Nicheloom

Market intelligence for builders — see what's gaining traction before it's crowded.

Ekko

post-quantum E2EE layer for Instagram, WhatsApp, Telegram Web

Details

External ID
48986762
Source
HN
Company
—
Product
Ekko
Website domain
useekko.app
Launched
July 21, 2026
Cohort
—
Upvotes
10
Upvotes percentile
0.5418160095579451
Tags
—
Fetched at
Sept. 7, 2026, 9:26 p.m.
Updated at
Sept. 7, 2026, 9:26 p.m.

Description

Hi everyone,I am a big privacy activist and the amount of privacy concerns in the internet with the discussions around European Chat Control, Meta removing e2ee in Instagram and corporations harvesting personal data for AI training is on the rise. The closed source social media companies keep managing and storing our private keys, allowing them to effectively access all of our personal communications..Many open source alternatives exist, but the problem I kept running into was not a lack of good private messengers. Signal, SimpleX, and other projects already do important workThe problem was getting the people to move.A messenger is only useful when the person you need to reach is there. Asking friends, family, coworkers, or customers to abandon their existing chats is a very high barrier.Ekko takes a different approach. It runs as a browser extension on top of existing messengers. Both people still need Ekko, but they do not need to move their conversation. You can continue using the Instagram, WhatsApp, Telegram, or Messenger chat they already share.Actively building this and trying to achieve a seamless automatic encryption in the UI across all popular messengers and adding support across all browsers, IOS, android and social media..Under the hood, Ekko uses hybrid X25519 + ML-KEM-768 and XChaCha20-Poly1305. Private keys are generated and kept on your device.You can claim an Ekko handle to make exchanging public keys easier, exchange invitations directly without an account, or self-host the public-key directory.Currently:- A Chromium browser extension, Experimental Firefox and Safari builds- Instagram, WhatsApp Web, Telegram Web, and Messenger integrations- A self-hostable key directory- Open-source client, protocol, and server codeEarly version Chrome Web Store: https://chromewebstore.google.com/detail/ekko/oaihgpmbkeafbp...Source code:https://github.com/useekko/ekko-coreWebsite and demo:https://useekko.appI would genuinely appreciate direct feedback especially from people familiar with applied cryptography, browser security, key verification, messenger integrations, potential solutions for iOS UI integration (faster than using browser w/ Safari extension)If you try it, please tell me what breaks or what feels confusing. Actively trying to make this better as a side project! If you discover a security issue, email [email protected] rather than posting it publicly.Looking for feedback! :)

Enrichment

Theme
niche social and community platforms
Vertical
Security
Function
Dev tools
Audience
Developer
AI stance
Not AI
Project type
Commercial product
Normalized one-liner
post-quantum encryption layer for messaging apps
Manually corrected
False

Could you build this?

No Implementing post-quantum cryptography (ML-KEM-768) combined with continuous DOM manipulation on frequently updated, minified social media web clients is technically complex and high-risk.

What it would actually take: A production version requires a browser extension containing audited post-quantum cryptographic primitives (X25519 hybrid with ML-KEM-768 and XChaCha20-Poly1305) in WebAssembly. It requires an encrypted key-exchange infrastructure and reverse-engineering the minified, dynamic DOMs of WhatsApp, Instagram, and Telegram to intercept and render messages without triggering platform anti-bot detections. This necessitates deep expertise in applied cryptography, security auditing, and aggressive DOM-hooking resilience.

Discussion

10 comments analyzed.

Competitors mentioned: Signal (formerly TextSecure/SmsSecure/Silence), Messenger apps with built-in encryption

Concerns raised: Unclear UX - users don't understand what using it looks like in practice, Hard to get adoption - barrier to finding others to use it with, AI-generated content in readme undermines trust for security-focused app, Quantum encryption terminology may confuse users or seem unnecessarily complex, Message re-encryption needed when reinstalling/changing phones

Feature requests: Demo/bot accounts across messengers for immediate tryout without inviting friends, Account ownership verification functionality, Clearer real-world demos showing encryption flow with actual messengers

Competitors

Other products that read as similar to this one — 84 launches clear the similarity bar, closest 8 shown.

Attention rank: #34 of 85 (itself plus its competitors, highest first — normalized so YC and Product Hunt are compared fairly).

Launched 265 days after the earliest competitor.

Other launches for this product

Same idea, different domain

Nobody's really built a dev tools tool for Sales yet.