Apple on Monday released iOS 26.5 with beta support for end-to-end encryption in Rich Communication Services chats, a change that affects iPhone users on supported carriers and Android users on the latest Google Messages version, with the feature enabled by default for new and existing conversations.
KEY FACTS
- Feature RCS chats can now use end-to-end encryption in beta across iPhone and Android.
- Availability The rollout applies to iOS 26.5 users with supported carriers and Android users on Google Messages.
- Default setting The encryption is turned on for new and existing conversations.
- Security Apple says encrypted RCS messages cannot be read while sent between devices.
- Patch set The update also fixes more than 50 vulnerabilities in iOS and iPadOS.
RCS is an internet-based messaging standard that supports higher-resolution media, typing indicators and read receipts between Android and iPhone devices. Apple said users will see a new lock icon in RCS chats when the conversation is encrypted.
The company had tested the feature in iOS and iPadOS 26.4 Beta, but only for conversations between Apple devices. In early 2025, the RCS Universal Profile backing the standard gained support for end-to-end encryption.
Google said Android users in Google Messages will see a padlock icon for cross-platform encrypted chats. The disclosure said the rollout reflects collaboration among Apple, Google and the wider mobile ecosystem through the GSMA RCS Working Group.
The same update also includes fixes for flaws in AppleJPEG, ImageIO, Kernel, mDNSResponder and WebKit. Apple said the issues could lead to sensitive information leaks, denial-of-service conditions or unexpected system termination.
Apple’s security release notes say the update addresses more than 50 vulnerabilities in iOS and iPadOS.
WHY IT MATTERS
The change brings a more secure default to a major cross-platform messaging system used by both iPhone and Android users. The separate security fixes also reduce exposure to bugs that could affect device stability, privacy and data security.