A new form of communication on Twitter called the Encrypted Direct Message has been made available by Twitter. It will appear in your inbox and regular Direct Messages as distinct conversations.
It’s important to remember that the feature is now only accessible to verified Twitter users, which includes Twitter Blue subscribers and anyone who is part of a “Verified Organization.”
“We employ a combination of strong cryptographic schemes to encrypt every single message, link, and reaction that are part of an encrypted conversation before they leave the sender’s device, and remain encrypted while stored on Twitter’s infrastructure”, Twitter.
Like sending a typical, unencrypted message, sending an encrypted one is simple. A toggle to enable “encrypted” mode will appear when you click on the message icon. An encrypted message will be sent after choosing a qualified recipient, writing your message, and pressing Send.
Also, you can send an encrypted message through the conversation settings page of an unencrypted conversation. Tap into an unencrypted conversation from your inbox, select the information icon, and choose “Start an encrypted message.”
“Encrypted conversations are visually differentiated from unencrypted conversations through a lock icon badge on the avatar of the user you are talking to. The badged avatar shows up in both the inbox and conversation views”, Twitter explains.
The conversation info page also lets you see if the conversation is encrypted. For encrypted conversations, the top of the discussion info page displays the label: “Messages are encrypted.”
Currently, only one recipient can receive encrypted messages. This function will soon be extended to group conversations on Twitter.
Only text and links can be included in an encrypted message; media and other files are not yet supported. Reactions to encrypted messages are also encrypted.
Furthermore, while messages are encrypted, metadata (recipient, creation time, etc.) are not, and neither is any linked content (only links themselves, not any content they refer to, is encrypted).
New devices cannot join current encrypted conversations. Existing encrypted communications and the messages in the conversation will be filtered out on new devices you log into.
Twitter now limits encrypted messages to ten devices per user. Once you’ve reached the cap, no additional devices signed into Twitter will allow you to send or receive encrypted messages.
Additionally, they do not allow a user’s ability to de-register a registered device or view a list of registered devices.
“Currently, we do not offer protections against man-in-the-middle attacks,” Twitter said.
Due to the conversation’s encryption, reporting an encrypted message to Twitter is currently not feasible. It is crucial to emphasize that media cannot be sent through direct encrypted messages now.
Kimsuky is using GitHub and other trusted code platforms to deliver malware, run commands, and…
A critical SonicWall SMA1000 flaw, CVE-2026-102255 (CVSS 10.0), is being actively exploited days after disclosure,…
Canonical, the company behind Ubuntu Linux, suffered a sustained distributed denial-of-service attack on October 8,…
Yandex has confirmed a major service outage after drone attacks damaged three data centers in…
Attackers are targeting a critical security flaw in the Bricksforge WordPress plugin that lets them…
Security researchers have disclosed four serious vulnerabilities in LG webOS smart TVs that could allow…