Safer DMs and Group Chats

The safest way to handle private conversations is simple: know which of your inboxes are end-to-end encrypted, and move anything sensitive to one that is. Social media DMs are built for convenience and moderation, and most aren't encrypted end to end. Dedicated messengers such as Signal and WhatsApp are.

After that, safety in group chats comes down to who can join, how long messages stick around, and what happens to the chat if someone loses a phone.

What "end-to-end encrypted" means

Almost every app encrypts messages on their way between your phone and its servers. That stops someone on the same café Wi-Fi from reading them. It doesn't stop the company itself.

End-to-end encryption goes further. The keys that unlock messages exist only on the devices in the conversation. The company passes along scrambled data it can't read, so it can't hand over message contents to anyone, and a breach of its servers doesn't expose them.

Encryption doesn't hide everything. Services may still know who you talk to, when and how often. Signal collects very little of that metadata. Others collect more.

Which inboxes are encrypted

Things change, so check an app's own help pages, but at the time of writing the broad picture is:

If an app doesn't clearly say a chat is end-to-end encrypted, treat it as readable by the company and, through it, by anyone who can make the company hand it over.

Use social DMs as the front door

A sensible pattern is to use social DMs to make contact, then move to an encrypted messenger for anything you wouldn't want on a screen in a courtroom or a newsroom. "Can we switch to Signal?" is a normal question these days.

Then lock down the front door itself. Most apps let you choose who can message you: everyone, people you follow, or no one. Message requests from strangers usually land in a separate folder. Tightening this cuts out most spam, phishing links and harassment. The privacy checker lists where this setting lives on each app.

Setting up a safer group chat

Group chats leak more often than one-to-one conversations, mostly because more people means more phones, more screenshots and more chances someone joins who shouldn't.

Before you invite anyone, decide who can add members. On Signal and WhatsApp, admins can require approval for new members and can turn off or reset invite links. A group link pasted in a public post is an open door, so reset it if it leaks.

Turn on disappearing messages for groups that don't need a permanent record. Signal and WhatsApp let you pick a timer, from hours to weeks. It won't stop a screenshot, but it means a lost or seized phone holds weeks of messages instead of years.

Keep group names and photos bland if the topic is sensitive. They often show up in notifications on a locked screen.

Remove people who've left the project, the team or the friendship. Old members are the most common source of leaks, and nobody intends it: they simply forget they're still in the group.

Lock-screen previews and linked devices

Message previews on your lock screen show text to anyone holding your phone. In your phone's notification settings, set previews to show only when unlocked, or turn them off for your messaging apps.

Then check linked devices. Signal, WhatsApp and Telegram let you use your account on a computer or tablet. Each linked device can read your messages. Look at the list now and then, under the app's settings, and remove any you don't recognize or no longer use.

Backups are the quiet weak spot

Your messages may be end-to-end encrypted in transit and still sit in a cloud backup that isn't. WhatsApp lets you turn on end-to-end encrypted backups with a password or key; without that, a chat backup on Google Drive or iCloud is protected only by those accounts. iMessage backups in iCloud are end-to-end encrypted only if you turn on Apple's Advanced Data Protection. Signal keeps messages on your device and offers its own encrypted backup options.

If a conversation matters, check where its backups go.

What no setting can fix

Every person in a chat can screenshot it, forward it or read it aloud. Disappearing messages and screenshot alerts help a little, but they aren't a guarantee. The most reliable privacy setting in a group chat is choosing carefully who's in it.

And be wary of messages that create urgency, such as a friend's account asking for a code, a link to "verify" your account, or a request for money. Hijacked accounts are often used to message their contacts. Confirm through another channel before you act.

FAQ