iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android
Apple's iOS 26.5 introduces default end-to-end encryption for RCS messaging between iPhone and Android, marking a major step in cross-platform messaging security.
Apple has officially released iOS 26.5 with support for end-to-end encryption (E2EE) for Rich Communication Services (RCS) messaging, enabling secure cross-platform chats between iPhone and Android users. The feature, built on the GSMA's RCS Universal Profile, is enabled by default for both new and existing conversations, displaying a lock icon to indicate encrypted chats.
RCS is a modern messaging protocol that supports high-resolution media, typing indicators, and read receipts, replacing traditional SMS. The E2EE implementation ensures that messages cannot be read while in transit between devices. Apple began testing E2EE in RCS with iOS 26.4 beta, initially limiting it to Apple-to-Apple conversations, before expanding to cross-platform support.
Google confirmed that Android users on the latest Google Messages will also see a padlock icon for encrypted conversations. The GSMA, which oversees the RCS standard, praised the collaboration between Apple, Google, and the wider mobile ecosystem. Alex Sinclair, GSMA's CTO, stated that the new secure services are delivered on an open, globally recognized foundation.
In addition to the RCS encryption, iOS 26.5 patches over 50 vulnerabilities, including flaws in AppleJPEG, ImageIO, Kernel, mDNSResponder, and WebKit. These vulnerabilities could lead to information disclosure, denial-of-service, or unexpected system termination. Users are urged to update to the latest version to protect against these threats.
The move to encrypt RCS messages addresses long-standing privacy concerns, as traditional SMS lacks encryption. With billions of messages exchanged daily between iPhone and Android users, this update significantly enhances security for cross-platform communication. The feature is rolling out with supported carriers and requires both parties to have compatible devices and software.