Facebook and Messenger to automatically encrypt messages

Facebook and Messenger, two widely used social media platforms, are set to automatically encrypt all chats, as announced by their parent company, Meta.

The encryption method, known as end-to-end-encryption (E2EE), ensures that only the sender and recipient can read the messages and calls. Previously, users had the option to enable this feature, but it will now be the default setting.

However, this move has been met with criticism from entities such as the UK government and police, who argue that default encryption will make it more difficult to detect instances of child sexual abuse on Messenger. The Home Secretary, James Cleverly, expressed his disappointment with Meta's decision, especially after their collaborative efforts to combat other online harms. He affirmed their commitment to continue working with Meta to ensure online safety for children, but he views this move as a significant setback.

James Babbage, the director general for threats at the National Crime Agency, also voiced his disapproval. He expressed his disappointment with Meta's decision to implement end-to-end encryption on Facebook Messenger, stating that their role in protecting children from sexual abuse and exploitation has become more challenging.

The shift to encryption implies that no one, including Meta, can view the content of the messages or calls, unless a user chooses to report a message, according to Loredana Crisan, the head of Messenger. She stated in a post announcing the change that the company collaborated with external experts, academics, advocates, and governments to identify risks and ensure that privacy and safety are balanced.

Instagram, another platform under Meta's ownership, is also expected to adopt default encryption in the coming year. Meta has assured users that they will be notified when their chats are upgraded and become encrypted, as they will be prompted to establish a recovery method to restore their messages in case they lose, change, or add a device.

Other applications such as iMessage, Signal, and WhatsApp also employ E2EE to safeguard the privacy of messages. However, this technology has become a contentious issue. Proponents argue that it enhances privacy and security, including that of children, while law enforcement agencies, major children's charities, and the government oppose its expansion.

The recently enacted Online Safety Act could empower Ofcom to compel tech companies to scan for child abuse material in encrypted messages. Signal and WhatsApp have stated their refusal to comply with such demands. Despite these powers, Meta continues to face pressure to halt the expansion of E2EE.

In September, the then Home Secretary, Suella Braverman, alleged that Facebook Messenger and Instagram direct messages were the preferred platforms for online paedophiles. She informed the BBC that approximately 800 perpetrators are arrested each month, and around 1,200 children are protected from this heinous crime.

However, Meta countered that it has invested years in developing robust safety measures to prevent, detect, and combat abuse while maintaining online security. The company stated that when E2EE is the default setting, they will utilise various tools, including artificial intelligence, to proactively detect accounts engaged in malicious behaviour, rather than scanning private messages.

Prof Martin Albrecht, chair of cryptography at King's College London, welcomed the addition of what he termed a standard safety feature. He stated that it secures not only government and business communication, but also private conversations between parents and their children, parents about their children, or groups of friends of all ages.

Privacy International, a campaign group, supported Meta's decision. They told the BBC that encryption is an essential defence, protecting journalists, human rights defenders, lawyers, artists, and marginalised groups from potential abuse by data-hungry companies and governments.

However, Susie Hargreaves, the chief executive of the Internet Watch Foundation, expressed her outrage that Meta had chosen to prioritise the privacy of paedophiles over the safety of children. She accused the platform, which she noted had a strong track record of detecting large amounts of child abuse material before it ended up on its services, of effectively inviting paedophiles. She stated that it's now up to Ofcom to take decisive action.

Meta also announced on Wednesday that it would introduce several new features, including the ability to edit messages for up to 15 minutes after they have been sent. It will also allow users to control if people who send messages receive 'read receipts' indicating that a message has been read. The company stated that the changes will take several months to fully implement.