does a vpn encrypt text messages does vpn work for text messages does a vpn hide text messages

Does a VPN encrypt text messages? SMS, iMessage and RCS

Adrian Maverick · · 9 min read

No, not the regular kind. A VPN encrypts internet traffic, and plain SMS and MMS texts are not internet traffic: they go from your phone to your carrier over the cell network, outside the VPN tunnel. iMessage and RCS chats are different. They travel over Wi-Fi or mobile data, so a VPN does carry them, but it adds little, because the encryption that matters for messages happens inside the messaging app.

So the real answer depends on which kind of text you send. Here is how each one moves, what a VPN changes, and how to tell which one is in front of you.

Does a VPN encrypt text messages?

A VPN builds an encrypted tunnel between your phone and a VPN server, and your phone's internet traffic goes through it. That tunnel only covers traffic that travels as internet data. Whether a given text counts depends on its type:

Message type How it travels Does a VPN carry it? Encrypted end to end?
SMS and MMS (green bubbles on iPhone, "SMS" or "MMS" on the send button in Google Messages) Your carrier's network No No
RCS (green bubbles on iPhone, "RCS chat" in Google Messages) Mobile data or Wi-Fi, through your carrier's RCS service The data part, yes Only when the app shows a lock
iMessage (blue bubbles) Wi-Fi or mobile data, through Apple Yes Yes

The pattern: the one kind of text that has no encryption of its own is also the one kind a VPN cannot reach.

Why a VPN can't touch SMS and MMS

Apple's page on the difference between iMessage, RCS and SMS/MMS calls SMS and MMS "carrier-provided services" and says plainly that they "aren't end-to-end encrypted, which means they're not protected from a third-party reading them while they're sent between devices." To send them, you need a texting plan from your carrier, not an internet connection.

That is the key point. A VPN app sits on top of your internet connection. SMS is handled by the phone's cellular side, between the phone and the carrier, and never becomes ordinary internet traffic that a VPN app can wrap.

Apple's developer documentation goes further. iOS gives VPN apps a setting called includeAllNetworks, which sends almost all traffic through the tunnel. Even with that on, a companion setting called excludeCellularServices is on by default, and Apple says it keeps "cellular services such as Wi-Fi Calling, MMS, SMS, and Visual Voicemail" out of the tunnel. Services that only use the cell network, like VoLTE, are always left out.

So on an iPhone, your texts stay outside the VPN even in its strictest mode, unless the VPN app has deliberately changed that default.

Google's help pages for Android do not publish an equivalent rule, but the same logic holds for plain SMS: Google Messages falls back to SMS precisely when there is no data or Wi-Fi. Its end-to-end encryption page says that if you or the other person "lose data or Wi-Fi, the conversation will downgrade to SMS." A message that is sent because there is no internet connection can't be riding inside an internet tunnel.

What about texts sent with Wi-Fi Calling?

This is the case that trips people up. With Wi-Fi Calling on, your carrier can deliver calls and texts over Wi-Fi instead of the cell tower. Verizon's Wi-Fi Calling FAQ says the feature "lets you make and receive voice calls, texts and video calls over a Wi-Fi (wireless internet) connection."

Those texts do cross the internet, but they go inside your carrier's own encrypted tunnel, not your VPN's. AT&T's Wi-Fi Calling network page says the feature uses IPsec, "a method of encrypting traffic sent through the internet," and needs IKEv2 ports 500 and 4500 open to reach AT&T's gateway.

Two things follow:

  • The Wi-Fi owner can't read them. They see an encrypted connection to your carrier, as our guide on what a Wi-Fi owner can see explains.
  • Your carrier still can. The tunnel ends at the carrier, and the SMS inside it is still not end to end encrypted. A VPN on top would not change that, and on an iPhone, iOS keeps Wi-Fi Calling out of the tunnel by default anyway.

What a VPN does for iMessage and RCS

iMessage and RCS chats are internet traffic, so a VPN does carry them. But look at what each one already does.

iMessage. Apple says iMessages are sent "over Wi-Fi or cellular-data networks" and that conversations "are encrypted end-to-end, so they can't be read while they're sent between devices." The VPN wraps traffic that is already sealed. It hides from the local network the fact that you are talking to Apple's servers, and that is about it. Our post on whether iMessage is encrypted covers the iCloud Backup setting that matters far more than any VPN.

RCS. Google's page on RCS chats says that with RCS on, "you can send messages over Wi-Fi." End to end encryption is a separate question. Google Messages encrypts RCS end to end between Google Messages users and shows a lock on the send button when it is active. On iPhone, Apple says end to end encrypted RCS arrived as a beta in iOS 26.5 and only works when every participant's carrier supports it, shown by "Encrypted" with a lock at the top of the conversation. Without that indicator, Apple says, your RCS messages "aren't protected from a third-party reading them while they're sent between devices." We go through carrier support in is RCS encrypted.

When an RCS chat is not end to end encrypted, a VPN protects the leg between your phone and the VPN server. It does nothing past that point, and it does not stop your carrier's RCS service from handling the message. Apple notes that setting up RCS involves your carrier and its partners exchanging identifiers including your phone number and, depending on the carrier, your current IP address.

How to check which kind of text you're sending

You can tell in a few seconds, and it is worth doing before you send anything sensitive.

On iPhone

  1. Open the conversation in Messages.
  2. Blue bubbles mean iMessage, which is end to end encrypted.
  3. Green bubbles mean RCS or SMS/MMS. Look at the top of the conversation: "Encrypted" with a lock means end to end encrypted RCS. No lock means the messages are not end to end encrypted, VPN or not.

On Android with Google Messages

  1. Start typing a message.
  2. Look at the send button. Google says it shows how the message will go: by Wi-Fi or mobile data, by SMS, or by MMS.
  3. A lock on the send button and next to the timestamp means the chat is end to end encrypted.

If the send button says SMS or MMS, a VPN will not protect that message at all.

What does protect your texts

If the goal is that nobody but the other person can read a message, the fix is in the app, not the network:

  • Use a chat that shows a lock. iMessage between Apple devices, or an RCS conversation with the lock indicator.
  • Keep data or Wi-Fi on. Google says end to end encrypted RCS "can only be delivered over data or Wi-Fi," and the chat drops to SMS without it.
  • Treat plain SMS as readable by your carrier. Our guide to whether text messages are private covers who can see them and for how long.

Where a VPN does earn its place on a phone is everything else you do online: browsing, app traffic and DNS lookups that your Wi-Fi network or your carrier would otherwise see. Our post on what a VPN hides lays that out, and what your phone carrier can see covers the mobile data side.

Frequently asked questions

Can a VPN hide my text messages from my carrier?

Not SMS or MMS. Those are carrier services, so your carrier handles every one, and Apple says they are not end to end encrypted. A VPN can hide the contents of internet traffic from your carrier, but texts sent as SMS never go through the VPN. Use an end to end encrypted chat instead.

Does a VPN work for iMessage?

Yes, iMessage works normally with a VPN on, because it travels over Wi-Fi or cellular data like any other app. The VPN adds a layer around traffic Apple already encrypts end to end, so the main change is that your local network sees a connection to the VPN server instead of to Apple.

Do I need a VPN to send texts over public Wi-Fi?

Not for privacy of the message itself. iMessage and end to end encrypted RCS are already sealed, and texts sent through Wi-Fi Calling go inside your carrier's IPsec tunnel. A VPN is still useful on public Wi-Fi for your browsing and app traffic, which is where most exposure comes from.

Does a VPN slow down or block text messages?

SMS and MMS are unaffected, because they do not use the VPN. iMessage and RCS go through the tunnel, so a slow or dropped VPN connection can delay them like any other app. If messages stall only with the VPN on, our guide on whether a VPN slows down your internet walks through the usual causes.

Will a VPN encrypt MMS photos?

No. Apple lists MMS alongside SMS as a carrier service that is not end to end encrypted, and its developer documentation shows iOS keeps MMS outside VPN tunnels by default. To send a photo privately, send it in an iMessage or an RCS chat that shows the lock.

Where Secria fits

A VPN is for the internet side of your phone, and that is where Secria VPN works: it is post-quantum on every connection and runs on RAM-only servers. No activity logs: we do not record browsing, DNS queries or traffic contents. It costs $7.99 a month, or it comes in Secria Pro for $9.99 a month with Secria Mail and the VPN on 5 devices. See pricing for details.

For your texts, check the lock first. For everything else on your phone, a good VPN is the next step.

Secria fact-checks every post against primary sources. Spotted something wrong or out of date? Email hq@secria.me and we will correct it.