And you do not have to know about it. While many TikTok users assume their DMs are private, the reality is slightly different. Under certain circumstances, police can access TikTok direct messages if they have a legitimate reason and the proper legal authority.
This revelation was made by the company in an interview with the BBC and has sparked debate globally about privacy on social media platforms. Millions of Kenyan tiktokers make up a good chunk of the over a billion users on TikTok, mainly using the app for entertainment, business, and social interaction.
Why TikTok messages are not fully private
Unlike majority of the major messaging platforms, TikTok does not use end-to-end encryption (E2EE) for its direct messages. End-to-end encryption is a security feature that ensures only the sender and recipient can read the messages, and not even the platform itself can access them.
Apps like Facebook, WhatsApp and Signal use this technology. TikTok deliberately chose not to.
Instead, TikTok uses standard encryption. That means certain authorised employees inside the company can technically access messages if required — for instance when investigating harmful behaviour or responding to requests from law enforcement agencies.
According to the company, the decision was made partly to allow authorities and safety teams to investigate cases such as harassment, grooming, or other illegal activity happening through private messages.
When police can request your DMs
This does not mean authorities can casually read everyone’s messages.
Police generally need a legal reason and a formal request, such as a court order, search warrant, or other lawful data request depending on the country’s legal framework. The request is typically sent directly to TikTok, not to the user.
In other words, if investigators suspect criminal activity such as fraud, exploitation, harassment, or incitement to violence they can legally request TikTok to provide relevant data linked to a user account.
TikTok can then review the request and share the information if it complies with the law.
The key point: you may never be contacted personally before your messages are accessed. Authorities usually deal directly with the platform itself.
Why the platform allows this
TikTok argues that keeping messages accessible to safety teams helps prevent serious harm online.
If messages were fully encrypted, the company says it would be harder to detect things like child exploitation, harassment or cyberbullying, scams or organised criminal activity, threats of violence.
Child-protection organisations have supported the approach, saying it allows quicker intervention in dangerous situations.
UK child protection charity the NSPCC while welcoming TikTok’s decision citing the platform’s popularity with young people, had this to say to BBC:
We know just how risky end-to-end-encrypted platforms can be for children, preventing the detection of child sexual abuse and exploitation and contributing to a worrying global decline in reports.
~ Rani Govender, NSPCC associate head of policy for child online safety
However, privacy advocates have raised concerns that the policy gives platforms and potentially governments too much visibility into private conversations.
TikTok is extremely popular in Kenya, especially among young creators and small businesses that use the platform for marketing and content creation.
But the app has also come under scrutiny in the country due to problematic content and safety concerns. Kenya has time and again emerged as the world’s most active social media nation, but with perils.
For example, TikTok recently revealed that it removed more than 580,000 videos in Kenya in just three months for violating its community guidelines.
Most of these videos were flagged automatically by TikTok’s moderation systems, and nearly all were removed before users even reported them.
The crackdown shows how closely the platform is monitoring activity in Kenya, particularly as concerns grow about harmful content, exploitation, and privacy violations online.
There have also been public controversies involving creators who secretly filmed people or posted inappropriate content, fuelling calls for tighter digital oversight.
The bigger debate: safety vs privacy
The situation highlights a bigger global debate about the balance between user privacy and online safety.
On one side are privacy advocates who argue that private messages should remain completely private. They worry that companies and governments having access to conversations could lead to surveillance or misuse of data.
On the other side are regulators and child-safety organisations who say platforms must be able to intervene when crimes are happening online.
TikTok has clearly chosen the latter path keeping messages accessible in certain situations so investigations can happen when necessary.
For Kenyan TikTok users, the takeaway is simple: your DMs are not completely invisible to the outside world.
If law enforcement agencies suspect illegal activity and obtain the proper legal authority, they can request access to message data directly from TikTok.
You may never receive a notification beforehand. In the era of social media, the old rule still applies: never send a message you wouldn’t want someone else to eventually read.