Is X’s New Encrypted Messaging a Smart Move for Security or Just a Mirage?

X, the platform formerly known as Twitter, has introduced a new feature that allows all users to send end-to-end encrypted messages without the need for a Premium subscription. In this article, we will examine what X’s encryption entails, how to utilize this feature, and whether it truly enhances your messaging experience.

Understanding X’s End-to-End Encryption

This newly available encryption feature is X’s response to an increasing demand for enhanced digital privacy among users. According to the platform, its end-to-end encryption system employs two key layers of security: a private-public key pair unique to each user and a specific encryption key for every conversation. This dual approach ensures that only conversation participants have the ability to access the messages exchanged.

X claims to implement a variety of sophisticated cryptographic methods to safeguard every message you send, along with any links and reactions. The privacy feature is accessible for both senders and recipients via the latest versions of the X app for Android, iOS, and web browsers.

Despite X presenting a reassuring narrative about its new encryption feature, there are certain security concerns that need to be addressed. Let us first explore the process for sending encrypted messages on the platform.

Navigating the Encryption Process on X

While X has quietly launched this feature, it can easily go unnoticed by users. The implementation itself is somewhat perplexing, particularly within the mobile app. Regular messages and encrypted messages are categorized into different inboxes, creating a possible point of confusion.

On desktop, start by opening X in your preferred web browser and click on Messages from the left-side menu.

Your list of regular, non-encrypted conversations will appear on the right side of the screen. To initiate an encrypted message, click on the Chat option located just above the regular messages.

A welcome message will briefly introduce you to this new feature. Click Set up now to proceed.

Setting up encryption feature in X on PC.

You will then be prompted to create a 4-digit PIN to secure your encrypted messaging. Make sure to input the code twice for confirmation.

Creating a passcode for encrypted messages on X via PC.

With that completed, you can now access your encrypted inbox. To send a secure message, select the New chat button.

Initiating an encrypted conversation in X on PC.

On the desktop version, you can enrich your messages with emojis, photos, videos, or files, and even create encrypted group chats.

View of encrypted chat on X with additional options on PC.

To switch back to your regular inbox from the encrypted one, simply click Unencrypted in the message list column.

Note that upon closing and reopening the app, you will be required to enter your passcode.

Prompt to enter your passcode for accessing encrypted messages in X.

On mobile devices, the two different inboxes are organized in separate locations within the app. To check your regular messages, simply tap the envelope icon located at the bottom.

Accessing regular chats in the X app on Android.

To access encrypted chats, you need to tap your profile image in the top-left corner of the app.

Select Chat from the menu options and proceed to set your passcode if this is your first time.

Attaching media options for encrypted messages in the X app on Android.

To return to your regular messages inbox, you must exit the encrypted inbox first and then press the envelope icon in the bottom menu.

In summary, X’s encrypted messaging feature functions more smoothly on the web version due to a single inbox that simplifies transitions between regular and encrypted chats. Nonetheless, a critical consideration remains: can you trust this service to protect your sensitive information?

Evaluating the Security of X’s End-to-End Encryption

When juxtaposed with the robust security of platforms like Signal, X’s approach to end-to-end encryption raises significant concerns. A primary issue is its requirement for a simple four-digit PIN to secure the private key, which security experts argue is inadequate against sophisticated hacking attempts.

Additionally, X’s system stores private keys on its own servers rather than on users’ devices, which could pose increased risks of potential decryption.

Moreover, it’s important to note that X explicitly acknowledges its encryption does not protect against man-in-the-middle attacks. This means your private communications might be susceptible to interception by third parties, including X itself, without your awareness.

Compounding these concerns, X’s encryption lacks “perfect forward secrecy” —a crucial security feature valued by secure messaging platforms. This omission means that if a private key is exposed at any point, previous messages sent could be decrypted retroactively.

Considering all these factors, we advise users to approach this feature with caution. It’s wise to refrain from sharing sensitive or critical information through X’s encrypted messaging. Until the platform implements further security enhancements, it is prudent to utilize this feature for low-risk communications or experimentation.

If you’re searching for an alternative to X amid the controversy, consider exploring Bluesky, which presents its own set of attractive features.

Source & Images