I've been looking into Ekko as a way to bypass this migration headache. Instead of forcing a platform switch, it functions as a browser extension that layers post-quantum end-to-end encryption (E2EE) directly on top of the messengers people already use. Essentially, you keep your existing accounts, but the content is encrypted before it ever hits the company's servers.
From a technical perspective, it's using a hybrid approach to stay ahead of future decryption threats:
Key Exchange: Hybrid X25519 + ML-KEM-768Symmetric Encryption: XChaCha20-Poly1305Key Management: Private keys are generated and stored locally on the device, not by the service provider.
The current deployment state is a Chromium extension, with experimental builds for Firefox and Safari. It supports WhatsApp Web, Instagram, Telegram Web, and Messenger. For those who want full control, there's a self-hostable public-key directory.
If you're setting this up for a team, the workflow is basically:
-
Install the extension.
-
Claim a handle to simplify public key exchange.
-
Chat through the web version of your preferred messenger.
The source code is available for a deep dive into the protocol:
https://github.com/useekko/ekko-core
It's a clever workaround for the "adoption gap" in secure communications. Rather than fighting the ecosystem, it just upgrades the security of the existing one.
Next Buying a high-end phone in India is a massive investment →