Every feature you need
to encrypt anything.
Signal-level cryptography. Drop-in React hooks. Zero-knowledge infrastructure. Encra gives you the building blocks to add E2E encryption to any app — without becoming a cryptographer.
What ships today
Cryptography
Double Ratchet Algorithm
Every payload encrypted with a unique one-time key. Implements the exact same protocol as Signal.
X25519 Key Exchange
Elliptic-curve Diffie-Hellman. Private keys never leave the device.
XSalsa20-Poly1305
Authenticated encryption — ciphertext integrity verified on every decrypt.
BLAKE2b-256 KDF
Keyed hash function used as the ratchet KDF. Faster than HMAC-SHA-256.
Forward Secrecy
Message keys deleted after use. Past data is safe even if current keys leak.
Break-in Recovery
DH ratchet step restores security after a key compromise.
Developer Experience
useE2EChat() hook
One hook handles key generation, registration, WebSocket, and ratchet. Call sendMessage() and you're done.
useE2EFile() hook
Encrypt any File or Blob end-to-end. One encrypted copy per recipient device. Supports up to 50 MB.
useE2EForm() hook
Encrypt individual form fields before submission. Per-field unique nonces — ideal for HIPAA forms and legal submissions.
Zero-knowledge server
The managed key server stores only public keys and ciphertext blobs. Mathematically cannot read your data.
API key dashboard
Create, manage, and revoke API keys from encra.dev. No infra setup required.
npx encra init
CLI wizard scaffolds .env.example and a working starter component in under a minute.
npx encra ping
Verify your server connection and API key health from the terminal.
npx encra keygen
Generate test X25519 key pairs for debugging and integration tests.
Infrastructure
WebSocket relay
Real-time encrypted message delivery. Offline messages queued and delivered on reconnect.
Self-hostable server
Full source available under BUSL 1.1. Deploy on your own infra with Postgres.
Universal SDK
@encra/core works in React, Node.js, and React Native — same API everywhere.
Managed infrastructure
Zero-config hosted key server and relay at api.encra.dev. Free during beta.
Post-Quantum
cryptography.
Quantum computers running Shor's algorithm will break X25519 key exchange. Not today — but “harvest now, decrypt later” attacks are happening right now. Encra is adding hybrid post-quantum key exchange to protect your users permanently.
ML-KEM-768 (Kyber)
NIST-standardized post-quantum key encapsulation. The same algorithm being adopted by Signal, Apple, and WhatsApp.
Hybrid PQXDH
X25519 + ML-KEM combined. If either is broken, the other still protects you. Zero regression risk.
Harvest-now protection
Adversaries recording encrypted traffic today can't decrypt it later — even with a quantum computer.
Today — Classical
Coming soon — Hybrid PQ
x25519_out ∥ mlkem_out
)
Same API — just a version bump. No migration work.
Coming hooks
All hooks follow the same API pattern as useE2EChat(). Start with chat — drop in more as you need them.
Messaging
useE2EGroup()Group messaging
useE2EPresence()Typing / online status
useE2EDisappearing()Message TTL
useE2ENotification()Push notifications
useE2ESearch()Local encrypted search
Data
useE2EField()Single field encryption
Identity
useE2EVerify()Identity verification
useE2EBackup()Multi-device support
useEncra()Base context provider
Enterprise
useE2EAudit()Compliance logging
What you get vs the alternatives
| Feature | Encra | Roll your own | Encrypt-then-store |
|---|---|---|---|
| Zero-knowledge server | ✓ | ✗ | ✗ |
| Forward secrecy | ✓ | ✗ | ✗ |
| Double Ratchet | ✓ | ✗ | ✗ |
| Post-quantum ready | soon | ✗ | ✗ |
| 5-minute setup | ✓ | ✗ | ✓ |
| Self-hostable | ✓ | ✓ | ✓ |
| No crypto expertise needed | ✓ | ✗ | ✓ |
| Open source | ✓ | ✓ | – |
Start encrypting today.
No credit card. No crypto expertise. Ship in minutes.