Ekko

Ekko is a post-quantum encryption layer that works on top of messaging platforms people already use daily. Rather than asking users to abandon Instagram, WhatsApp, Telegram, X, Messenger, Discord, or Viber for yet another secure messenger, Ekko encrypts messages within these existing apps. The approach solves a persistent problem in encrypted communications that has plagued privacy advocates for years. Nobody wants to convince their contacts to switch platforms just to have a private conversation. Friends, family, and colleagues have established communication patterns on specific platforms, and asking them to install something new creates friction that kills adoption. With Ekko, the infrastructure stays familiar while the security becomes dramatically stronger. Messages appear as encrypted ciphertext within the normal chat interface, readable only by the intended recipient who also runs Ekko on their end.

The encryption protocol combines X25519 and ML-KEM-768 with XChaCha20-Poly1305, creating a hybrid cryptographic system designed to resist both current and future quantum computing attacks. This matters because quantum computers powerful enough to break current encryption standards are likely to emerge within the coming decades. Data encrypted today using standard methods could be stored by adversaries and decrypted later once quantum capabilities mature. Ekko's approach protects against this harvest-now-decrypt-later threat by incorporating post-quantum algorithms alongside proven classical cryptography. The technical specification is publicly available for security researchers and cryptography enthusiasts to audit, providing the transparency that security-conscious users demand from encryption tools making strong claims.

Private keys generate and remain exclusively on user devices, never touching Ekko's servers under any circumstances. The company's infrastructure only stores handles and public keys, meaning even a complete server breach would not expose actual message content or the private keys needed to decrypt it. This zero-knowledge architecture represents a fundamental design choice rather than a marketing claim. Subpoenas, hacks, insider threats, and government pressure cannot extract information that Ekko's servers simply do not possess. The cryptographic design ensures that Ekko operates as a coordination layer for key exchange rather than a trusted intermediary who could read or surrender communications.

Users can establish identity in two ways depending on their privacy preferences. Claiming a handle like @username makes someone discoverable to other Ekko users who want to initiate encrypted conversations. This works well for people who want privacy from platforms and third parties but are comfortable being findable by others in the Ekko network. For those who prefer complete anonymity, direct key exchange bypasses the handle system entirely. Two parties can share public keys through any secure channel, perhaps in person or through an already-trusted communication method, and begin communicating without ever registering any identity on Ekko's servers. Both approaches result in end-to-end encrypted communications, but the latter leaves no trace of identity anywhere outside the participants' own devices.

Installation currently happens through a Chrome browser extension, making Ekko accessible on any desktop platform running Chrome or Chromium-based browsers like Edge, Brave, or Arc. The web-based approach means Ekko works wherever the browser works, without separate native applications for each operating system. The developers have announced plans to expand to mobile keyboards, which would bring the same encryption capabilities to smartphone messaging without requiring separate apps. Mobile keyboards that intercept text input before sending could enable the same encrypt-in-place workflow that the browser extension provides on desktop. A newsletter signup keeps interested users informed about new messenger integrations and platform expansions as they become available.

The entire project is free and open source, ensuring that the core functionality remains available regardless of what happens to the company behind it. Commercial messaging services can pivot, raise prices, or shut down, leaving users scrambling for alternatives. Open source code allows independent verification of security claims and community contributions to the codebase. If the original developers abandoned the project tomorrow, the community could fork it and continue development. For privacy-conscious individuals who want stronger encryption without the social friction of platform switching, Ekko provides a practical solution that meets people where they already communicate rather than demanding they relocate to unfamiliar territory.