Javascript is not enabled.

Javascript must be enabled to use this site. Please enable Javascript in your browser and try again.

Skip to content
Content starts here
CLOSE ×
Search
CLOSE ×
Search
Leaving AARP.org Website

You are now leaving AARP.org and going to a website that is not operated by AARP. A different privacy policy and terms of service will apply.

Is It Safe to Send Texts From iPhones to Androids and Androids to iPhones?

A recent FBI warning raises security questions you’ll want to keep in mind


a blue and green text bubble coming from different smartphones
Photo Collage: AARP; (Source: Getty Images)

I have an iPhone and routinely send texts to friends with Android devices who then message me back. Now I hear it might not be safe. What gives?

What you’ve picked up on is a recent warning from the FBI that sending texts from an iPhone to an Android device or from an Android to someone with Apple’s smartphone is indeed risky.

On the other hand, messages you send from your iPhone to a person with another iPhone are considered safe. That generally goes for Android-to-Android communications as well, though devices in the Android camp vary, and Google requires users to go through more steps.

Texts sent within a type of messaging system — iMessage for iPhones, Google Messages for Androids — are end-to-end encrypted or scrambled. For all intents and purposes, that means only the intended recipients can decipher or read them, not bad guys or snoops.

Of course, assuming that the only people you text are folks with the same flavor of phone as yours would be silly. That’s where things could get dicey.

spinner image Ed Baig

Ask The Tech Guru

AARP writer Ed Baig will answer your most pressing technology questions every Tuesday. Baig previously worked for USA Today, BusinessWeek, U.S. News & World Report and Fortune, and is author of Macs for Dummies and coauthor of iPhone for Dummies and iPad for Dummies.

Have a question? Email personaltech@aarp.org​

The hack that raised the FBI’s hackles

In early December, the FBI, the Cybersecurity and Infrastructure Security Agency (CISA) and the National Security Agency (NSA) issued security guidelines after a major hacking attack against U.S. telecom giants AT&T and Verizon and at least one other company, named Lumen Technologies.

The data breach, which the Wall Street Journal revealed in October, has been blamed on the Chinese government. It’s known by the moniker Salt Typhoon because of the hacking group behind it.

What can you do?

Most iPhone users will stick with Apple’s built-in Messages app to send iMessages, just as their Android friends will stick with Google Messages. Again, if you’re texting with friends in the same family of devices, you have little reason to be paranoid.

Apple says even it cannot decrypt iMessages while in transit, including photos or videos sent as attachments.

Nor can Google read Google Messages while the communications are whisked from your phone to the phone you’re messaging if both the sender and recipient have enabled RCS Chats, shorthand for an industry standard protocol for messaging called Rich Communications Services.

“Encryption is your friend, whether it’s on text messaging or if you have the capacity to use encrypted voice communication,” CISA’s executive assistant director for cybersecurity, Jeff Greene,  said during a recent press call. “Even if the adversary is able to intercept the data, if it is encrypted, it will make it impossible” to read.

You can choose to use another app

You have choices for private messaging apps that employ end-to-end encryption. Signal Private Messenger, Telegram Messenger, and Meta’s Facebook Messenger and WhatsApp Messenger are among the most notable.

The apps are free. Beyond instant text messages, you can make calls, have group chats, dispatch pictures and videos, and in some cases exploit other features, such as making messages automatically vanish after a set time.

But for the most part, the folks you’re messaging must be using the same app.

“Signal is kind of the gold standard here” among privacy advocates, says Chris Frascella, counsel at the Washington-based Electronic Privacy Information Center.

More often he hears about deepfakes and other scams that come through Telegram or WhatsApp. But he’s quick to caution that Signal isn’t immune.

“It’s important to differentiate between the types of attacks that are likely to result from harvesting people’s communications,” he says.

“I would expect that the state espionage actors in [Salt Typhoon] are probably looking for information that can help them get access to valuable government or corporate data,” Frascella says. “If the actors behind this cyberintrusion were to make the data they harvested available to fraudsters, that could make it easier to impersonate a family member” as part of a deepfake.

Practice safe texting. Keep sensitive info out of your chats

Even if you are using end-to-end encryption, be mindful of anything you put in a text or chat message. Unless it is an absolute necessity, avoid including your most sensitive or revealing personal information in even private communications.

Important considerations: Does the person that you’re messaging really need to know what you’re being asked to share? Do you absolutely trust that person?

 “My parents raised me, ‘Do not put anything in a digital communication that you do not want to see in Times Square,’ ” Frascella says.

Consider it sound advice.

Bonus tip: More iPhone support for texts with an Android

With the recent iOS 18 software update, Apple added support for the RCS standard, bringing features that users of Apple’s preferred iMessage protocol have grown accustomed to but were absent when texting an Android user.

iMessage remains Apple-only. But the update means you can exchange high-resolution photos and videos as well as view delivery, read receipt and typing indicators.

Enable RCS Messaging on iPhone in Settings | Apps | Messages | RCS Messaging. If you’re using cellular, your wireless carrier must support the standard.

Apple points out that its implementation of RCS is not end-to-end encrypted, so it isn’t protected against someone who might want to peek at a message’s contents.

If you’re using RCS to message an Android pal, the text field on iPhone will show “Text Message RCS.” It will still show iMessage when you text another iPhone user.

Oh, and in case you’re wondering about “green bubble shaming,” as The New York Times called the texting divide, messages between iPhones and Android will still appear in green text bubbles. iMessage texts arrive in bubbles that are blue.

Unlock Access to AARP Members Edition

Join AARP to Continue

Already a Member?