Месенджер MSG.WE.UA

we.ua

About this app

MSG.WE.UA - messenger from WE.UA for daily communication, work and important conversations. It combines quick chats, audio and video calls, file sharing and end-to-end encryption to keep personal correspondence private.

The messenger is available in a web version on various OS, including Android. Log in to your WE.UA account, open a dialogue and continue the conversation from any of your devices.

FEATURES

- Personal and group chats.
- Instant messages via a persistent WebSocket connection.
- Replies to specific messages, forwarding, editing and deleting.
- Reactions, read statuses, online presence indicator.
- Sending photos, videos, documents, voice messages and other files.
- Viewing media without leaving the dialogue.
- Audio and video calls based on WebRTC.
- Push notifications about new messages and incoming calls.
- Convenient work with multiple devices: browser, phone and computer.
- Light and dark themes.
- Authorization through WE.UA and Google.

PRIVACY AS A FOUNDATION

MSG.WE.UA is designed so that the server is a transport and storage of encrypted data, and not a place to read private correspondence. The message text is encrypted on the sender's device before transmission to the network and is decrypted only on the devices of chat participants who have the appropriate key.

The messenger servers do not store decrypted message texts and public keys of chats. The server sees the technical data necessary for delivery and synchronization, but stores the content of messages in the form of encrypted data according to service metadata. It does not have the material necessary to decrypt correspondence.

Contact identifiers are also designed with data minimization in mind. Decrypted phone numbers, email addresses, and usernames are not stored on the messenger servers as open contact data. Cryptographic hash values ​​are used to search and link accounts; if necessary, the displayed value is transmitted and stored only in encrypted form.

HOW E2EE WORKS

A separate random 256-bit chat key is created for each chat on the client device. It is this key that encrypts the content of messages using AES-256-GCM - an authenticated encryption mode that protects both confidentiality and data integrity. A new random 96-bit nonce is created for each encryption. This means that tampering or damage to the encrypted message must be detected during decryption.

Each device has its own cryptographic ECDH key pair on the P-256 curve. The chat key is never transmitted to the server in the open: it is "wrapped" separately for each authorized device. The sending device computes the shared ECDH secret with the recipient's public key, hashes it with SHA-256, and uses the resulting AES-GCM key to encrypt the chat key. The server stores only this individual encrypted key container - encrypted_chat_key - along with the metadata needed for delivery.

This model provides important practical advantages:

- the chat key exists in clear form only on the participants' devices;
- the server cannot decrypt messages or chat keys;
- each new device receives its own encrypted copy of the key;
- loss or replacement of one device does not make the keys of other devices clear;
- encrypted correspondence can be synchronized between own devices without transmitting the key in clear form.

SECURE CALLS AND FILES

WebRTC is used for audio and video calls: the media stream is established between the devices of the interlocutors, and the server is used for signaling and assisting with the connection.

Files, photos and voice messages are sent directly in the chat and displayed in a convenient conversation interface. Push notifications are only needed for timely notification of an event; the content of private correspondence is not converted into plain text in the messenger database.

MSG.WE.UA is a messenger for those who value speed, accessibility, respect for private data and calls without unnecessary applications.

What’s new

Месенджер для спілкування, роботи та бізнесу.
Захищені E2EE повідомлення.
Аудіо та відеодзвінки.
Бізнес-чати для спілкування від імені свого бізнесу.
Миттєві Push-сповіщення про нові повідомлення та виклики.
Файли файли та медіа без збереження на сервері.
Зберігайте в нотатках файли та медіа, синхронізуючи їх між своїми пристроями.
Контакти, профілі та швидке створення чату.
Світла і темна тема.
Картки-візитки з короткими посиланнями для звʼязку з Вами, чи Вашим бізнес-каналом.