The FBI, alongside the Cybersecurity and Infrastructure Security Agency (CISA), has issued a critical warning for iPhone and Android users: stop relying on unencrypted text messaging. As the global cybersecurity landscape becomes increasingly precarious, particularly following ongoing Chinese-linked network hacks, fully encrypted communication is now essential.

The Context: Why the Warning Matters

Recent cyberattacks, attributed to the group Salt Typhoon, allegedly linked to China’s Ministry of Public Security, have exposed vulnerabilities in U.S. communication networks. These breaches have prompted a renewed call for encrypted messaging and phone calls.

While intra-platform messaging—like iMessage or Google Messages—is secure due to encryption, cross-platform messages between iPhones and Androids remain exposed.

Jeff Greene from CISA emphasized:

“Encryption is your friend. Even if the adversary intercepts the data, if it is encrypted, it will be impossible to read.”

The Issue with RCS

RCS (Rich Communication Services), touted as the modern SMS successor, lacks end-to-end encryption for cross-platform communication. While Google has promised encryption for RCS, no definitive timeline has been provided. This omission leaves millions of users vulnerable when texting between Androids and iPhones.

Samsung’s recent PR campaign celebrating RCS adoption acknowledged this glaring security gap, further highlighting the issue.

What FBI and CISA Recommend

The FBI and CISA have strongly advised U.S. citizens to prioritize secure messaging platforms. These include:

Signal: Known for its robust privacy protections and smaller user base.
WhatsApp: Offers encrypted messaging and calls across platforms.
Facebook Messenger (with encryption enabled): Now provides fully encrypted chats, making SMS/RCS seem outdated.

The agencies encourage users to adopt encrypted apps for all communications, stating,

“Even if intercepted, encrypted data remains unreadable to adversaries.”

Apple’s iOS 18.2 and the Shift in Messaging Defaults

Ironically, Apple’s forthcoming iOS 18.2 update will allow iPhone users to set a default messaging app other than iMessage. This development may influence users to explore secure options like Signal or WhatsApp for their cross-platform needs.

Key Takeaways for Users

Stop using SMS/RCS for cross-platform communication until encryption is available.
Switch to fully encrypted platforms like Signal or WhatsApp for both messaging and calls.
Stay updated: Monitor developments in RCS encryption and changes in platform security standards.

Final Thoughts

The FBI and CISA’s warnings serve as a stark reminder of the evolving cybersecurity threats facing individuals and organizations. With tools like Signal and WhatsApp readily available, there’s no reason to rely on insecure messaging methods. Whether you’re communicating sensitive data or casual conversations, encryption is your best line of defense.