Moxie Marlinspike, creator of Signal's end-to-end encryption protocol, is partnering with Meta to bring the same privacy technology that secured WhatsApp for billions of users to Meta's AI chatbots.
In a blog post published March 19, Marlinspike announced that his privacy-focused AI chatbot Confer will integrate its encryption technology to underpin Meta AI, combining "the most private AI chat technology in the world with the most capable AI models in the world."
The AI Privacy Crisis
Marlinspike's motivation stems from a stark observation: AI chat apps have become "some of the largest centralized data lakes in history, containing more sensitive data than anything ever before."
Users treat AI chatbots like private journals, sharing unfiltered thoughts, medical records, financial information, and personal correspondence. Unlike actual journals, this data flows through API endpoints "specifically designed for extracting meaning and context," he writes. And none of it is encrypted end-to-end.
"Right now, none of that data is private," Marlinspike states. "It is shared with AI companies, their employees, hackers, subpoenas, and governments. As is always the case with unencrypted data, it will inevitably end up in the wrong hands."
From WhatsApp to Meta AI
Ten years ago, Marlinspike worked with Meta to integrate the Signal Protocol into WhatsApp, enabling end-to-end encryption by default for billions of people. Now he's repeating that partnership for the AI era.
Confer, Marlinspike's independent AI chatbot, was built on open-weight models with a core principle: nobody—not even Marlinspike himself—can access user conversations. The technology uses passkey encryption and private inference to ensure true end-to-end privacy.
But Confer users have missed the capabilities of frontier proprietary models. By bringing Confer's privacy technology to Meta's advanced models, Marlinspike aims to solve that trade-off.
"This is also a moment that feels unlike any moment in technology before: the world is changing quickly; we need to prepare for a future that is coming fast," he writes. "I want that future to be safe, private, and accessible—which requires acting now, at scale."
What This Means for Users
The integration will extend beyond basic chat. As Meta builds more AI products, Confer's privacy technology will be "part of the foundation of everything that is to come," Marlinspike says.
Confer will continue operating as an independent entity while Marlinspike works on the Meta integration. Users can already try Confer at confer.to, experiencing truly private AI chat before the broader Meta rollout.
The timing is critical. As AI capabilities accelerate and more sensitive data flows into chatbots, the window to build privacy into the foundation—rather than retrofitting it later—is closing. Marlinspike's bet is that the same encryption that protected billions of messaging conversations can protect billions of AI conversations too.
