Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
No. The official December 2024 guidance did not tell iPhone or Android users to abandon WhatsApp, Facebook Messenger or Signal. In fact, joint guidance from CISA, the FBI, the NSA and partner agencies advised highly targeted people to use end-to-end encrypted (E2EE) communications, naming Signal or a similar cross-platform app as an example. The alarming headline turns a separate FBI debate about law-enforcement access to encrypted messages into a consumer warning that the official guidance does not support.
What the headline says—and what officials said
A Daily Galaxy article published on December 10, 2024, framed the issue as an FBI urge to ditch WhatsApp, Facebook Messenger and Signal. But the relevant government advice pointed in the opposite direction: use E2EE for sensitive communications. The joint Mobile Communications Best Practice document, dated December 18, 2024, recommends that highly targeted individuals use only end-to-end encrypted communications and gives Signal or a similar app that works across iPhone and Android as an example.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Mobile Sicherheit & App-Schutz: Wie Sie Ihr Smartphone, Ihre Apps und Ihre Nachrichten vor digitalen... | $19.99 | Buy on Amazon |
The agencies did not order the public to delete the three named apps, nor did they report that those apps had been breached. The headline appears to conflate that security advice with the FBI’s separate, longstanding objection to encryption designs that prevent providers from supplying message content in response to lawful process.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsWhy agencies warned about mobile communications
On December 4, 2024, CISA published joint guidance for hardening communications infrastructure after PRC-linked actors compromised networks of major global telecommunications providers. The concern was telecom espionage, not a disclosed compromise of Signal, WhatsApp or Messenger.
The FBI later described the activity as involving theft of call-record data, compromise of private communications belonging to a limited number of people, and copying of selected information related to court-ordered U.S. law-enforcement requests. Its public alert about PRC targeting of U.S. telecommunications provides that account.
An encrypted messaging app can make the content of messages harder for an intermediary or compromised carrier to read. It does not make a phone network irrelevant: carriers may still hold call records, subscriber details, location-related data or other metadata. E2EE reduces a particular risk—exposure of message content in transit or at the service—not every risk connected to a phone.
Why the FBI criticizes some end-to-end encryption
The FBI’s argument is about evidence access. With E2EE, a service provider generally cannot decrypt message content because it does not hold the keys. The FBI says this can prevent investigators from obtaining content even after securing a warrant or court order. In its 2021 testimony on oversight of the FBI, the bureau also acknowledged that encryption is important for protecting data and privacy, while advocating “responsibly managed” encryption that would let providers respond to lawful orders.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →The bureau made a similar policy argument in its 2020 remarks on worldwide threats, saying widespread default E2EE can make some investigations harder. That position is a debate over lawful access, not evidence that ordinary users’ encrypted apps are unsafe or that the FBI can freely read their chats. Creating a special access mechanism or duplicate key would also create another valuable target for criminals, hostile governments, insiders or abusive authorities.
What encryption protects—and what it does not
In a properly implemented E2EE system, a message is encrypted on the sender’s device and decrypted on the intended recipient’s device. The service relays it but should not be able to read the message body. “Encrypted,” however, is not the same as anonymous, invulnerable or protected against every way a conversation can leak.
| Area | What E2EE does | What it does not guarantee |
|---|---|---|
| Message content in transit | Helps keep the message body unreadable to intermediaries that lack the keys. | It does not protect a message once it is visible on an unlocked or compromised device. |
| Metadata | Usually protects content, not all information surrounding a conversation. | Account identifiers, timing, contact relationships, IP addresses and device details may still be exposed or retained. |
| Backups and copies | Live chats may be E2EE. | Cloud backups, exports, screenshots, notification previews and linked desktop sessions can have different protections. |
| Accounts and devices | Encryption can protect messages against network interception. | It cannot by itself stop SIM swaps, phishing, account takeover, spyware, malicious links, an untrusted recipient or social engineering. |
For that reason, “criminals use encrypted apps” is not proof that the apps create a special consumer danger. The relevant security question is whether weakening protection to improve access for one purpose would expose more people to interception and abuse.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to think about Signal, WhatsApp and Messenger
All three services may be useful, but they are not interchangeable in every respect. Encryption depends on the specific conversation mode and surrounding settings; reach, account recovery, backups, metadata and the recipient’s device also matter. CISA’s example makes Signal a reasonable option to consider, not a guarantee that it is safest for every person or situation.
| Service | Practical distinction | What to check |
|---|---|---|
| Signal | CISA named Signal as an example of a free E2EE app suitable for cross-platform use. Its privacy-focused design may appeal to people willing to get their contacts to use a separate app. | Protect the phone and account, watch for impersonation, and remember that encryption does not remove all metadata or endpoint risks. Signal download page. |
| Its broad existing user base can make it convenient for family, groups and international contacts. | Consider account security, linked devices, backup settings, metadata and privacy preferences separately from live-message encryption. WhatsApp download page. | |
| Facebook Messenger | Convenient for people whose contacts are already on Facebook; the service includes different communication features and modes. | Do not assume every chat, call, backup or account interaction has identical privacy properties. Check the settings and mode for the conversation you use. Messenger. |
Built-in messaging can also behave differently across platforms. SMS is not end-to-end encrypted. Cross-platform RCS protection depends on the app, implementation, carrier and recipient, so do not assume that a message has the same protections on every device. See Apple Messages and Google Messages for their respective services.
What to do if you use these apps
For most people, the practical response is not to delete a messaging app because of this headline. Choose a maintained E2EE service for sensitive conversations, then protect the devices and accounts around it.
- Install operating-system and app updates promptly.
- Use a strong phone passcode and biometric lock; hide sensitive message previews on the lock screen.
- Enable the app’s strongest available account protections, and secure any email account used for recovery.
- Review linked desktop or web sessions and revoke ones you do not recognize or no longer use.
- Check how backups are protected rather than assuming they inherit live-chat encryption.
- Treat unexpected links, attachments, QR codes and login prompts as possible phishing; verify a contact through another channel when impersonation would matter.
- Assume a recipient can copy, forward, photograph or screenshot a message. The recipient’s device may be the weakest point.
If you may be specifically targeted
The December 2024 mobile guidance was directed especially at highly targeted people, including senior government and political figures; it was not a declaration that every smartphone owner faced equal risk. Such users should follow their organization’s approved communications policy, use authorized secure platforms, treat mobile communications as potentially interceptable or manipulable, and contact their security team or relevant authorities if they suspect compromise.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
