leading child protection charity, welcomed TikTok’s stance, pointing to the platform’s popularity with young people and warning that end-to-end encrypted platforms make it significantly harder to detect child sexual abuse and exploitation online.

The Internet Watch Foundation (IWF), which monitors and removes child sexual abuse material from the internet, also applauded the decision. Its chief technology officer, Dan Sexton, called it an important precedent at a time when platforms appear to be rushing to implement E2EE without fully considering the implications.

The China Question

TikTok’s decision has not been without controversy. The platform, which claims over one billion monthly users worldwide, is owned by Chinese tech giant ByteDance. It is headquartered in Los Angeles and Singapore, but its Chinese ownership has long attracted scrutiny over data protection practices and potential state influence.

TikTok has consistently denied any ties to the Chinese state. Earlier this year, its US operations were separated from its global business on the orders of US lawmakers. However, cybersecurity professor Alan Woodward of Surrey University noted that E2EE is largely banned in China, raising questions about whether Chinese influence played a role in the decision. Industry watchers have also suggested the move could be partly aimed at keeping Western lawmakers onside by continuing to offer law enforcement access to message content in safeguarding cases.

The Broader Debate

TikTok’s position reflects a long-running global tension between privacy advocates and law enforcement agencies. Governments, police forces, and child protection charities have repeatedly criticised E2EE, warning that it allows criminals to share illegal content and harm users without platforms or authorities being able to investigate. Privacy advocates counter that E2EE is essential protection against hackers, corporate surveillance, and repressive governments.

TikTok has now planted its flag firmly on the safety side of that debate; whether that is driven by genuine concern for users, regulatory strategy, or the influence of its ownership structure remains a question analysts are likely to debate for some time.