A new form of communication on Twitter called the Encrypted Direct Message has been made available by Twitter. It will appear in your inbox and regular Direct Messages as distinct conversations.
It’s important to remember that the feature is now only accessible to verified Twitter users, which includes Twitter Blue subscribers and anyone who is part of a “Verified Organization.”
“We employ a combination of strong cryptographic schemes to encrypt every single message, link, and reaction that are part of an encrypted conversation before they leave the sender’s device, and remain encrypted while stored on Twitter’s infrastructure”, Twitter.
Like sending a typical, unencrypted message, sending an encrypted one is simple. A toggle to enable “encrypted” mode will appear when you click on the message icon. An encrypted message will be sent after choosing a qualified recipient, writing your message, and pressing Send.
Also, you can send an encrypted message through the conversation settings page of an unencrypted conversation. Tap into an unencrypted conversation from your inbox, select the information icon, and choose “Start an encrypted message.”
“Encrypted conversations are visually differentiated from unencrypted conversations through a lock icon badge on the avatar of the user you are talking to. The badged avatar shows up in both the inbox and conversation views”, Twitter explains.
The conversation info page also lets you see if the conversation is encrypted. For encrypted conversations, the top of the discussion info page displays the label: “Messages are encrypted.”
Currently, only one recipient can receive encrypted messages. This function will soon be extended to group conversations on Twitter.
Only text and links can be included in an encrypted message; media and other files are not yet supported. Reactions to encrypted messages are also encrypted.
Furthermore, while messages are encrypted, metadata (recipient, creation time, etc.) are not, and neither is any linked content (only links themselves, not any content they refer to, is encrypted).
New devices cannot join current encrypted conversations. Existing encrypted communications and the messages in the conversation will be filtered out on new devices you log into.
Twitter now limits encrypted messages to ten devices per user. Once you’ve reached the cap, no additional devices signed into Twitter will allow you to send or receive encrypted messages.
Additionally, they do not allow a user’s ability to de-register a registered device or view a list of registered devices.
“Currently, we do not offer protections against man-in-the-middle attacks,” Twitter said.
Due to the conversation’s encryption, reporting an encrypted message to Twitter is currently not feasible. It is crucial to emphasize that media cannot be sent through direct encrypted messages now.
A sophisticated cyber campaign is exploiting the trust users place in popular collaboration software, tricking…
Luxury department store Harrods has disclosed a significant data breach affecting approximately 430,000 customer records…
A newly observed spear-phishing campaign is leveraging sophisticated social engineering lures to distribute DarkCloud, a…
As attackers increasingly leverage Scalable Vector Graphics (SVG) for stealthy code injection, security researchers face…
A sophisticated malware campaign has emerged that weaponizes seemingly legitimate productivity tools to infiltrate systems…
Jaguar Land Rover (JLR) has confirmed it will begin a phased restart of its manufacturing…