80dark/troste-onion — explained in plain English
Analysis updated 2026-05-18
Send an end-to-end encrypted message directly to another person without a central server storing it.
Run your own local mailbox reachable only through the Tor network.
Learn how a double-encrypted peer to peer messaging protocol can be built with Tor onion services.
Share sensitive information privately between two computers you both control.
| 80dark/troste-onion | 00kaku/gallery-slider-block | 3rd-eden/ircb.io | |
|---|---|---|---|
| Stars | 0 | — | — |
| Language | JavaScript | JavaScript | JavaScript |
| Last pushed | — | 2021-05-19 | 2016-11-16 |
| Maintenance | — | Dormant | Dormant |
| Setup difficulty | hard | easy | easy |
| Complexity | 4/5 | 2/5 | 2/5 |
| Audience | developer | general | developer |
Figures from each repo's GitHub metadata at analysis time.
Requires Node.js 22 or newer plus installing the Tor Expert Bundle, and both sides must keep their daemon running.
Troste Onion is a tool for sending encrypted messages, called letters, directly between two people without relying on a central server or database. Instead, each user runs a local program on their own computer that publishes itself as a Tor onion service, a type of hidden address reachable only through the Tor anonymity network. Messages travel straight between these two local programs over Tor rather than passing through any shared cloud service. The README describes this as a working prototype that has not yet gone through an independent security review. When someone sends a letter, the message is encrypted twice on their own computer, once for the recipient's key and signed by the sender, and then wrapped in a second layer of encryption tied to a shared secret code. The local program stores only the encrypted package, a hash of the secret, and an expiration date, never the secret itself or the readable text. The sender shares a special code string with the recipient, which includes the sender's onion address, an identifier, and the secret needed to unlock the outer layer. Only the recipient's own private key can open the inner, readable message. Running it requires Node.js and an internet connection to install dependencies and the Tor software bundle. Once started, it opens a local web interface where you can see when Tor has finished setting up and publishing your mailbox. The three network ports it uses are meant to stay local to your own computer and should not be exposed to the wider internet. The README is honest about its limits: the sender's computer must stay running until the letter is picked up, losing your browser's private keys makes your letters unrecoverable, and Tor reduces exposure but does not make a compromised computer safe. It is currently a desktop only tool, and the author explicitly warns it should not be deployed on services like Vercel because it needs a persistent Tor process and local storage. The README does not clearly state a software license.
A local tool for sending end-to-end encrypted messages directly between two computers over the Tor network, no central server needed.
Mainly JavaScript. The stack also includes Node.js, Tor, AES-256-GCM.
The README does not clearly state a license, so check with the repository owner before reusing this work.
Setup difficulty is rated hard, with roughly 1h+ to a first successful run.
Mainly developer.
This repo across BitVibe Labs
double-check against the repo, no cap.