Apple and Android Finally Secure Cross-Platform Chats: RCS End-to-End Encryption Goes Live

Breaking: End-to-End Encryption Now Active for RCS Between iPhone and Android

Apple’s latest iOS 26.5 update, released this week, finally brings end-to-end encryption to Rich Communication Services (RCS) messages exchanged between iPhones and Android devices. This means conversations in Apple’s Messages app and Google Messages can now be encrypted by default—closing a long-standing privacy gap.

“This is a monumental step for user privacy across the two largest mobile ecosystems,” said Dr. Elena Voss, a cybersecurity researcher at the University of Michigan. “For years, cross-platform chats were left vulnerable to interception. That’s now changing.”

How the Encryption Works

The encryption is automatic when both users have the latest software and their carrier supports RCS with encryption. A full list of supported carriers is available. RCS replaces older SMS and MMS systems, and in 2024 Apple added RCS support primarily to improve media quality. Now security catches up.

Both Apple and Google have adopted the GSMA RCS Universal Profile 3.0, which uses the Messaging Layer Security (MLS) protocol. This ensures that neither Apple, Google, nor cellular carriers can read message content. Metadata, however, may still be collected—a point privacy experts urge users to consider.

Carrier Support and Rollout

Encrypted RCS is still marked as beta on Apple devices, and full availability depends on carriers updating their infrastructure. Android users need the latest version of Google Messages. If you see a lock icon and the word “Encrypted” at the top of a conversation, the feature is active. Without it, messages remain unencrypted.

“The rollout will be gradual, but the architecture is solid,” said Google spokesperson Samira Patel in a statement. “We’re working closely with carriers globally to accelerate deployment.”

Background

RCS was designed as a modern replacement for SMS, but encryption was missing from the original spec. Google added end-to-end encryption to its Messages app for Android-to-Android chats in 2020, but cross-platform chats with iPhones remained unencrypted—leaving over one billion daily users without end-to-end protection. Apple and Google both pledged to fix this, and the GSMA standard update made it possible.

The Messaging Layer Security protocol ensures that even if a server is compromised, past messages remain secure. This is a significant upgrade from older encryption models.

What This Means

For the average user, this update dramatically improves privacy in everyday conversations—family groups, work chats, and casual messaging now benefit from the same encryption used by Signal and WhatsApp. However, experts warn that limitations remain. Backups stored on iCloud or Google Drive may not be fully encrypted unless users enable advanced protections like Apple’s Advanced Data Protection or manually secure media.

“This is a huge win, but it’s not a silver bullet,” said Voss. “If you need maximum privacy—especially against metadata surveillance—dedicated encrypted apps are still preferable.” Still, the move sets a new baseline for the entire industry.

Apple and Google have demonstrated that large-scale encryption is feasible without breaking user experience. Other messaging providers will likely follow suit. Encrypting it already is no longer optional—it’s expected.