How Secure Are Your Text Messages?

2016-02-12 17331404352_bdaccc7a92_o

Over 6 billion text messages are sent in the U.S. every single day. Thats 6,000,000,000. Ninety-seven percent of Americans send at least one text message per day. The average Millennial exchanges 67 texts per day. Text messaging is rapidly becoming the preferred method of communication for many people.But just how private are those messages? Do you know? Do you even care?

Although its not completely bulletproof, Apples iMessage service comes close, by providing end-to-end encryption for the content of themessages exchanged using its servers. Thatprotects the actual messages you exchange, but theres other useful data from those messages that law enforcement can still obtain. For example, the geolocation data and other metadata attached to each message is not necessarily encrypted, and can therefore be accessed by law enforcement with a warrant, that is. Thatsbecause thanks to the U.S. Supreme Courts unanimous 2014 decision inRiley v. California,police are required to get a search warrant beforethey can lawfully access any individuals smartphone.

Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety.

Benjamin Franklin

So how private are your text messages? The answer depends, because theyre about as private as you want them to be. If you use Apples iMessage service, and your account is secured with astrong password, and two-factor authentication, and you dont share any devices with your children, spouse, or other individuals, then youre in pretty good shape. Again, its not bulletproof, but its reasonably secure.

To put it bluntly, I am confident that my messages are private, but only to the extent that the person Im exchanging messages with cares about their own privacy. For that reason alone, I will not discuss sensitive issuesor privileged matters with clients via text message.Problems will arise. For example, who owns the device theyre using to communicate with me? Who pays for the service? Is it a shared plan? When the device or the service (or even the Wi-Fi connection) is provided by a third party, such as an employer, for example, can have serious implications on whether the communication is in fact privileged or not.

Right now, there is a fight on Capitol Hill, and in state legislatures across the country, to enact laws that would require smartphone manufacturers to provide a backdoor to any communication device manufactured and sold. Just last month, aNew York state senatorproposed a bill that would require any smartphone sold or leased in New York, to be capable of being decrypted and unlocked by its manufacturer or its operating system provider. In reality, bills like this, which are only effectiveat the state level, are misnomers. The only effect they could have is to send New Yorkers to neighboring states to purchase smartphones. To be effective, anti-encryption laws would have to be enacted atthe federal level. Period. And thats not happening anytime soon.

[embedded content]