Element to Require Device Verification for Encrypted Messaging Starting October 2026
By
LorenDB
Master baker tier. Every paragraph earns its place on the tray.
Summary
Element messaging platform will require device verification for end-to-end encrypted messaging starting October 2026. Unverified devices will lose the ability to send and receive encrypted messages as part of a security update to strengthen conversation security. The change follows Matrix specification updates and has been delayed from the original April 2026 timeline to October 2026. The update clarifies this is not related to age verification but rather ensures users have fully set up their encryption properly.
Key quotes
· 5 pulledIn April 2026, we will be rolling out a significant update to strengthen the security of your conversations: unverified devices will no longer be able to send and receive end-to-end encrypted messages via Element.
This change follows the Matrix specification update that was announced.
Please note that this change is nothing whatsoever to do with age verification. It's simply enforcing that users have fully set up their encryption, going forwards.
Please note that the transition date has now been pushed back to Oct 2026.
From April 2026, only verified devices can send or receive end-to-end encrypted message on Element.
You might also wanna read
Tor Browser 15.0 Released with Firefox ESR 140 Base and Privacy Improvements
Tor Browser 15.0 has been released, marking the first stable version based on Firefox ESR 140. The update incorporates a year's worth of Fir
blog.torproject.org·7mo ago
Pentagon Confirms Adversaries Using Commercial Phone Location Data to Target US Troops
The Pentagon was warned for nearly a decade that commercial location data from mobile phones could be exploited by adversaries to track US m
wired.com·1d ago
New browser-based side-channel attack uses SSD activity analysis to spy on users
Researchers have discovered a new browser-based side-channel attack that can spy on users by analyzing SSD (Solid State Drive) activity thro
arstechnica.com·1d ago
New FROST technique lets websites track visitors by analyzing SSD activity
A new tracking technique called FROST (fingerprinting remotely using OPFS-based SSD timing) allows websites to spy on visitors by analyzing
23.social·3d ago
Trump Mobile investigates data leak exposing customer names and contact details
A potential security flaw on Trump Mobile's website may have exposed personal information (names, emails, addresses, phone numbers) of thous
independent.co.uk·4d ago
Third-party UK Visa Portal exposed 100,000+ applicants' passports and selfies online
A third-party website called UK Visa Portal, which is not affiliated with the U.K. government, has been publicly exposing the passports and
techcrunch.com·4d ago