Ekko

Ekko is a browser extension that adds end-to-end encryption on top of messaging apps you already use. Instead of asking you to switch to a new platform, it encrypts messages in place across Instagram, WhatsApp, Telegram, Discord, Messenger, X, Viber, and iMessage. The encryption is post-quantum, meaning messages you send today are protected against both current attacks and future quantum computers that could break traditional cryptography.

The technical approach combines classical and post-quantum algorithms. It uses a hybrid of X25519 and ML-KEM-768 for key exchange, with XChaCha20-Poly1305 for the actual message encryption. Private keys are generated and stored only on your device. Ekko's servers hold public keys and user handles, nothing else. The encrypted messages travel through whatever messenger you're using, so they never pass through Ekko's infrastructure at all.

There are two ways to use it. You can claim a handle, something like @yourname, which makes it easy for others to find your public key and start an encrypted conversation. Or you can stay anonymous, generate keys locally, and share invite links directly. No account is required for the anonymous path, which keeps the barrier low for one-off secure exchanges.

Current platform support covers the Chrome extension, with a phone keyboard integration planned for later. The extension intercepts your messages before they're sent, encrypts them client-side, and the recipient's extension decrypts on the other end. To everyone else, including the messenger platform itself, the message looks like ciphertext.

Who it's for is anyone who wants encrypted messaging without abandoning the apps their contacts already use. Journalists, activists, lawyers, or privacy-conscious individuals who can't convince everyone to switch to Signal will recognize the appeal. It's also useful for sensitive work conversations on platforms like Slack or Discord where the company running the service can read your messages by default.

The project is open source and free. There's no paid tier, no usage limits, and no monetization mentioned on the site. That transparency makes it easier to trust, though it also means ongoing development depends on community support rather than revenue.

The tradeoff is that both parties need the extension installed for encryption to work. If you send an encrypted message to someone without Ekko, they'll just see garbled text. It's a coordination problem familiar to anyone who has tried to get friends onto a secure messenger. But for conversations where both sides are willing to install the extension, this adds a meaningful layer of protection that the underlying platform can't strip away.