Skip to main content

Is Google Messages Safe?

Is Google Messages Safe?

Laura Martisiute

January 24, 2025

Reading time: 8 minutes

If you use or plan to use Google Messages, you need to know: Is Google Messages safe? 

Below, we explain whether Google Messages is: 

  • Safe to use. 
  • Good for privacy. 

We also look at some steps you can take to improve both your safety and privacy when using this app. 

What Is Google Messages?

Google Messages is an Android app made by Google that lets users communicate through SMS (Short Message Service) and MMS (Multimedia Messaging Service). 

Google Messages

You can use the app to send and receive texts, photos, videos, GIFs, and audio. 

It’s pre-installed on most Android devices. However, you can also get it from the Google Play Store. 

Google Messages also supports Rich Communication Services (RCS), a more advanced messaging protocol than the one used by most normal MMS messages.

With RCS, you can:

  • Send larger and higher-resolution photos and videos than allowed by standard MMS.
  • See when your contact has read your message (if RCS is enabled).
  • See when the other person is typing in real time.
  • Add or remove members from a group chat (without having to start a new group).
  • Rename group chats for clarity.

When both participants use Google Messages’ RCS, chats can be end-to-end encrypted. 

If you (or your contact) have poor data coverage or RCS is unavailable, the Messages app automatically falls back to SMS/MMS.

Google Messages integrates with other Google services, like Google Photos. 

It’s also available as a web version, meaning users are able to send and receive messages from their computer. 

Is Google Messages Safe?

Depends on your definition of “safe,” but generally, yes.  

One of the core security features that Google Messages offers is end-to-end encryption (E2EE), which is available for RCS chats. E2EE encryption means only the sender and the recipient can see the messages’ content. 

This feature is also available in group chats, as long as everyone in the group is on Google Messages with RCS turned on. 

Google has instructions on how to check if a conversation is end-to-end encrypted. 

Google Messages - how to check if a conversation is end-to-end encrypted

Google will alert you if a message is similar to known scams or phishing attempts used to steal personal information.

Your phone privately analyzes message content on your device, so no messages are sent to any server.

Google Messages - about suspicious message alerts

Users can report spam in Google messages. 

In 2024, Google introduced five new protections to Google Messages (some of which are in pilot but may be expanded while others are due to be launched soon):

  1. Enhanced scam detection. Google Messages now better analyzes scam texts, focusing first on package delivery and job-seeking scams.
  2. Intelligent link warnings. Google Messages warns users when they receive potentially dangerous links. Messages with suspicious links from unknown senders may be blocked.
  3. Hide messages from unknown international senders. A new setting lets you automatically move messages from international numbers (not in your contacts) to the spam folder.
  4. Sensitive content warnings. Optional feature that blurs images which may contain nudity before viewing or sending. Processing is entirely on-device (i.e., Google doesn’t see or store the images nor knows they contain nudity). You have to opt into this setting if you’re an adult, but it’s automatically enabled (with an opt-out) for users under 18.
  5. Contact verification. This feature lets you verify a contact’s public key so you know you’re messaging the intended person.

Google gets a security rating of 673 out of 950 from the cyber risk solution UpGuard, with the company noting that no valid Content Security Policy has been implemented and that the service is potentially vulnerable to MIME confusion attacks.

According to its Google Play page, the security practices of the Google Messages app include data encryption in transit and independent security review. Users can also request that their data be deleted. 

Google Messages security practices as per its Google Play page

No data breaches have been associated with Google Messages at the time of writing.

Is Google Messages Private?

Again, depends on your definition of “private.” 

Google describes some of the privacy features it has on its website. 

For example, with RCS enabled, 1:1 and group chats between Google Message users are automatically end-to-end encrypted, so only you and the other participants can read the messages. With E2EE, not even Google can see the content of these chats. 

However, communications between iPhone and Android users are not end-to-end encrypted

If you share your location, Google Messages temporarily collects it. You can turn off location access in your device’s settings.

Google Messages collects crash logs, diagnostics, and performance data to improve the app’s stability and prevent misuse.

Certain features (like spam filtering) use additional data to identify potential spam, but your message content is not used for advertising.

Your general Google Account privacy settings affect how widely your personal details (like your name or photo) are shared (important when messaging people outside your contacts).

To limit data collection, you can turn off or adjust location permissions and other privacy-related settings (like “Help improve Messages”).

Google says it does not scan or use your Google Messages content for advertising purposes.

In general, people seem wary of trusting Google with their privacy. 

Reddit post about Google Messages and Google in general

According to its Google Play page, the Google Messages app may collect files and docs, audio, personal information, photos and videos, app activity, contacts, location, device or other IDs, app information and performance, and messages. 

Google Messages - data collected

And it may share data like personal information (e.g., name, user IDs, email address, and phone number) and device or other IDs. 

Google Messages - data shared

Google’s overall privacy policy gets a “Grade E” from Terms of Service; Didn’t Read (ToS;DR), a project that rates internet services’ terms of service and privacy policies. This means, “The terms of service raise very serious concerns.” 

Google Messages  - Terms of Service; Didn't Read rating

ToS;DR notes that Google stores data on people even if they don’t use the service, users’ identities are shown to other users, the service can read users’ emails, the service can view users’ browser history, and the service holds onto content that users have deleted.

How to Improve Your Safety and Privacy On Google Messages

Follow the below steps for a safer and more private experience while using Google Messages. 

  • Check that RCS is on. Open the Google Messages app, go to Settings > Chat features (sometimes called “RCS chats” or “Chat features”), and turn them On. This helps enable end-to-end encryption for conversations with other RCS-enabled contacts.
  • Verify encryption. When writing a message, look for a lock icon on the send button or a banner that says “RCS chat with [contact].” This indicates end-to-end encryption is active.
  • Stay updated. Keep your Google Messages updated. Outdated versions may not support full encryption.
  • Turn on Verified SMS. This feature verifies the identity of businesses that contact you. 
  • Limit app permissions. Look through the list of permissions Google Messages wants. Turn off access to any that are unnecessary (e.g., location, contacts, etc.) to limit the amount of personal data the app can access. 
  • Regularly clear your message history. Delete sensitive conversations or old messages on a regular basis to ensure that private data is not stored indefinitely on your device. This helps protect your information if someone gains access to your phone.
  • Enable spam protection. Google Messages has built-in spam detection. Verify Settings > Spam protection is enabled. Suspicious texts can be filtered automatically.
  • Check links. If a message contains unfamiliar or suspicious links, be cautious and don’t click before verifying the sender. Messages may also show a warning banner if a link looks dangerous.
  • Double-check recipients. Make sure you’re sending photos, attachments, or sensitive info to the correct contact, especially in group chats.
  • Review how your personal information is displayed to others. Go to your Google Account > Personal info & Privacy to check how your personal details (like name or photo) appear to others. If you’re texting someone outside your contacts, only share the information you’re comfortable displaying.
  • Change location permissions. If you share your location in a conversation, Google Messages briefly accesses your location. To turn it off entirely, open your phone’s Settings > Apps > Google Messages > Permissions and revoke location access if you don’t plan to use it.
  • Limit diagnostic data collection. You can control how much diagnostic and usage data is sent to Google by toggling Help improve Messages in Google Messages Settings > Advanced (or a similar path). Turn it off if you want to limit diagnostic data collection.
  • Lock the app with a password or biometric lock. Install a third-party app locker to secure Google Messages with a password, fingerprint, or face recognition. This extra layer of security prevents unauthorized users from opening the app and viewing your messages.
  • Turn off message previews. Turn off message previews on your lock screen to keep your conversations private from anyone who may glance at your phone. Go to your notification settings and select “Hide sensitive content” or turn off notifications from appearing on the lock screen.
  • Use two-factor authentication (2FA). Enable 2FA for your Google Account to add an additional layer of security. This prevents unauthorized access to your account, which includes data synced with Google services like Messages.
  • Report Spam or block senders. If you receive a scam or phishing message, use the Report spam or Block feature. Reporting helps Google improve spam detection across the board.
SHARE THIS ARTICLE
Laura Martisiute is DeleteMe’s content marketing specialist. Her job is to help DeleteMe communicate vital privacy information to the people that need it. Since joining DeleteMe in 2020, Laura h…
Laura Martisiute is DeleteMe’s content marketing specialist. Her job is to help DeleteMe communicate vital privacy information to the people that need it. Since joining DeleteMe in 2020, Laura h…
Hundreds of companies collect and sell your private data online. DeleteMe removes it for you.

Our privacy advisors: 

  • Continuously find and remove your sensitive data online
  • Stop companies from selling your data – all year long
  • Have removed 35M+ records
    of personal data from the web
Special Offer

Save 10% on any individual and
family privacy plan
with code: BLOG10

Want more privacy
news?
Join Incognito, our monthly newsletter from DeleteMe that keeps you posted on all things privacy and security.

Don’t have the time?

DeleteMe is our premium privacy service that removes you from more than 750 data brokers like Whitepages, Spokeo, BeenVerified, plus many more.

Save 10% on DeleteMe when you use the code BLOG10.

Related Posts

Is Brave Browser Safe?

If you use or plan to use Brave browser, you need to know: Is Brave browser safe?  Below, we explain whether Brave browser is:  We also g…
Laura Martisiute
June 25, 2024

Is Tor Safe?

If you use or plan to use Tor, you need to know: Is Tor safe?  Below, we explain whether Tor is:  We also give some steps you can take to…
Laura Martisiute
June 25, 2024

Is Etsy Safe?

If you use or plan to use Etsy, you need to know: Is Etsy safe?  Below, we explain whether Etsy is:  We also give some steps you can take…
Laura Martisiute
June 25, 2024