Meta's AI messages on Instagram don't seem to be encrypted

A heads-up before you bare your soul to an AI persona.
By Cecily Mauran  on 
Meta's collection of AI personas in a horizontal row of smartphones
Your conversations with Meta's new AI personas might not be private. Credit: Meta

Before you go pouring your heart out to Billie, "your ride-or-die older sister" played by Kendall Jenner, or an AI grandpa named Brian on Instagram, know that your messages might not be private.

Meta's AI personas, now live in beta, are a collection of characters — some played by celebrities and creators — that users can chat with on Messenger, Instagram, and WhatsApp. However, it appears that messages with these characters on Instagram are not end-to-end encrypted.

Instagram messages with end-to-end encryption turned off showing the option to start an AI chat
With end-to-end encryption off, the option to start an AI chat appears. Credit: Screenshot: Mashable / Meta
Instagram messages with end-to-end encryption turned on showing the option to start an AI chat has disappeared
With end-to-end encryption turned off, the option is no longer there. Credit: Screenshot: Mashable / Meta

In the messages tab on Instagram, there's a toggle at the top that allows you to turn on end-to-end encryption, which protects your messages from unwanted eyes, including Meta and the government. But when this feature is toggled on, the option to start an AI chat disappears. If you click on the info button ("i" circle icon) within the chat, the "Use end-to-end encryption" option is grayed out. When you click on it, a window pops up saying, "Some people can't use end-to-end encryption yet." It then states that you "can't add them" — meaning the AI persona — to the chat. You literally don't have the option to have a conversation with one of these personas via end-to-end encryption on Instagram.

Instagram screen showing a window that says end-to-end encryption is not yet available in the AI chat
This window seems to confirm that Meta's AI messages are not end-to-end encrypted. Credit: Screenshot: Mashable / Meta

One of the major privacy concerns with the rise of generative AI is the massive amount of data that is collected — both to train the model and to give companies granular insights about their users. Meta already has a bad reputation with regard to personal data use. There was the whole Cambridge Analytica scandal, instances of Facebook turning over private conversations to law enforcement, and the way its algorithms leveraged personal data and behaviors to make its platforms addicting (and in some cases harmful), just to name a few. Past instances suggest that Meta — or any social media company, to be fair — shouldn't be trusted with your data.

When first trying out the AI messages feature in WhatsApp, you're immediately given a pop-up disclaimer saying, "Meta may use your AI messages to improve AI quality. But your personal messages are never sent to Meta. They can't be read and remain end-to-end encrypted."

WhatsApp screen showing a disclaimer about what data Meta uses and that messages are end-to-end encrypted.
The disclaimer on WhatsApp says messages are end-to-encrypted but this has not been confirmed yet. Credit: Screenshot: Mashable / Meta

This suggests that, while certain information about your messages can be accessed by AI (still not great for privacy), the content of the messages is private. But this is unconfirmed, especially given Meta's vague generative AI privacy policy, which says, "When you chat with AI, Meta may use the messages you send to it to train the AI model, helping make the AIs better."

Mashable has reached out to Meta to confirm that AI messages on Instagram are not end-to-end encrypted, and also to clarify whether the ones on WhatsApp and Messenger are. While we did not hear back before publication time, we'll update this story if Meta responds.

Last spring, OpenAI launched an opt-out feature for ChatGPT, which gives users the option of blocking their data from being used to the train the model. However, other AI chatbots like Google Bard and Microsoft Bing don't have such opt-out features, although there is an ability to delete your activity. On Meta's generative AI privacy policy page, there's a similar option to delete your data. You can do this by typing: /reset-ai to remove data from the individual AI chat and typing: /reset-all-ais to delete data from all chats across Meta apps.

Mashable Image
Cecily Mauran

Cecily is a tech reporter at Mashable who covers AI, Apple, and emerging tech trends. Before getting her master's degree at Columbia Journalism School, she spent several years working with startups and social impact businesses for Unreasonable Group and B Lab. Before that, she co-founded a startup consulting business for emerging entrepreneurial hubs in South America, Europe, and Asia. You can find her on Twitter at @cecily_mauran.


Recommended For You

Trending on Mashable
NYT Connections today: See hints and answers for October 18

7 skills to teach your daughter by age 13


Wordle today: Here's the answer and hints for October 18

The biggest stories of the day delivered to your inbox.
This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.
Thanks for signing up. See you at your inbox!