End-to-end encryption on the national cryptographic standards of Ukraine. No accounts. No phone numbers. No data stored on the server.
SKLO is the Ukrainian word for “glass”: transparent to you, impenetrable to outsiders. The messenger is built entirely on Ukrainian cryptographic standards (DSTU) — the same ones approved for the protection of state information. The elliptic-curve mathematics and the algorithm implementations were written by our engineer over decades — this is not a wrapper around someone else’s library, but an engine of our own.
Our server is a simple relay without a database. Switch it off — and nothing remains on it, because nothing was ever there.
History, contacts and keys live only on your device, sealed under your master password. Without it, no one can read them — not the phone, and not us.
| Task | Standard |
|---|---|
| Hashing & key derivation | Kupyna / DSTU 7564 |
| Encryption | Kalyna / DSTU 7624 (AEAD) |
| Digital signatures | DSTU 4145 |
| Key exchange | ECDH on an Edwards curve |
| Conversation secrecy | Double Ratchet — a new key for every message |
Send files up to 200 MB — chunked, streamed and encrypted end-to-end, with no size games and no cloud middlemen.
Your identity, contacts and history export into a single encrypted file. Restore on any device with your master password — recovery is purely between you and your password.
Slide and hold for three seconds — identity, contacts and history are erased beyond recovery. Releasing early cancels.
Five minutes of inactivity wipes private material from memory and returns to the lock screen. Manual lock any time.
On iPhone, keys are wrapped in the Secure Enclave and unlocked with Face ID — hardware-backed protection on top of the master password.
Contact identities are exchanged as DSTU-signed bundles — a forwarder cannot swap a name onto someone else’s key without breaking the signature.
Runs entirely in your browser: the cryptography is compiled to WebAssembly and executes on your device. Every asset is integrity-pinned — a compromised host cannot silently push a modified app to returning visitors.
Open sklo.me →A fully native Swift app with the same cryptographic core compiled for ARM64 — byte-exact interoperability with the web version, plus Face ID, Secure Enclave and hardware-backed key storage. Messages and files flow seamlessly between iPhone and browser.
Ask about early access →No sign-up, no phone number, no download. Open the web app, create an identity, and you are speaking over state-grade cryptography within a minute.
