Instagram: no. Meta's help page says end-to-end encrypted messaging on Instagram is no longer supported as of 8 May 2026, so Instagram DMs are encrypted only between you and Meta's servers, where Meta can read them. Messenger: partly. Meta says it is securing personal chats and calls with end-to-end encryption by default, but chats with businesses, Marketplace chats, Meta AI and chat customisations are not covered, and Meta holds the metadata. HushHush encrypts the text on your phone first, so either app carries only ciphertext.
What Instagram and Messenger can and cannot see
Instagram first, because it changed this year. Meta's Instagram help page now says that end-to-end encrypted messaging on Instagram “is no longer supported as of May 8, 2026”, that people with affected chats are shown how to download anything they want to keep, and that anyone who wants an end-to-end encrypted chat from Meta should use WhatsApp. Instagram DMs are still encrypted between your phone and Meta's servers, as nearly all internet traffic is, but Meta holds the keys and can read the text. There is no setting that changes this.
Messenger is different, and more nuanced. Meta's Messenger help page says it is in the process of securing personal messages with end-to-end encryption by default, and tells you to look for the End-to-end encrypted label in a chat's settings to check any particular chat. The same page lists what is not covered: chats with businesses or accounts using business messaging tools, Marketplace chats, and others. Meta's Messenger privacy page adds messages exchanged with Meta AI and more public features such as channels. Chat customisations such as nicknames, themes and reactions are not end-to-end encrypted, and reporting a message sends it to Meta.
Encrypted Messenger chats also depend on a backup. When you log in on a new device, Meta says the encrypted history does not appear until you restore it, with a PIN, a one-time code, a 40-character code, or a key kept in your Google Account or iCloud. Lose that and the history is gone; if someone else has it, they have the history.
Metadata is the same on both. Each app runs on a Meta account, so Meta knows which accounts talk to each other, when, how often and from which device. The encryption status of the text does not change that, and neither does HushHush.
| What | Instagram / Messenger today | With HushHush |
|---|---|---|
| The words you type | Instagram: visible to Meta Messenger: not in personal chats | Ciphertext only |
| Who you message, and when | Yes | Still yes |
| Message history on Meta's servers | Instagram: yes, readable Messenger: encrypted, restored with your PIN or key | Ciphertext only |
| Your account, profile and device | Yes | Still yes |
Why this matters
A lot of real life happens in Instagram DMs: creators and the people who write to them, teenagers, small businesses taking orders, people dating. Until May, the careful ones could switch a chat to end-to-end encryption. Now the text of every DM sent since 8 May 2026 sits on Meta's servers in a form Meta can read, and it stays there for whatever reaches it next: a legal request, an account recovery by the wrong person, a breach.
Messenger's problem is the opposite. The protection exists, but chat by chat, and most people cannot tell which chats have it. A conversation with a shop's Page, a Marketplace seller or any account using business tools is not covered, and the label in the chat settings is the only way to know.
Neither is a reason to panic. It is a reason to decide, for the few conversations that matter, that the text should not depend on Meta's settings at all.
How HushHush helps
HushHush encrypts the text on your phone before it goes into Instagram or Messenger. Meta carries, stores and shows only ciphertext; the other person pastes it into their HushHush to read it. The keys were made on your two phones when you paired, in person, by scanning each other's QR code, and they never touch Meta. Both of you need the app. There is no account, no phone number and no server of ours. It works the same in an Instagram DM, a Messenger chat and a Facebook chat, because all three carry text.
Pair once, in person
Open HushHush, add a contact, and scan the QR code on the other phone. No account, no phone number, no server.
Type it in HushHush
Write the message and tap send. It is encrypted on your phone and copied as ciphertext.
Paste it into Instagram or Messenger
The DM carries the ciphertext. Your contact copies it and taps Paste in HushHush to read it.
What HushHush does not do. It does not hide who you talk to or when: Meta still sees both accounts, the time of every message, how often you write and the length of the ciphertext. Both people need HushHush. It protects text, not Instagram's photos, reels, voice notes or calls. It is not a Meta feature and cannot be switched on inside Instagram or Messenger; you add it yourself, on both phones.
Frequently asked questions
Can Meta read my Instagram DMs?
How do I turn on end-to-end encryption on Instagram?
Is Messenger end-to-end encrypted?
How do I send an encrypted message on Instagram or Messenger?
Encrypt it before Meta sees it.
HushHush is on the App Store and Google Play. Pair in person, then send in any app.
Related
Sources
- End-to-end encryption on Instagram, Instagram Help Center, accessed 7 October 2026.
- What end-to-end encryption on Messenger means and how it works, Messenger Help Centre, accessed 7 October 2026.
- Messenger Privacy & Safety, Meta, accessed 7 October 2026.
- Launching Default End-to-End Encryption on Messenger, Meta Newsroom, accessed 7 October 2026.