\n<\/p>\n
In a new support document<\/a>, Twitter has detailed what you can expect from the first version of the platform\u2019s encrypted direct messages. Perhaps most notably, to be able to send and receive encrypted messages, you\u2019ll have to pay Twitter for the ability to do so. Platforms like WhatsApp<\/a>, Messenger<\/a>, Signal<\/a>, and iMessage<\/a> already offer encrypted messaging for free, so having to pay for the feature on Twitter might be a hard pill to swallow. <\/p>\n<\/div>\n According to the document, encrypted DMs are only available if you are a verified user (somebody who pays for Twitter Blue<\/a>), a verified organization (an organization that pays $1,000 per month<\/a>), or an affiliate of a verified organization (which costs $50 per month per person<\/a>). Both the sender and recipient must be on the latest version of the Twitter app (on mobile and web). And an encrypted DM recipient must follow the sender, have sent a message to the sender in the past, or accept a DM request from the sender at some point.<\/p>\n<\/div>\n If you are a person who can send encrypted messages to somebody who can receive them, you\u2019ll see a lock toggle while you\u2019re drafting a message. In an encrypted conversation, you\u2019ll also see a small lock icon next to the avatar of the person you\u2019re chatting with. Encrypted DMs will be separate from unencrypted ones.<\/p>\n<\/div>\n Encrypted DMs currently have a few limitations and a very big flaw. You can only send them in one-on-one conversations; Twitter says it will \u201csoon\u201d bring the feature to groups. You can only send text and links. And Twitter warns that it doesn\u2019t have protections against man-in-the-middle attacks. \u201cAs a result, if someone \u2014 for example, a malicious insider, or Twitter itself as a result of a compulsory legal process \u2014 were to compromise an encrypted conversation, neither the sender or receiver would know,\u201d Twitter says.<\/p>\n<\/div>\n The company is planning mechanisms to make man-in-the-middle attacks more difficult and alert users if one happens. \u201cAs Elon Musk said, when it comes to Direct Messages, the standard should be, if someone puts a gun to our heads, we still can\u2019t access your messages,\u201d the company wrote. \u201cWe\u2019re not quite there yet, but we\u2019re working on it.\u201d<\/p>\n<\/div>\n Twitter also notes that while messages and reactions to encrypted DMs are encrypted, \u201cmetadata (recipient, creation time, etc.) are not, and neither is any linked content (only links themselves, not any content they refer to, is encrypted).\u201d<\/p>\n<\/div>\n Encrypted DMs seem to be a priority for Musk; it\u2019s a feature he spelled out as part of \u201cTwitter 2.0\u201d for employees in November<\/a>. But blue checkmarks are already unpopular enough<\/a>, and I doubt that forcing you to pay for an important feature you can easily get for free elsewhere is going to improve their reputation.<\/p>\n<\/div>\n