TikTok Confirms Private Messages Will Not Be End-to-End Encrypted
TikTok has confirmed that it will not introduce end-to-end encryption for its direct messages, a decision the company says is necessary to help protect users and maintain effective moderation on the platform.
According to the company, messages sent through TikTok are currently encrypted in transit, meaning they are protected while traveling across the internet. However, unlike fully encrypted messaging services, TikTok still holds the keys to access those messages. This means the platform can review conversations when necessary, and they may also be accessed by law enforcement with a valid legal request.
End-to-end encryption (E2EE) works differently. With E2EE, messages are scrambled on the sender’s device and can only be decrypted by the recipient, preventing even the platform itself from reading them. Many popular messaging services—including WhatsApp, Signal, Facebook Messenger, and Apple iMessage—use this approach by default.
TikTok says its decision is driven primarily by child safety concerns. With a large number of young users on the platform, the company argues that being able to review flagged messages is essential for detecting harmful behaviour such as harassment, grooming, or the sharing of abusive material. Fully encrypted messages could prevent safety teams and law enforcement from accessing evidence when users report abuse.
Supporters of this approach say it allows platforms to intervene more quickly when harmful behaviour is reported. If a teenager reports harassment or exploitation, TikTok’s moderation teams can review the messages and take action based on the evidence. On fully encrypted platforms, such investigations can be more difficult because the platform cannot access the message content.
However, the decision also raises privacy concerns. Because the company can access messages, critics warn that TikTok could become a larger target for cyberattacks or data breaches, since readable conversations may be stored on its systems.
The platform is owned by ByteDance, and its data practices have already faced scrutiny from regulators in several regions. Privacy advocates argue that private messages are among the most sensitive types of user data, and choosing not to adopt end-to-end encryption could attract further regulatory attention if security incidents occur.
Despite the debate, TikTok maintains that its current approach strikes the right balance between privacy, safety, and law-enforcement cooperation, particularly when dealing with threats to younger users online.
