Texts are no longer private.
Getty
Updated on Dec. 2 with Google’s response to the furor around this update.
Microsoft triggered a viral furor when it revealed a Teams update to tell your company when you’re not at work. Now Google has done the same. Forget end-to-end encryption. A new Android update means your RCS and SMS texts are no longer private.
As reported by Android Authority, “Google is rolling out Android RCS Archival on Pixel (and other Android) phones, allowing employers to intercept and archive RCS chats on work-managed devices. In simpler terms, your employer will now be able to read your RCS chats in Google Messages despite end-to-end encryption.”
This applies to work-managed devices and doesn’t affect personal devices. And in certain regulated industries it just adds RCS archiving to existing SMS archiving. But employees in regular organizations view texting as different to emailing, especially given the expectations around end-to-end encryption. That’s no longer the case.
ForbesFBI Warns Gmail And Outlook Users—Do Not Click On These EmailsBy Zak Doffman
This underlines the widespread misunderstanding of end-to-end encryption. The security protects your messages when they’re being sent, but once they’re on your phone, they’re decrypted and available to anyone controlling the device.
Google says this is “a dependable, Android-supported solution for message archival, which is also backwards compatible with SMS and MMS messages as well. Employees will see a clear notification on their device whenever the archival feature is active.”
Suddenly, the perk of being given a phone at work is not as good as it might seem. While employees have long been aware of the risks in over-sharing on email — a woefully insecure technology that is easy for employers to monitor, texting has been seen as different. And this isn’t just for regulated industries. All organizations can play along.
Google says “this new capability, available on Google Pixel and other compatible Android Enterprise devices gives your employees all the benefits of RCS — like typing indicators, read receipts, and end-to-end encryption between Android devices — while ensuring your organization meets its regulatory requirements.”
In response to the furor around this update, Google told me “this update does not change or impact the privacy of personal devices. This is an optional feature for enterprise-managed work phones in regulated industries where employees are already notified that their communications are archived for compliance reasons.
There has long been a concern that employees have been turning to shadow IT systems to communicate with colleagues — WhatsApp and Signal in particular. This latest update won’t help make that situation any better.
There have been questions around whether Google’s new update means other messaging app content can also be archived and shared with employers, specifically secure apps including WhatsApp and Signal. The answer is no.
Forbes‘Disaster’—iPhone And Android VPN Ban ‘Actually Happening’By Zak Doffman
SMS and now RCS messaging is built into the phone’s OS itself, handled by Android (or iOS). Over-the-top platforms are not. They control their encryption and decryption. Their databases can be included in a general phone archive, but don’t need to be.
This is specific to general texting. “Previously,” Google says, “employers had to block the use of RCS entirely to meet these compliance requirements; this update simply allows organizations to support modern messaging — giving employees messaging benefits like high-quality media sharing and typing indicators — while maintaining the same compliance standards that already apply to SMS messaging.”
Meanwhile, if you have a work managed Android phone, watch for the message that warns your texts are no longer as private as they were.