We also have strong data protections and safeguards in place that secures data at rest and restricts employee access to message content.”īut, as uber-secure ProtonMail points out, “the best way to protect data is to not have access to it at all. Facebook told me that “our servers are only in a handful of countries that have strong rule of law. They may use those keys if asked by law enforcement, but there is also a risk that rogue or tricked employees may do the same. The Twitter attack specifically framed the vulnerability when a platform holds the keys to decrypt your private conversations. “After the recent complications with Twitter,” Moore says, “it highlights once again the importance of end-to-end encrypted messages and privacy focused messaging platforms.” Twitter is not a private messaging platform-its volume of DMs is a fraction of those sent over Messenger.

Twitter DMs are not end-to-end encrypted-just like Messenger, it’s been stuck on the roadmap for years. No-one should be surprised at Twitter’s admission that the recent hack of more than 100 users also tapped into private messages for 36 accounts. If you have any doubts, take a look at Twitter’s recent public shaming. “Although many may think the content in their messages isn’t personal, the real issue is that any information on you is open to abuse in the wrong hands.” “Users choosing to communicate via Messenger must understand the real threat to their information within such apps,” warns ESET cybersecurity guru Jake Moore. Apple’s iMessage and Google’s rumoured encryption plans for RCS-an SMS replacement-both provide an end-to-end encryption update option for SMS, still the world’s most pervasive mobile messaging platform.īut Messenger has more than a billion users-and unlike SMS it presents as an updated and fully featured alternative to legacy messaging. The straightforward advice is to stop using SMS if possible. But that has become fairly well understood now. This issues aren’t limited to Facebook Messenger, of course.