The short video platform TikTok recently stated that it will not introduce end-to-end encryption (E2EE) in its private messaging function, citing the need to better protect the security of its user group, which is mainly teenagers. This move runs counter to the industry's increasing popularity of this technology. TikTok explained in an interview with the British Broadcasting Corporation (BBC) that once end-to-end encryption is enabled, its security team and the police will not be able to view relevant communication content if necessary.
The current approach is to allow authorized employees, police and other law enforcement agencies to access and read relevant private messages in order to deal with illegal or harmful content when users report harmful behavior or in response to legitimate investigative requests.
End-to-end encryption is a technology for protecting communications through asymmetric encryption: the sender encrypts the message using a public key, and only the private key stored on the recipient's device can decrypt it. Under this mechanism, even operating platforms and network service providers cannot view communication content. Therefore, it is highly praised by privacy "absolutists" and is also adopted by default by platforms such as Signal, WhatsApp, Messenger, and Instagram.
TikTok emphasizes that users do not need to worry too much about data security issues because its private messages still use "standard encryption". The approach is similar to Gmail: Data is encrypted as it travels between the user's device and TikTok's servers, but the platform retains the ability to decrypt and view the content.
This architecture gives TikTok complete visibility into user communications and has received public support from child safety organizations, including the National Society for the Prevention of Cruelty to Children (NSPCC) and the Internet Watch Foundation. The agencies argue that platforms that do not employ end-to-end encryption are better equipped to detect and stop the spread of child sexual abuse material.
TikTok, meanwhile, is facing regulatory scrutiny in the European Union over a number of design elements, including an “infinite slide” feed, autoplay, push notifications and highly personalized recommendation algorithms. EU lawmakers argue that these features encourage addictive use and pose risks to the mental health of millions of teenage users around the world.
At a time when privacy technology has become standard for many technology companies, TikTok has chosen to retain access to the content of private messages and put "security protection" over "absolute privacy." This stance is bound to continue to cause controversy among regulators, privacy advocates, and child protection organizations.