← All tool ratings

Threads

Meta's text-based social platform. 400M+ monthly active users. Instagram integration. No link demotion. ActivityPub federation in progress.

Caution
https://www.threads.net Reviewed 2026-04-03 Editorial assessment by Mike Schneider — not an independent security audit

What should journalists know about Threads?

Threads is the scale play. With 400 million monthly active users and 141 million daily active users as of early 2026, it has surpassed X's mobile daily active user count (125 million on iOS and Android, per Similarweb). For journalists, the key advantage is link handling: Threads does not algorithmically penalize posts containing external links. Adam Mosseri has confirmed this publicly. On X, posts with links see 50-90% reach reduction. On Threads, a link is a link. That matters if your job is driving readers to your reporting. The comparison with Bluesky is straightforward. Bluesky (43 million users) offers open protocol, data portability, domain-as-handle verification, and no ads. Threads offers 10x the audience, Instagram cross-posting, and algorithmic discovery — but it is a Meta product. Your data feeds the same advertising infrastructure as Facebook and Instagram. Threads collects location data, browsing history, search history, health and fitness data, contacts, and financial information, per its App Store privacy label. There is no end-to-end encryption for DMs. Meta's privacy policy allows using your interactions with generative AI features to personalize content and ad recommendations, a policy updated in December 2025. ActivityPub federation is partially live — Threads has interacted with over 75% of fediverse servers, and users can opt in to share posts across the fediverse. But federation is incomplete: polls, quote posts, and restricted replies do not federate. EU users are excluded from fediverse sharing. The 'dear algo' feature lets users write posts starting with 'dear algo' to adjust topic preferences — Meta turned a user workaround into an official feature. Verification uses Meta Verified ($14.99/month), which is a paid identity check, not the cryptographic domain-based system Bluesky offers for free. Choose Threads for reach. Choose Bluesky for independence. Use both if you have the bandwidth. Use neither for sensitive source communication.

Best for

Journalists who prioritize audience size and discoverability. Reporters sharing links to published stories without algorithmic penalty. Instagram-native journalists who want text-based posting integrated with their existing audience. Beat reporters who benefit from algorithmic topic discovery. Newsrooms that need presence on the platform where the most users are.

Not for

Journalists who need end-to-end encrypted messaging — Threads DMs have no E2E encryption. Reporters who want data portability and platform independence — your account is tied to Instagram and Meta's ecosystem. Anyone uncomfortable with Meta's data collection practices. Journalists in the EU who want fediverse interoperability — not yet available there. Reporters who need verifiable institutional identity without paying — Meta Verified costs $14.99/month vs. Bluesky's free domain-handle system.

Security & Privacy

Encryption in transit Yes

Data is scrambled while being sent to their servers

Encryption at rest Yes

Data is scrambled when stored on their servers

Data jurisdiction United States. Meta Platforms, Inc. is headquartered in Menlo Park, California. Threads data is processed under Meta's unified privacy policy. Meta was fined $1.3 billion by Irish regulators for transferring EU user data to the US without adequate protections. No EU-specific data residency option.

Where servers are located — affects which governments can request your data

Security rating Caution

Privacy policy summary

Threads operates under Meta's unified privacy policy and the Threads Supplemental Privacy Policy. Meta collects location data, browsing history, search history, contacts, health and fitness data, financial information, and device identifiers. This data is used for ad targeting across Meta's ecosystem. Third-party services authorized by Meta can access user information for hyper-targeted advertising. As of December 2025, Meta uses interactions with generative AI features to personalize content and ad recommendations. DMs are not end-to-end encrypted — Meta ended E2E encryption support on Instagram DMs in 2025. Account deletion requires deleting your Instagram account (they are linked). Meta complies with US law enforcement data requests and has a history of providing user data to government agencies.

How to protect yourself:

Never use Threads DMs for source communication — they are not encrypted. Assume all posts are permanently indexed and accessible to Meta, advertisers, and law enforcement. Do not link your primary reporting Instagram account if you want separation between personal and professional data. Use a dedicated device or browser profile for Threads to limit cross-site tracking. Review and restrict ad preferences in Meta's privacy settings. For sensitive reporting, use Signal or SecureDrop for source contact — not any Meta product. Enable two-factor authentication. Regularly audit connected apps and permissions in Instagram settings.

TLS encryption in transit. Encryption at rest for stored data. The core concern is not technical security but data practices. Meta collects 28 categories of user data per the App Store privacy label, including location, browsing history, contacts, and financial information. This data feeds cross-platform ad targeting. DMs are not end-to-end encrypted. Meta has been fined $1.3 billion for GDPR violations and $392 million for deceptive location tracking. For standard journalism use — sharing stories, building audience, monitoring public discourse — the platform functions. For any communication involving sources, confidential information, or sensitive investigations, Meta products are the wrong tool. The 'caution' rating reflects the data collection scope, not a technical vulnerability.

Who Owns This

Owner Meta Platforms, Inc. (Menlo Park, California). Threads launched July 5, 2023. Led by Adam Mosseri (Head of Instagram). Parent company led by Mark Zuckerberg. Meta has approximately 72,000 employees.
Funding Subsidiary of Meta Platforms, Inc. (NASDAQ: META). Meta's market capitalization exceeds $1.5 trillion. Threads is funded entirely through Meta's advertising revenue — no separate fundraising.
Business model Advertising. Threads is part of Meta's ad-supported ecosystem. Users see ads in their feeds. Meta generated $164 billion in advertising revenue in 2024. Threads monetizes through the same ad infrastructure as Facebook and Instagram. User data collected on Threads enriches Meta's cross-platform advertising profiles.

Known issues

Meta's data collection is among the most extensive of any social platform — the App Store privacy label lists 28 data categories. Meta was fined $1.3 billion for GDPR violations related to EU-US data transfers. The $392 million settlement with 40 US states over deceptive location tracking (2022) applies to Meta's broader ecosystem. Instagram DMs lost end-to-end encryption support in 2025, and Threads DMs inherit this limitation. The algorithm is opaque despite the 'dear algo' workaround. ActivityPub federation is incomplete — polls, quote posts, and restricted replies do not federate, and EU users are excluded. Meta Verified ($14.99/month) is a paid verification system, unlike Bluesky's free domain-based verification. Search functionality has been criticized as limited compared to X. Content moderation at Meta's scale has documented failures — Meta's systems reportedly serve up to 15 billion high-risk scam ads daily. Threads cannot be deleted without deleting the linked Instagram account.

Pricing

Free. No paid tier. Monetization through Meta's advertising ecosystem — users are the product, not the customer.

This is an editorial assessment based on publicly available information as of 2026-04-03, using our published methodology. Independent security review is pending. Security posture can change at any time. This is not a guarantee of safety.

Something wrong or outdated? Report it.