Skip to main content
Messaging Layer Security (MLS)

Security 
that Scales

Wire is the only collaboration platform completely secured by MLS, supporting scalable messaging, calling, and file sharing. With Wire, enterprises finally have a secure alternative to traditional tools like Microsoft Teams, Slack, and Zoom.

Book a demo
-mls-landing-page-1.2
waves landscape 01
Trusted by More Than 1,800 Happy Customers
  • Schwarz-Gruppe_Logo_einzeln_9.2019.svg
  • BMW_logo_(gray).svg
  • Bundesamt_für_Sicherheit_in_der_Informationstechnik_Logo.svg
  • BMI_Logo.svg
  • GMsB36AXIAArgZZ
  • US_Air_Force_Logo_Solid_Colour.svg
  • ExxonMobil_Logo
  • EY_logo_2019.svg
  • Logo_Wort-Bildmarke_RGB_0
  • Ärzte_ohne_Grenzen_Logo
  • Greenpeace_logo.svg
Global Leader in MLS innovation

Wire co-founded MLS, the first Internet standard for secure messaging. Wire is the first and only enterprise collaboration platform entirely secured by MLS.

 

MLS-protected across the board

Every Wire feature across both Cloud and On-Premises versions–from messaging and calling to emoji sharing–is protected by MLS security.

 

Proven and trusted solution Validated in large-scale deployments and enabled for millions of global users, Wire is the most proven MLS-based solution.
-mls-landing-page-2.2-1
MLS Technology

A Breakthrough in Key Exchange

  • Prior to MLS, end-to-end encryption (E2EE) of messaging and real-time communication was limited by the Double Ratchet algorithm’s “pairwise” key exchange.
  • This approach suffers from linear growth in computational as the number of participants grows, limiting groups and channels to around 256 devices.
  • That low ceiling prevented secure communications from being a viable alternative to traditional enterprise collaboration tools such as Teams, Slack, and Zoom.
  • MLS implements a novel Tree-based Key Exchange Management (TreeKEM) approach that supports massive group communications with logarithmic growth in computational load, making it able to support hundreds of thousands of participants in a communication session.
Cryptography

Post-Quantum Ready

  • The rise of quantum computing poses a significant threat to the cryptographic algorithms used to secure messaging and calling, potentially making current encryption methods vulnerable.
  • Post-quantum cryptography (PQC) refers to a new generation of cryptographic algorithms designed to withstand attacks by future quantum computers.
  • MLS is designed with cipher suite agility so customers can easily deploy updated PQC algorithms.
  • As the only fully MLS-enabled collaboration suite, Wire is the preferred choice for governments, enterprises, and intelligence agencies that are concerned with post-quantum protection.
-mls-landing-page-3.2
-mls-landing-page-4.2
Security through Scalability

Improved Post-Compromise Security for Group Communications

MLS makes forward secrecy and post-compromise security more effective for large group use cases by using its computational efficiency to more rapidly and efficiently rotate group keys using “epochs,” a data structure that represents the state of a group in which it uses a specific set and state of cryptographic keys. MLS epochs change when members are added or removed, when a member updates their key, or based on pre-defined timers.

Powered by MLS

Federations, ID Shield, and File Management

Wire’s highly scalable MLS support makes it possible to implement powerful capabilities that are unavailable in alternative solutions.

  • Wire federations offer granular controls over what users can see, search, and access across back-ends.
  • Wire supports post-login security with ID Shield, which automatically verifies user identities and devices in conjunction with your Identity Provider (IdP).
  • The integration of Pydio Cells with Wire leverages MLS to protect file management and sharing in the context of secure group collaboration.
federated environments
Transparency

Open and verifiable

Wire’s source code is fully transparent and 100% open source. It is available on GitHub for anyone to verify. All our development is open to the public  - collaborate with the team and follow our commits, pull requests, issues, and discussions on GitHub.

Stay in sync

Multi-device management

You can use your Wire account on up to 8 devices with your contacts and conversations always in sync. MLS treats each device as a separate entity in all group key exchange keys, enabling greater isolation and security from potential compromises.

Verify devices

Trusted conversations

Verify each conversation partner’s device fingerprints for maximum security. It helps to protect you from a man-in-the-middle attack by ensuring that the person you are communicating with is who they say they are. After verifying a conversation, you will be alerted if your contact starts using Wire on a new device.

Servers in the EU

European data sovereignty

Wire’s servers are in Germany and Ireland. The hosting provider’s server locations are secured following the highest standards and hold certifications such as ISO 27001, FedRAMP, FIPS 140-2, NIST 800-17. The hosting providers are fully compliant with all applicable European Data Protection laws.

End-to-end identity

ID-Shield Verification

Simplify your communications with ID Shield - a streamlined method to confirm, certify, and manage each contact’s device identity automatically. By replacing manual fingerprint comparisons with an efficient certificate-based process, ID Shield leverages MLS to ensure your interactions meet the highest security standards.

Get started

See Wire in action 

Discover how Wire enables secure, compliant, and seamless collaboration for your team - without compromising usability or control.

Book a demo