Private messaging: what end-to-end encryption really means
Not all chat apps protect your conversations equally. Here's what 'encrypted' means in plain terms, and which apps actually keep messages private.
When you send a message, it passes through a company's servers. The question is: can anyone in the middle read it? That depends on end-to-end encryption (E2EE).
What it means
E2EE scrambles your message on your device so it can only be unscrambled on the recipient's device. Not the app company, not your internet provider, not a hacker on the network. Think of a letter in a locked box that only the recipient's key opens — versus a postcard anyone handling it can read.
Which apps have it
- Signal — encrypted by default, collects almost no data, run by a non-profit. The gold standard.
- WhatsApp — messages and calls E2EE by default, though the company still collects metadata about your usage.
- iMessage and encrypted RCS in Google Messages — protected between users of the same system.
- Standard SMS — never encrypted. Treat texts like postcards.
Getting the most privacy
- Turn on disappearing messages for chats you don't need to keep
- Set backups carefully — an unencrypted cloud backup can undo the app's protection
- Keep a screen lock: any message can be read on an unlocked phone
Remember: encryption hides content, not always metadata — who you messaged and when. If that matters to you, choose apps designed to minimise it. See our secure messaging resources.