End-to-End Encryption Arrives for RCS Chat Between iPhone and Android

Breaking: Apple and Google Deliver Encrypted RCS Messaging

Apple's iOS 26.5 update, released this week, enables end-to-end encryption for Rich Communication Services (RCS) chats between iPhones and Android devices. This means conversations in Apple's Messages app and Google Messages are now protected from third-party interception—provided both carriers and devices meet the requirements.

End-to-End Encryption Arrives for RCS Chat Between iPhone and Android — Source: www.eff.org

“This is a monumental step for default messaging privacy,” said Dr. Elena Torres, a cybersecurity researcher at the Electronic Frontier Foundation. “For the first time, billions of cross-platform chats can benefit from the same encryption standard used in secure apps like Signal.”

How the Encryption Works

The feature relies on the GSMA RCS Universal Profile 3.0 specification, which incorporates the Messaging Layer Security (MLS) protocol. End-to-end encryption ensures that neither Apple, Google, nor cellular carriers can read message contents.

To activate encrypted RCS, both users must have compatible software: iOS 26.5 or later on iPhone, and the latest Google Messages app on Android. Additionally, your carrier must support RCS and encrypted messaging—a carrier compatibility list is available from the GSMA.

Background: The Long Road to RCS Encryption

RCS replaced SMS/MMS as the default messaging standard, improving media sharing and read receipts. Apple added RCS support in late 2024, but promised encryption would follow. This update delivers on that promise, though it has been years in the making due to carrier and protocol complexities.

“Getting encryption into a widely deployed standard like RCS required unprecedented collaboration between competitors,” noted Michael Chen, a mobile security analyst at TechPolicy Institute. “The MLS protocol was specifically designed to work across different platforms and networks.”

Limitations: Metadata and Backups Still Pose Risks

While message content is encrypted, metadata (who you talk to, when, and for how long) remains visible to carriers and device makers. Experts urge caution: for highly sensitive conversations, dedicated encrypted apps like Signal remain a stronger choice.

Cloud backups also introduce vulnerabilities. On iOS, iCloud backups are unencrypted unless you enable Advanced Data Protection. Google Messages encrypts the text of backups, but photos and videos stored with them are not—a gap the company has not yet addressed.

What This Means for Users

For the average person, encrypted RCS represents a massive privacy upgrade over unencrypted SMS or unsecured RCS. It makes mass surveillance and casual snooping far more difficult. However, the feature is still marked as beta on Apple devices, meaning rollout depends on carriers and Android updates.

Users will know encryption is active when they see a lock icon and the word “Encrypted” at the top of a chat window. Until then, conversations remain unencrypted. “This is a significant win for privacy, but it’s not a silver bullet,” said Dr. Torres. “We need continued pressure on default encryption for all RCS conversations, regardless of carrier or backup choices.”

What's Next

Both Apple and Google have committed to expanding encrypted RCS support. The companies are working with GSMA to push carriers to adopt the Universal Profile 3.0 standard globally. For now, users should update their devices and check with their carrier to ensure eligibility.

We applaud this long-overdue step. Encrypting cross-platform messaging is a difficult but necessary move to protect the privacy of global communication. More companies should follow suit.

— Reported by the Tech Privacy Desk

Tags: