The short version: X's encrypted DMs (still widely called Twitter encrypted DMs) scramble the content of your message so X itself can't read it, but they only work between two verified accounts who both opt in, they don't cover group chats or attachments, and the metadata around your messages (who you talked to, when, how often) is still visible to the platform. If you're sending anything you'd be uncomfortable explaining to a lawyer, this isn't the tool for that job.
What "encrypted" means here
X rolled out encrypted messaging in 2023 as a feature initially limited to Verified Organisations and some paying subscribers, and it's been quietly expanded since. The core promise is end-to-end encryption, meaning the message is scrambled on your device and only unscrambled on the recipient's device. In theory, nobody in the middle, not X, not a hacker who breaches X's servers, not a government request sent to X, can read the actual text.
That's a real and meaningful feature. It's also a lot narrower than people assume once they read the small print.
The steps to turn it on
- Both accounts need to meet X's eligibility bar, which has included being a paying Premium or Premium+ subscriber, or a Verified Organisation.
- Both people need to have DMs open to each other already, usually by following each other or having exchanged a message before.
- In the DM settings, there's a toggle to start a new "encrypted" conversation rather than a standard one, you can't convert an old chat into an encrypted one.
- Both sides get a notice that the conversation is now encrypted, usually with a small lock icon next to it.
- If either person logs in from a new device, the encryption keys for that device need to be verified again, which sometimes shows as a warning that the other person's identity "can't be confirmed."
Five steps, and if either person skips step one because they're not on Premium, the whole thing defaults back to a standard, unencrypted DM with no warning banner stopping you.
A worked example
Say you run a small consultancy and a journalist DMs you on X asking about an unreleased product detail from a client. You're both on Premium, you start an encrypted thread, lock icon appears, you feel safe. Here's what's protected: the words in the message. Here's what's not protected: the fact that you and that journalist exchanged four messages on a Tuesday afternoon, three days before the story broke. If X ever has to respond to a legal request, that connection and timing is sitting right there in their logs, encryption or not. The content is locked. The relationship isn't.
That gap between "my words are safe" and "my activity is invisible" is the part most explainers skip, and it's the part that matters if you're using this for anything sensitive rather than just feeling a bit more private day to day.
What's not covered
- Group DMs aren't end-to-end encrypted, only one-to-one conversations are.
- Photos, videos and other attachments sent in an encrypted thread have historically had weaker or no encryption coverage compared with text, so treat anything you send as a file the same as a normal DM.
- Message requests, the folder where DMs from people you don't follow land, aren't encrypted until you accept and start a fresh encrypted thread.
- Disappearing messages and encrypted messages are two separate settings, turning one on doesn't turn on the other.
If you've ever had a DM vanish on you unexpectedly and wondered what happened, that's a different and more common problem than encryption, and it's worth reading why Twitter DMs disappear separately, because the causes are usually mundane rather than sinister: app syncing issues, account suspensions, or someone deleting the thread on their end.
Why X built this at all
The business reason is straightforward. Encrypted messaging is a Premium-tier feature, it's one more reason to pay £8 to £16 a month (pricing varies by country and platform) for a subscription rather than use the platform for free. Elon Musk framed it in 2023 as a response to concerns about government access to DMs and as a step toward X becoming an "everything app" with secure messaging alongside payments and other functions. Whether that vision ships fully is a separate question, but the encrypted DM feature itself is real and does what it says for the narrow slice of use it covers.
Who should use it
If you're a small business owner swapping contract terms, pricing, or anything with a client's personal details in it, encrypted DMs on X are better than nothing, but they're not a replacement for a real file-sharing tool or a signed NDA sent through email with a paper trail. If you're a journalist or someone handling sensitive sources, most security researchers will tell you Signal is the stronger choice because it encrypts metadata far more aggressively and doesn't sit inside a platform whose business model depends on engagement data.
For everyday business use, the more realistic risk isn't surveillance, it's basic account hygiene. Before you worry about encryption, check what X holds about you in the first place, including what happens when you verify your identity on the platform, since that ID data sits on X's servers regardless of whether your DMs are locked.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
The uncomfortable bit nobody puts in the headline
Encrypted DMs on X don't protect you from X itself in the way people assume. X still knows the sender, the recipient, the timestamp, and roughly how much was said, because that routing information has to exist for the message to be delivered at all. Full metadata protection is a much harder engineering problem that even specialist apps struggle with, and X hasn't solved it. So when someone tells you "I use encrypted DMs, I'm covered," the honest reply is: covered for what, exactly. Covered against a casual reader screenshotting your words, yes. Covered against someone building a picture of who you talk to and when, no.
How this fits into your wider social strategy
None of this changes how you should be using X for business day to day. If you're trying to understand whether your time on the platform is paying off at all, that's a separate and bigger question than DM privacy, and it's one I covered in more depth in a webinar on measuring social media success for Simplilearn, where the core point stands regardless of which privacy feature is trending that month: engagement numbers mean nothing if they don't connect to a business outcome, something I've also argued directly in a C-Sweet Talks conversation on why engagement doesn't equal ROI.
If your DMs are part of a sales process, say you're closing deals through direct conversations on X rather than email, it's worth reading how that shift from cold outreach to warmer, platform-based selling works, covered in a digital selling webinar I ran for the same platform.
Practical checklist before you rely on it
- Confirm both accounts are eligible, don't assume, check the actual settings toggle.
- Start a brand new thread for anything you want encrypted, old history stays unencrypted.
- Keep attachments and group chats out of anything sensitive.
- Assume metadata (who, when, how often) is always visible to X, plan accordingly.
- For anything legally or commercially sensitive, use a real document-sharing tool with an audit trail, not a DM thread.
And if the whole conversation is happening because a video or file won't send in the first place, that's usually an app or platform bug rather than an encryption issue, the same kind of glitch covered in this guide to fixing Twitter video download problems on Android.
Frequently asked questions
Do I need to pay for X Premium to get encrypted DMs?
In most cases yes, encrypted DMs have been tied to Premium or Premium+ subscriptions or Verified Organisation status, and both people in the conversation need to meet that bar, not just one of you.
Can X read my encrypted DMs?
No, the text content is end-to-end encrypted so X can't read the message itself, but X can still see who you messaged, when, and roughly how often, since that routing data isn't encrypted.
Are group chats on X encrypted?
No, end-to-end encryption on X currently only applies to one-to-one conversations, group DMs are not covered by the same protection.
Is X's encrypted DM feature as secure as Signal?
Most security researchers would say no, apps like Signal encrypt metadata far more aggressively and aren't built on an advertising and engagement-driven business model, so for sensitive conversations a dedicated messaging app is still the safer choice.
