Security
Your keys are made on your device. They never leave it.
No password database
You sign in with three secrets. Your browser turns them into the key that unlocks your account. The server never learns them.
Post-quantum, paired with proven crypto
Every message and file is encrypted with a new post-quantum algorithm and a classical one together.
ML-KEM-1024 + X25519 · ML-DSA-87 + Ed25519
uID security keys
Sign in with a hardware key or a passkey on your phone. Organizations can require one for every member.
Recovery you control
We can't reset your account. Instead, your secrets are split into recovery shares, for example 5 pieces of which any 3 restore them.
Keys you can check
Every account key goes into a public, append-only log. Your app checks that the people you write to have the keys the log proves.
Signed releases
Each version of the app is signed. Anyone can verify that the code served at uos.sh is the code we published.
What the server does see: who is a member of which space, when something is sent, and how large it is. It needs that to deliver. The whitepaper lists every detail.
Post-quantum
Post-quantum protection in every app.
Encrypted by you, on your device, not by us.
What stays readable so the service can work: calendar times, task due dates and priorities, public boards, and what you send to an AI provider. How it works
FAQ
Frequently asked questions
What is post-quantum encryption?
Post-quantum encryption uses algorithms standardised by NIST (ML-KEM, ML-DSA) that are designed to resist quantum computers. uOS pairs them with proven classical algorithms, so an attacker would have to break both.
Is uOS really end-to-end encrypted?
Yes. Your keys are made on your device and never leave it. Messages, mail, files, documents and notes are sealed before they are sent; our servers only relay unreadable data.
What can the server still see?
Metadata needed to deliver: who is a member of which space, when something is sent and how large it is. Not who wrote to whom inside a chat, and not the content. The whitepaper lists every detail.
What happens if I forget my secrets?
Nobody, including us, can reset them — there is no password database. Instead, your secrets are split into recovery shares (for example 5 pieces of which any 3 restore access), which you set up and keep.