Apple has released iOS 26.5, a landmark update that enforces end-to-end encryption (E2EE) as the default for Rich Communication Services (RCS) messages. This move extends the security previously reserved for iMessage to cross-platform conversations with Android users, reshaping the messaging landscape at a time when digital privacy is a geopolitical flashpoint.
The update, pushed to iPhones globally on Monday, mandates E2EE for all RCS messages sent via the Messages app. RCS, the carrier-backed successor to SMS, has long been criticized for lacking encryption. Apple’s decision to default to E2EE without user intervention sets a new industry standard. The company stated that the feature uses the Signal Protocol, the same cryptographic framework trusted by Signal and WhatsApp, ensuring messages remain private even from Apple itself.
This development carries significant geopolitical weight. In Europe, the Digital Services Act and the ePrivacy Directive are pressuring tech giants to balance privacy with lawful access. Apple’s move may face scrutiny from EU regulators who have championed client-side scanning for child safety. British officials, meanwhile, have expressed alarm that widespread E2EE could hinder counter-terrorism efforts. The UK’s Online Safety Bill, which demands the ability to scan encrypted content, directly conflicts with Apple’s stance. Apple has argued that any backdoor would weaken security for all, and the iOS 26.5 release reaffirms that position. Diplomats in Brussels and London are likely to escalate debates on encryption, with Apple’s move potentially inspiring other platforms to follow suit, complicating government surveillance capabilities.
Market implications are profound. For years, Apple has used iMessage as a lock-in mechanism, with blue bubbles signalling iPhone users and green bubbles denoting Android. By encrypting RCS, Apple removes a key differentiator. This could reduce the “green bubble stigma” that drives iPhone loyalty, potentially accelerating Android adoption among users who value cross-platform security. Conversely, it may weaken Apple’s ecosystem lock-in, pressuring services revenue from iMessage-dependent features.
Competitors are reacting swiftly. Google, which drives RCS adoption through its Messages app, has long advocated for universal E2EE but has only implemented it for one-on-one chats. Google’s implementation is not default for group chats. Apple’s move forces Google to match the standard or risk appearing less secure. Samsung, a major Android vendor, may accelerate its own encryption efforts. Third-party messaging apps like Signal and WhatsApp, which already offer E2EE, could see reduced differentiation, though they retain advantages like open-source code and metadata protection.
The update also impacts carriers. RCS relies on carrier infrastructure, and Apple’s encryption is device-to-device, bypassing carrier servers. This could reduce carriers’ ability to mine messaging data for advertising or analytics, potentially costing them revenue. In markets like India, where RCS is used for business messaging, Apple’s encryption may disrupt marketing analytics.
Security experts have largely praised the update. Matthew Green, a cryptography professor at Johns Hopkins University, called it “the most significant step forward for mass messaging security since Signal’s adoption.” However, concerns remain about backup encryption. While in-transit messages are secure, iCloud backups may not be encrypted by default, creating a potential weak point. Apple has said backups are end-to-end encrypted only if users enable Advanced Data Protection, a setting not all will activate.
In summary, iOS 26.5’s default E2EE for RCS is a watershed moment. It aligns Apple with privacy advocates while drawing fire from governments demanding access. For consumers, it means private cross-platform chats without sacrificing convenience. For Apple, it risks diluting its ecosystem but cements its reputation as a privacy champion. The broader messaging wars now hinge on whether competitors can keep pace in the race to secure digital communication.
As the update rolls out, the world is watching whether encryption becomes a universal default or a battleground for state control. One thing is clear: the days of unencrypted SMS as a lingua franca are numbered.
