GM GenMail by GenesisFX

Email where the sender is provably who they say they are
— or the client tells you so.

Every GenMail address is bound to exactly one current public key in an append-only, publicly auditable transparency log. If a message's signature doesn't match what the log says right now, that's not a cosmetic warning — it's the system telling you someone is spoofing.

Key-transparency directory

A real Merkle-log key directory (Google Trillian) — not a keyserver anyone can upload to. Every client can independently verify an inclusion proof before trusting a key.

Sealed, signed

Messages are sealed with HPKE (RFC 9180) to the recipient's current key and signed with Ed25519 — decrypted and verified entirely on-device.

Onion relay

The relay only ever sees a delivery token and a padded blob — reached over a real Tor v3 hidden service, bundled directly into the desktop app.

Download the desktop app

A native client — not a browser tab — with Tor bundled in so it can reach the relay directly.

↓ Download for macOS (Apple Silicon)
WINDOWS / LINUX — COMING SOON
Signed with a real Apple Developer ID certificate and notarized — it just opens, no Gatekeeper warning, no workaround needed. Prefer the one-click version anyway (downloads the app, installs it to Applications, and launches it for you)? Use the installer script instead.