TikTok wants to forgo end-to-end encryption for direct messages

TikTok will not introduce end-to-end encryption (E2EE) for direct messages. The company told the British broadcaster BBC this during a security briefing at its London office.

TikTok cites security concerns as the official reason: E2EE would prevent police and security teams from accessing direct messages if necessary. TikTok wants to protect its young users from harm in particular. According to the BBC, the company described this stance as a conscious decision to differentiate itself from competitors.

Many messaging services and social media platforms now use end-to-end encryption by default. Signal, Threema, and Meta's platforms Facebook, Instagram, and WhatsApp use it, as do Google Messages and Apple iMessage, although the latter two still with restrictions.

Child protection organizations welcome decision

The end-to-end encryption and decryption of direct messages is considered an important pillar of data protection, protecting users from unauthorized access by attackers, companies, or state authorities. However, critics repeatedly argue that E2EE makes it more difficult to combat crime. Since platform operators and law enforcement agencies cannot view the content, it becomes more difficult to prosecute offenses such as child abuse and grooming – an argument that is morally difficult to refute. Recently, it became known in the course of a court case against Meta that executives were aware of exactly these risks and warned against introducing end-to-end encryption. However, chat control as a countermeasure, as demanded by some politicians, is highly controversial among data protectionists.

The BBC writes that the British child protection organization NSPCC welcomes TikTok's decision, pointing to the platform's great popularity among young people. The Internet Watch Foundation (IWF), which searches the internet for depictions of child sexual abuse and arranges for their removal, also praised the move, according to the BBC.

TikTok is likely trying to use the renunciation of comprehensive data protection as a PR advantage here. Furthermore, this positioning could also be an attempt to improve its standing with governments that want to gain insight into the chats of TikTok users and thus monitor them more easily. On the other hand, the decision does not necessarily inspire more trust, as TikTok continues to belong to the Chinese parent company ByteDance, which is accused of passing on user data. In the USA, the platform has been under political pressure for years and is likely to change owners soon, with the previous parent company ByteDance expected to retain a minority stake.

(mki)