Email’s had its day: Take back control of your privacy with PeerBox
We’d really had it with email. It leaks like a sieve and the spam is pure misery. So after months of intense development, we’re proud to introduce PeerBox: The first 100% working P2P messaging system! It’s not a concept. It’s not a prototype. It’s software you can run on your machine right now.
The idea is radical: Your messages travel straight from your computer to your contact’s through the Tor network. No central server. No middleman. No company. No foundation. Just you and the person you’re writing to. SSH handles the transport, the most battle-tested protocol on the internet, and Tor keeps you anonymous. Your data sits in an AES-256 encrypted vault on your own machine. If someone breaks in, everything gets destroyed for good. PeerBox also makes spam structurally impossible, because only the contacts you’ve explicitly accepted can write to you.
Nobody can read your messages. Nobody can intercept them. And above all: Nobody can be forced to hand them over, because there’s nobody to force.
PeerBox is free software, 100% open source on Github under the AGPL. It installs itself automatically on every Debian-like system: Ubuntu, Mint, Pop!_OS, MX, Zorin… On other distributions you’ll have to install the dependencies by hand. It also works from any Android or iOS phone thanks to the PeerBox Server plugin. You just install it and use it. No technical skills needed. And if you’re not on Linux yet, here’s a great excuse to make the jump 🙂
Forget emails… Now we send peermails!
Rebuilding messaging from scratch, pure P2P and making it usable by anyone, that was a seriously ambitious bet. Plenty of people told us it couldn’t be done. We did it anyway 🙂 And today we’re thrilled to put the result in your hands.
How did an article for NovaBlog end up as a messaging app that respects your privacy?
It started with an article. I was writing a post for NovaBlog’s Open Source section about something that had been nagging at me for a while: how fragile email is. The case was open and shut. SMTP, the protocol that carries our messages, dates back to 1982. It’s a system more than 40 years old that was never built for security, that’s drowning in spam and that keeps piling up holes as the digital world gets more complicated. But we keep stubbornly slapping patches on something that should have been rethought a long time ago.
So while I was writing it, I started picturing what a real alternative to regular email would look like. Something solid. Modern. Locked down tight. No central server. No middleman. I laid the whole idea out, and the conclusion ended on a call to developers to go build it.
Then, rereading the piece, something clicked. “Wait a second… I can actually build this!” So I talked it over with friends. Everybody said the same thing: The project was technically doable! The catch was that claiming to reinvent email would mostly make me look like a crackpot. And a project like that never gets off the ground.
So instead of publishing a theory piece nobody would take seriously, I started coding to prove the concept could really work. In a month I had a working Python prototype. Command line only, zero frills. But it worked.
Then I called in my colleague Debugman. We moved the prototype over to Textual for a better terminal interface. Something more presentable, anyway. The plan at that point was to ship it as is and hope a few developers would want to join in. Except we got completely hooked…
Our heads were full of ideas and we wanted to build all of them. So we told ourselves: All in! We built a full graphical interface. We even hired a professional designer for the logo, because we wanted something credible that didn’t look cobbled together. And one thing led to another, every idea bringing the next one. The plugin system. The encrypted local vault. The secure invitation system. Mobile access. Multilingual translations. We just couldn’t stop.
So the NovaBlog article went in the trash 😀 But something way better took its place: Real software, ready to use.
Why do you absolutely need P2P email to protect your privacy?
Security rule number 1: Never trust a middleman! Before we walk you through how PeerBox works in detail, we need to talk about everything that’s wrong with today’s messaging services. And the list is long!
Regular email is an open-air ruin
SMTP, the protocol that carries your email, dates back to 1982. It was never built for security. Back then the internet was a trust network between universities. Nobody pictured billions of people using it one day to trade sensitive information.
The result is that when you send an email through Gmail, Outlook or Yahoo… your messages travel in the clear across their servers. These companies scan them, analyze them and cash in on them. It’s spelled out in black and white in their terms of service, but nobody reads them. And any authority can get the contents of your mailbox with a simple court order. Sometimes without one…
ProtonMail: We like them, but…
Proton is probably the best consumer email service out there for privacy. We’re happy to say so. End-to-end encryption between Proton users, servers in Switzerland, open source code. On paper it holds up.
But Proton is still a centralized middleman. That’s where it falls apart. In 2021, Proton handed a French activist’s IP address to the authorities after a legal request. They followed the law. They didn’t really have a choice. But it proves that when there’s an entity in the middle, that entity can be forced to give up your information. Today it’s an IP address, or your messages outright. Tomorrow, if the law shifts or the pressure gets heavy enough, it could be something else. So yes, Proton beats Gmail hands down. But it’s not the endgame as long as there’s a trusted third party in the equation.
Telegram is a total black box
Telegram isn’t end-to-end encrypted by default. You have to turn on “secret chats” by hand to get E2E encryption. How many users do that? A tiny minority.
Behind Telegram there’s Pavel Durov. A libertarian oligarch whose real motives stay murky. He’s not exactly Putin’s friend, not exactly his enemy either. There’s no way to know who he opens the door for, or on what terms. The server-side code is closed. Nobody can check what happens to your data once it lands at Telegram. If you think trusting a billionaire who answers to no one counts as secure. Suit yourself…
Signal is security’s false friend
Signal is the most interesting case. Everybody recommends it to you as the most secure messenger on the planet. And technically, Signal’s encryption protocol really is excellent. But that’s not the question. The real question is: Who’s behind Signal, and with whose money?
Signal was built by Open Whisper Systems with at least $3 million from the Open Technology Fund. The OTF is a program set up in 2012 inside Radio Free Asia. And Radio Free Asia is an American propaganda outfit created by the CIA in 1951 to run anti-communist operations across Asia. The OTF’s own website said Signal had been, and I quote, “originally developed with OTF funding.” That’s not a conspiracy theory. It’s written in black and white by the people who funded the project.
And it doesn’t stop there. Katherine Maher, chair of the Signal Foundation board, came out of the National Democratic Institute, where she worked on “Color Revolutions” operations in the Middle East and North Africa during the Arab Spring. Meredith Whittaker, the Signal Foundation’s president, gives interviews to Lawfare, a think tank tightly wired into the American national security establishment.
And in March 2025, Signal Gate confirmed what plenty of people already suspected: The director of the CIA himself revealed to the US Senate that Signal is installed on the agency’s computers and used for official communications. Senior American officials even discussed plans for military strikes in Yemen on a Signal group chat. The “most secure messenger in the world” is the CIA’s daily comms tool. And that doesn’t raise any questions?
Here’s a historical precedent. For decades, a Swiss company called Crypto AG sold “secure” encryption systems to more than 120 governments around the world. Much later we found out that Crypto AG was secretly controlled by the CIA and German intelligence. One giant honeypot. Can we say Signal is the Crypto AG of the 21st century? No… But the documented links between Signal and the American security apparatus are troubling enough that the question deserves to be asked.
And either way, Signal’s servers are in the United States. Subject to FISA. To the Patriot Act. To National Security Letters, which let the government demand data without the user ever finding out.
Android and iOS are an all-you-can-eat buffet of your data
And if you think you’re covered running an encrypted messenger on your Android or iOS phone, we need to have an honest talk. Your operating system is built by Google or Apple. Two American companies under the same laws and the same pressure. Even with the best encryption on earth, if the system underneath is compromised, it’s game over! A secure app on an insecure OS is worth nothing.
The core centralization problem in computer security
The core of it is simple. If a company, a foundation or any centralized entity offers you a “100% secure” messaging system, an intelligence agency only has to lean on that entity to get your data. Blackmail. Court order. Infiltration. National security letter. The method doesn’t matter. A middleman is always a point of failure, because it’s the obvious target for anyone who wants your data.
With PeerBox there’s nobody in the middle. Zero centralization. Zero middleman. The code is open source, checkable by anyone on Github. No company to lean on. No server to seize. No foundation to infiltrate. No link between PeerBox and any third-party service, not even for updates. Just you, your contact and an encrypted tunnel between your two machines. It’s the only architecture that makes surveillance structurally impossible instead of merely difficult.
Here’s the spec sheet we built PeerBox from
Let’s be very clear on one point: PeerBox isn’t a tool reserved for computer security experts. That was our obsession from day one. We wanted a system that someone who’s never touched Linux in their life could install and use with no outside help. Mission accomplished!
The install walks you through it step by step. The installer handles everything: Tor, SSH, the encryption keys, the network setup… You answer a few simple questions and PeerBox does the rest. All of it happens graphically, in a modern web interface. No terminal to open. No commands to type. No config files to edit by hand.
The interface ships with five languages at launch: English, French, German, Spanish and Russian. And if yours isn’t there yet, adding a translation means editing one JSON file. Anyone can do it, and even send it our way.
To add a contact, PeerBox uses an encrypted invitation system. You create an invitation as a ZIP file locked with three words you pick yourself. You send the file however you like. Then you pass the three words along on a different channel: A text, a call, in person… Your contact imports the file, types in the three words and that’s it. Even if somebody intercepts the invitation file, it’s useless to them without those three words.
And since only the contacts you’ve accepted can write to you, spam simply doesn’t exist in PeerBox. It’s not a spam filter. It’s not a detection algorithm. The architecture itself makes spam impossible.
How does it work technically?
We won’t drown you in jargon. PeerBox fits in one sentence: Your computer or phone sends an encrypted message straight to your contact’s computer or phone through the Tor network. There’s nothing in between. No relay server. No intermediate mailbox. Nothing at all. Now, for those of you who want to see under the hood, here are the pieces PeerBox is built on:
SSH carries the messages. It’s the protocol millions of sysadmins have used every day since 1995 to connect to remote servers securely. When a bank manages its servers remotely, it uses SSH. PeerBox does the same for your messages.
Tor handles the anonymity. Every PeerBox install creates a Tor hidden service, a kind of invisible address you can only reach through the Tor network. Nobody can tell where your machine physically sits. Nobody can trace their way back to your IP address.
GPG encrypts the content of your messages at military-grade security. Journalists, whistleblowers and organizations all over the world have used this standard since 1999 to protect their communications.
gocryptfs protects all your data locally. Everything PeerBox holds (messages, contacts, settings) is locked inside an AES-256 encrypted vault on your machine. When PeerBox is closed, the vault is locked. If your computer gets stolen, your data is unreadable. And after five failed password attempts, everything is destroyed for good.
None of these technologies is new. SSH has been around since 1995. Tor since 2002. GPG since 1999. They’re proven pieces, hammered on for decades. We’re not claiming we invented anything. We found the right way to bolt them together and build something that didn’t exist before: Messaging that’s really private, really decentralized and really usable.
Plugins open a whole field of possibilities to go much further
The PeerBox core does one thing and does it well: Send and receive messages securely. Everything else goes through plugins.
Plugins are extensions that add features without touching the heart of the system. Two of them ship at launch. Snowflake lets you give back to the Tor network by turning your machine into an entry point for users under censorship in other countries. PeerBox Server makes your PeerBox reachable from any phone through a web browser over a secure Tor connection. More plugins are in the works. And any developer can write one, using the developer guide in the PeerBox documentation.
Use PeerBox, because privacy isn’t optional
You hear the same line all the time: “I’ve got nothing to hide, so I don’t care.” If that’s what you think, it’s just because the problem hasn’t gotten real for you yet. So let’s do a quick exercise. You’re at home, talking with a close friend. You get into personal stuff. Your health. Your money. Your politics. Your doubts. Your plans. Your sex life… Now picture yourself turning around and seeing Google leaning against the wall, taking notes. The NSA sitting in the armchair, recording. A data broker at the window, reselling every sentence you say to the highest bidder.
You’d be furious. Anyone would be furious. And yet that’s exactly what happens every time you send an email. You don’t see them, but the traitors are all there.
Your privacy and the confidentiality of what you say aren’t a luxury. They’re a fundamental right, written into Article 12 of the Universal Declaration of Human Rights. It’s not negotiable, and it shouldn’t hang on the goodwill of some Silicon Valley company.
Every day, companies, government agencies and private citizens get hacked because email is structurally weak. Medical records leaking. Confidential documents out in the wild. Stolen identities. All because we keep trusting a system that was never built to protect anything.
“But anonymity helps criminals!”
We know the argument. We saw it coming. And here’s our answer! Last we checked, police work happens in the field. With human intelligence. With actual investigation. Not by vacuuming up metadata in bulk from behind a screen. Mass surveillance has never stopped a single terrorist attack. Only old-fashioned detective work does that.
So using that argument to justify surveilling everybody is like banning window curtains because a burglar might hide behind them. There’s an apocryphal line often pinned on Benjamin Franklin that sums the situation up perfectly: “A people willing to trade a little freedom for a little safety deserves neither, and ends up losing both.” He probably never said it, but it’s brutally accurate.
What’s really at stake with privacy
Breaking people’s trust in the tools they communicate with is far more serious than a personal data problem. It breaks their ability to talk freely. To test their ideas against each other. To build critical thinking by arguing without holding back.
It isolates people, leaving them convinced they’re the only ones who think what they actually think. That their doubts, their opinions and their convictions are fringe. Because when you know somebody’s listening, you censor yourself. You soften the edges. You steer clear of touchy subjects. That’s how a society loses its ability to think freely.
So free and private communication isn’t a gadget. It’s the foundation of any democracy that works. And PeerBox is a tool built to serve that principle.
Conclusion: Time to join the great PeerBox adventure
PeerBox is available right now. The source code is published on Github under the AGPL. You can read it, check it, modify it and redistribute it. Free software in the strictest sense of the term.
If you’re a developer
The code is clean. It’s been audited. The architecture is modular, and the plugin system lets you extend PeerBox in any direction without touching the core. There’s a full developer guide in the documentation.
What happens next is up to contributors, because PeerBox needs them to keep growing. The project needs coders, translators, help with the docs, ports to other distributions… Every contribution counts.
If you’re a user
Installing PeerBox means taking back control of your communications. Every person who adopts it makes the network stronger and proves an alternative to centralized systems is possible. You don’t need any special skills. You install it. You use it. And you get back what should have been the norm all along: Conversations that belong to nobody but you and the people you write to.
If you enjoyed this article,
support copyleft and open source
and help us bring our projects to life.
