[opensourcedex]

Quiet is a free, open source data security & privacy project written in C and released under GPL-3.0. It has 2,648 GitHub stars, 145 forks and 773 open issues, and was last pushed 5 hours ago. On this registry it ranks #11 of 14 tracked projects in Data Security & Privacy, with 5 head-to-head comparisons available. It gained 1 stars over the last 6 tracked days.

What is Quiet?

What it is

Quiet is an open-source team chat application that aims to provide a private, peer-to-peer alternative to Slack, Discord, and Element. It is built around Tor and IPFS, and it is designed so that a team can communicate without trusting a central service or operating its own server. The project lives in the privacy and decentralized software ecosystem.

The concrete problem it addresses is the dependence of mainstream team chat on servers, accounts, and identifiers such as email addresses or phone numbers. Quiet instead syncs messages directly between a team's devices over Tor, so a community's data does not pass through a central provider. It also separates communities into insular networks, so data from one community does not reach devices in another community.

Key capabilities

  • Quiet uses Tor to synchronize messages directly between devices, without requiring a central chat server.
  • Each community has its own network, and data from one community never touches devices in other communities.
  • OrbitDB broadcasts new messages, syncs recent messages, and fetches files.
  • A community owner creates the community and hands out invitation codes, which invitees use to connect to the owner's device, register a username, and receive a cryptographic certificate.
  • The application supports Slack-like channels, end-to-end encryption, image sending, large file sharing, desktop notifications, and keyboard navigation, and it does not require an email address or phone number.
  • It provides desktop apps for macOS, Windows, and Linux, a peer-to-peer Android app with notifications, and a peer-to-peer iOS TestFlight app without notifications.

Who uses it and how

  • Teams that want a serverless Slack or Discord replacement can install the desktop app, create a community, and invite members through the community settings.
  • Community owners act as the initial access point for new members, because invitees connect to the owner's device to register a username and obtain a certificate.
  • Members use the app for day-to-day collaboration, including channel conversations, image sharing, file transfer, and desktop notifications.
  • Mobile users can join with Android or iOS clients, although the iOS client currently lacks notifications.

Getting started

Users download the latest release for their platform, such as a macOS .dmg or Windows .exe file, install it normally, create a community, and open the community settings to invite members.

When to use it — and when not to

Quiet is suitable for privacy-minded teams that want to experiment with serverless, peer-to-peer chat and can accept missing features. It is not suitable when privacy and security are critical, because the project states that it is not audited, lacks basic features, and probably will not replace Slack or Discord yet. Compared with those products, it removes the central server but requires community owners to manage invites and certificates, while direct messages, mentions, user removal, profiles, and message deletion remain missing.

project readme (upstream, from github) — read inline

Logo

Quiet

Encrypted p2p team chat with no servers, just Tor.

Downloads | How it Works |
Features | Threat Model | Mission | FAQ | Developer setup

Quiet is an alternative to team chat apps like Slack, Discord, and Element that does not require trusting a central server or running one's own. In Quiet, all data syncs directly between a team's devices over Tor with no server required.

NOTE: Quiet is not audited and should not be used when privacy and security are critical. It lacks basic features and probably won't replace your Slack or Discord yet. That said, it works surprisingly well and we use it daily as a Slack replacement.

Quiet is for fans of software freedom, decentralization and privacy tech, and for anyone craving a future where humanity can collaborate effectively online without trusting our communities, networks, and data to giant corporations.

Quiet is written (mostly) in TypeScript, with Electron and React Native frontends, and welcomes outside contributions! See: Contributing to Quiet

Screenshot

How it works

While apps like Slack, Discord, and Signal use central servers, Quiet syncs messages directly between a team's devices, over Tor, with no server required.

Each group of people (Quiet calls them "communities") gets their own insular network, so that data from one community never touches the devices of Quiet users in other communities. Not even in encrypted form!

Message syncing is taken care of by a project called OrbitDB, which works like a mashup of Git, a gossip protocol, and BitTorrent; it broadcasts new messages, syncs the latest messages, and fetches files. Syncing means that users typically receive all messages sent while they were offline.

Invites, access, and usernames are granted by a community owner, i.e. whoever creates the community. The owner hands out an "invitation code" which invitees use to connect to the owner's device, register a username, and get a standard cryptographic certificate so they can prove to other peers they're part of the community.

See our FAQ for answers to common questions and a comparison of Quiet with similar apps.

Getting started

To try Quiet, download the latest release for your platform (.dmg for macOS, .exe for Windows, etc.) and install it in the normal way. Then create a community and open the community's settings to invite members.

If you'd like to help develop Quiet, see Contributing to Quiet.

Features

  • Team Chat - Create a "community" for your team or organization and invite members.
  • End-to-end Encryption - All data is encrypted end-to-end between member devices.
  • Channels - Organize chats in Slack-like channels.
  • Images - Send and receive images, with copy/paste, drag & drop, and image previews.
  • Files - Send and receive giant files without arbitrary limits.
  • Notifications - Get desktop notifications for new messages, with optional sounds.
  • Invite links - Share invite links, just like in WhatsApp, Signal, or Discord.
  • Keyboard Controls - Navigate channels without using the mouse.
  • Desktop Apps - Desktop apps for Mac, Windows, and Linux.
  • Android App - A fully peer-to-peer Android app with working notifications.
  • iOS App - A fully peer-to-peer iOS app (TestFlight) without notifications.
  • No email or phone number required - Unlike Slack, Discord, WhatsApp, Telegram, and Signal, no email or phone number is required to create or join a community.

Planned (but still-missing) features

  • iOS Notifications - Receive notifications on iOS, with help from a service Apple requires to be centralized.
  • Direct Messages - Send and receive direct messages that are encrypted to the recipient and unreadable by other community members.
  • Mentions - Send @ mentions that notify other users.
  • Removal - Remove users from your community.
  • User Profiles - Add an avatar or bio.
  • Message Deletion - Delete individual messages and set timed deletion rules ("disappearing messages") for the community.
  • Status - See your own connection status and the online status of other users.
  • Reactions - React with emojis.
  • Multiple Communities - Join multiple communities, as you would in Slack or Discord.
  • Account Recovery - Recover owner accounts from a backup phrase.
  • Private channels - Create private channels with multiple members that are unreadable to the community at large.

Post-1.0 Features

  • Large Communities - Create a community with 1000 members or more (right now ~30-100 members is the limit.)
  • Moderation - Appoint moderators who can hide messages and silence or remove users.
  • Spam and Denial-of-Service Protection - Settings to automatically remove users who send disruptive messages.
  • Search - Robust message search.
  • Threads - Reply to messages in threads.
  • Tor Bridges - Connect via public or private bridges to avoid Internet censorship.
  • Tor Browser Support - Join communities as a full member with Tor Browser, without downloading an app.
  • Browser Support - Join communities with any modern browser via Arti-in-WASM.
  • Publishing - Share files (or entire websites) from your community to the web, via Tor, OnionBalance, and Tor2web + IPFS.

Technical overview

This is a concise technical summary of the main points.

  1. Granting access: community owners use standard PKI (PKI.js) to grant access, with each community owner serving as the community's certificate authority; this is handled by Quiet and transparent to users.
  2. Authentication: a valid signed certificate from the community owner is required to connect to peers, receive connections from peers, and for messages to be visible to other peers.
  3. Networking: peers connect via Tor onion services, exclusively with their fellow community members.
  4. Privacy: Tor encrypts all data in transit, and a Quiet user's device connects only to the devices of their fellow community members, so all messages are encrypted to recipients.
  5. Syncing: IPFS and OrbitDB, an IPFS-based CRDT, ensure that all data (messages, user data, etc) syncs between peers with eventual consistency.
  6. Asynchronous messaging: because messages sync to all members, members can communicate without being contemporaneously online, provided that there is "continuous liveness", a continuous chain of online peers who each sync the latest updates, between the sender and the recipient.
  7. Identity: a valid certificate from the community owner on account creation establishes a username, which the owner attests is unique; in future versions, Quiet will warn all members if community owners are caught issuing non-unique usernames, to protect against impersonation by malicious or compromised owners. (See: #119)
  8. Invitation: to invite new members, community owners provide (via some other secure channel) an onion address that points to a registration API which accepts a certificate signing request, responds with a signed certificate, and provides sufficient peer information to connect to other peers; in future versions this onion address will expire. (See: [#536](https://github.com/TryQuie

readme truncated — read the full docs on github

Frequently asked questions

Is Quiet free to use?

Quiet is open source under the GPL-3.0 licence. There is no licence fee and no seat count — you can self-host it or, where the project offers one, pay a vendor for a managed version instead.

What does Quiet do?

Serverless team chat over Tor, no phone number needed

What is Quiet written in?

Quiet is primarily written in C. Its source is publicly available at https://github.com/tryquiet/quiet, and it has 2,648 GitHub stars.