EFF Calls Out Major Tech Companies on Encryption Promises

Why It Matters

Stronger end‑to‑end encryption puts control back in users' hands, raising the privacy baseline for consumer technology and influencing regulatory expectations.

Key Takeaways

• EFF demands completion of promised end‑to‑end encryption
• Default encryption settings should be enabled automatically
• New encrypted backups urged for Google Authenticator, Android
• Companies targeted include Facebook, Apple, Google, Bluesky
• Users urged to activate existing encryption features now

Pulse Analysis

The Electronic Frontier Foundation’s new “Encrypt It Already” campaign arrives at a moment when end‑to‑end encryption has become a litmus test for digital trust. By mapping promised, optional, and missing encryption features across the most‑used consumer platforms, the EFF shines a spotlight on a fragmented privacy landscape. While messaging apps like WhatsApp have long offered default encryption, many services still rely on users to flip switches or wait for unreleased road‑map items. This disparity fuels skepticism among privacy‑conscious users and gives regulators a clearer benchmark for compliance.

The campaign’s three‑tier framework—Keep your promises, Defaults matter, Protect our data—translates advocacy into concrete product requirements. “Keep your promises” calls out high‑profile pledges such as Facebook group‑chat encryption and Apple‑Google interoperable RCS, pressuring firms to honor public statements or risk credibility loss. “Defaults matter” highlights that even when encryption exists, it often sits behind a manual toggle, as seen with Telegram’s secret chats or Ring camera footage, undermining the protective intent. Finally, “Protect our data” pushes for features already commonplace elsewhere, like encrypted backups for Google Authenticator, urging parity across ecosystems.

If tech giants respond, the ripple effect could reshape industry standards. Default‑on encryption would raise the baseline for data security, making it harder for malicious actors and intrusive governments to intercept communications. Moreover, broader encrypted storage would compel cloud providers to redesign backup architectures, potentially spurring innovation in zero‑knowledge services. For consumers, the shift promises greater control without sacrificing convenience, while investors may view robust privacy as a competitive moat. Conversely, delayed action could invite stricter legislation, as lawmakers cite the EFF’s findings to justify tighter data‑protection mandates.