Is Facebook Messenger encrypted? What's covered in 2026
Facebook Messenger looks like one app, but it runs two kinds of conversation side by side. Some are sealed so that Meta cannot read them. Others sit on Meta's servers in a form Meta can read. The label that tells them apart is easy to miss, so here is where the line falls as of October 2026.
Is Facebook Messenger encrypted?
Yes, for most personal chats. Since December 2023, Meta has been switching one-to-one Messenger chats and calls to end-to-end encryption by default, so only you and the other person can read them. Group chats, chats with businesses, Marketplace chats and anything you share with Meta AI are not end-to-end encrypted.
All Messenger traffic is encrypted on its way to Meta's servers. That is a different and weaker promise. The question that matters is who can open the message once it arrives, and the answer depends on which kind of chat you are in.
Is Messenger end-to-end encrypted by default?
Meta announced default end-to-end encryption for personal messages and calls on Messenger and Facebook on December 6, 2023, and warned that the global rollout would take "a number of months." Nearly three years later, Meta's help page still says "Meta is in the process of securing personal messages with end-to-end encryption by default," and tells you to look for "End-to-end encrypted" in the chat settings.
So the default is real, but there is no public statement that every personal chat has been upgraded. Checking takes a few seconds, and the steps are further down.
Meta says the system is built on the Signal Protocol plus its own Labyrinth Protocol, which stores your encrypted chat history on Meta's servers so it can follow you to a new phone.
What Messenger encrypts and what it does not
Every row comes from Meta's own help pages, checked October 22, 2026.
| Conversation or feature | End-to-end encrypted? | What Meta's pages say |
|---|---|---|
| One-to-one personal chats | Yes, by default (rollout ongoing) | Look for "End-to-end encrypted" in chat settings |
| Voice and video calls in those chats | Yes | Calls in encrypted chats can't be reported |
| Group chats | No | "End-to-end encrypted chats don't support: Group messages" |
| Chats with businesses and Marketplace | No | Listed among products that "don't currently support" it |
| Channels and other public features | No | Not treated as personal messages |
| Payments | No | Not supported in encrypted chats |
| Nicknames, chat themes, reactions | No | "Chat customizations ... aren't end-to-end encrypted" |
| Messages shared with Meta AI | No, for what is shared | "Can be accessed by Meta" |
| Messages you report | No, for what is reported | You choose to send them to Meta |
Two rows deserve a closer look.
Are Messenger group chats encrypted?
Not end to end. Meta's page on what you can send in end-to-end encrypted chats lists group messages as unsupported. When the default rollout began, Meta's engineers wrote that they were "still in the testing phase for group messaging". In May 2026 the Electronic Frontier Foundation wrote that it was "still waiting" for end-to-end encryption in Messenger group messages.
Treat a Messenger group like a conversation stored on Meta's servers in readable form, because that is what it is.
Is Messenger encrypted like WhatsApp?
Partly. Both use the Signal Protocol for one-to-one chats, and both encrypt calls. The differences are in the gaps. WhatsApp encrypts group chats end to end by default, and Messenger does not. Messenger also keeps your encrypted history on Meta's servers by design, while WhatsApp stores chats on your phone and makes cloud backups optional. Our guide on whether WhatsApp is safe covers what WhatsApp itself leaves out, such as metadata and business chats.
Instagram is the cautionary tale. Its end-to-end encryption was opt-in, and Meta removed it entirely on May 8, 2026. We covered what that change meant for Instagram DMs. Messenger's encryption is still in place and still the default for personal chats, according to Meta's help pages in October 2026.
Does Meta AI read your Messenger chats?
Only what you or others share with it, but the sharing is broader than most people assume. Meta's page About sharing with Meta AI on Messenger says:
- When anyone in a chat uses an AI feature such as summarizing unread messages, "up to 50 recent messages at a time are shared with Meta AI."
- When someone mentions @Meta AI in a group chat, "messages from the past 30 days are shared."
- In end-to-end encrypted chats, "messages shared with Meta AI can be accessed by Meta as described in the Meta Privacy Policy." The rest of the chat stays encrypted.
The key point is that other people can trigger it. A friend asking Meta AI to summarize a group chat sends your messages too. Meta's own advice is to be mindful before sharing passwords or financial information in chats, and you can turn off message sharing permissions for any chat where it matters.
How Messenger backs up encrypted chats
Because encrypted history is not readable by Meta, a new phone shows an empty chat list until you restore it. You choose how when you set up message storage: a PIN, a Google account, iCloud Drive or Keychain, or a 40-character recovery code.
The PIN option is the one to understand. Meta says the PIN protects a recovery key held in hardware security modules in its data centers, and in May 2026 it described new ways to prove which hardware is in use. It also shipped Labyrinth 1.1 so messages reach your encrypted backup as they are sent, instead of waiting for your phone to come back online.
The trade-off is spelled out on the PIN restore page: "Messenger can't reset your PIN or restore your backup for you." Forget the PIN on every device and the history is gone. Pick a PIN you will remember and do not reuse your phone unlock code.
What Meta can still see and hand over
End-to-end encryption hides what you say, not that you said it. Meta still runs the service, so it knows your account, your contacts, your devices and IP addresses, and when you use Messenger. Our explainer on metadata covers why that pattern can be revealing on its own.
Meta's guidelines for law enforcement in the US set out the legal bar:
- A subpoena can compel basic subscriber records, which "may include: name, length of service, credit card information, email address(es) and a recent login/logout IP address(es)."
- A search warrant is required for "the stored contents of any account, which may include messages, photos, videos."
For an end-to-end encrypted chat, Meta has no readable content to produce. For group chats, business chats and older messages that were never upgraded, it does.
Two other routes skip encryption entirely. Anyone in a chat can screenshot it or report it, and reported messages go to Meta. And anyone holding your unlocked phone can read everything on it.
Check your own Messenger in 3 minutes
Menu names are from Meta's help pages as of October 2026 and can differ slightly between iPhone and Android.
- Check a chat. Open the conversation, tap the name at the top, and look for "End-to-end encrypted" in the chat settings. If it is missing, treat the chat as readable by Meta.
- Set up message storage. Menu > Settings > Privacy & safety > End-to-end encrypted chats > Message storage. Choose a method you can recover from, and write down the 40-character code if you pick that.
- Review logged-in devices. In the same End-to-end encrypted chats menu, open Security alerts > View logins. Log out any device you do not recognize. Logging out removes it from your encrypted chats.
- Compare keys for sensitive chats. In the chat, open Privacy & support > Verify end-to-end encryption > Compare keys, and read the numbers to each other in person or over a call. Meta's key page explains why keys change when someone adds a device.
- Turn on disappearing messages for chats you would rather not keep. Messages in that mode vanish after being seen, and anyone in the chat can still screenshot them first. Messenger notifies you when it detects a screenshot.
- Turn off Meta AI sharing in chats that matter, so other people cannot send your messages to Meta AI.
- Move group conversations that need privacy to a one-to-one chat or an app that encrypts groups end to end.
Your inbox is the other half
The same question applies to email. Most inboxes are stored in a form the provider can read, and a lot of private life arrives there: bank alerts, medical results, contracts. Secria Mail uses zero-access encryption for every message in your mailbox, with keys created on your device that only reach our servers encrypted, and it never mines your mail.
Frequently asked questions
Can Meta read my Messenger messages?
Not in a chat marked "End-to-end encrypted," unless someone in the chat reports a message or shares it with Meta AI. Meta can read group chats, business and Marketplace chats, and any older chat that was never upgraded.
Is Facebook Messenger encrypted now?
Personal one-to-one chats are end-to-end encrypted by default, and Meta's help page still describes the rollout as in progress. Open the chat settings of any conversation to confirm it shows "End-to-end encrypted."
Are Messenger calls encrypted?
Voice and video calls in end-to-end encrypted chats are encrypted end to end. Meta's help page notes that calls cannot be reported.
Can police see my Messenger messages?
With a US search warrant, Meta can produce stored content it can read, such as group chats. It cannot produce readable content from end-to-end encrypted chats. Police can still read anything on an unlocked phone, and a subpoena can get account records such as login IP addresses.
Is Messenger safe to use?
For everyday one-to-one chats, yes, once you have confirmed encryption and set up message storage. Avoid sending sensitive information in group chats, business chats or chats where others use Meta AI.
Messenger keeps your personal chats private and leaves the rest open, so check the label before you type something you would not want stored. And ask the same question of your email.
Secria fact-checks every post against primary sources. Spotted something wrong or out of date? Email hq@secria.me and we will correct it.