• TikTok refuses to adopt full end-to-end encryption for direct messages
• Decision aims to protect users amid concerns over harmful content

TikTok has announced that it will not implement end-to-end encryption (E2EE) for direct messages, the controversial security feature used by most competing social media platforms, arguing that applying it could reduce user safety.

E2EE ensures that message contents are visible only to the sender and recipient, making it the most secure form of communication for the general public. Platforms such as Facebook, Instagram, Messenger, and X have adopted it to enhance user privacy.

Critics, however, argue that the technology makes it harder to combat harmful content online, as tech companies and authorities cannot access direct messages.

A TikTok spokesperson, speaking at a security conference in London, said that avoiding E2EE aims to protect users, especially minors, from risks, describing the approach as a way to distinguish the platform from competitors.

The company added that messages are still protected using standard encryption, and access is limited to authorized staff in specific situations, such as responding to a legal request or a report of harmful behavior.

TikTok estimates it has over a billion users worldwide and has faced increasing scrutiny over its data protection policies.

Analysts, including Matt Navarra, described TikTok's decision as a "smart choice," focusing on "proactive safety" rather than absolute privacy, but noted it may fuel doubts about the platform's ownership and place it out of step with global privacy expectations.

E2EE is already used in apps like Signal, WhatsApp, Messenger, and Google Messages, while Instagram is implementing it by default for direct messages. Telegram offers it as an option, and Snapchat applies it to images and videos.

Experts note that E2EE provides the best protection for conversations against hackers, companies, and even repressive authorities, but it faces criticism from governments and child protection agencies, who warn that the technology may facilitate user harm or the sharing of illegal content without investigation.