AurionMail: E2EE suite (CryptPad/Stalwart) with single-password UX

The AurionMail Suite is simply a free and open-source end-to-end encrypted productivity suite.

TL;DR: AurionMail Suite delivers a Proton-like personification acquisition by combining proven technologies specified arsenic CryptPad, Bulwark Webmail, Stalwart Mail Server, Ory Hydra, and OpenPGP.

CryptPad is simply a powerful collaborative suite, but email falls extracurricular its halfway scope. Consequently, utilizing encrypted documents alongside encrypted emails traditionally requires managing 2 abstracted accounts and passwords.

AurionMail acts arsenic the orchestrator linking CryptPad and a JMAP-based email work into a single, unified workflow.

Users only request to retrieve one azygous password to encrypt and decrypt some their emails and CryptPad documents. You participate it erstwhile per convention to entree CryptPad, the webmail, aliases both.

Additionally, we refreshed CryptPad's UI to supply a modern, cohesive look and consciousness crossed the suite.

Demonstrate the Single login to entree Mail encryption and Cryptpad documents + the caller Cryptpad UI

Existing privateness solutions usually unit a discuss betwixt user experience, self-hosting control, and open standards.

Commercial suites connection a seamless single-password workflow, but their backends stay closed-source. On the different hand, self-hosted alternatives often part the personification experience, requiring users to negociate abstracted accounts and passwords for email and archive collaboration.

AurionMail Suite bridges this spread by delivering the soft Zero-Knowledge acquisition of commercialized platforms connected apical of a 100% open-source, standards-compliant, self-hosted stack.

Feature Proton Suite Nextcloud + Mail Standard CryptPad AurionMail Suite

100% Open Source & Self-Hosted	❌ (Proprietary backend)	🟢 Yes	🟢 Yes	🟢 Yes
E2EE Email & Documents	🟢 Yes	🟡 (Complex / Plugin-based)	❌ (No built-in email)	🟢 Yes
Unified Identity & Encryption (1 Password)	🟢 Yes	❌ (Fragmented SSO / Manual PGP)	❌ (Docs-only relationship scope)	🟢 Yes
Open Standards (OpenPGP, JMAP)	🟡 (OpenPGP supported, constricted cardinal discovery)	🟢 Yes	❌ (N/A for email)	🟢 Yes

CryptPad excels astatine unafraid archive collaboration but lacks email. AurionMail extends CryptPad pinch a afloat integrated, E2EE JMAP email client—sharing the aforesaid azygous Zero-Knowledge password truthful users don't person to negociate 2 isolated systems.

Nextcloud Mail is simply a modular IMAP customer that relies connected browser extensions (like Mailvelope) and manual PGP cardinal guidance for end-to-end encryption. AurionMail delivers seamless, out-of-the-box Zero-Knowledge encryption without analyzable personification workflows.

Proton offers a soft single-password experience, but its backend is closed-source and locks you into their cloud. AurionMail gives you that nonstop aforesaid seamless personification acquisition connected a 100% open-source, self-hosted stack built connected unfastened standards.

• Single Password Encryption: Authenticate and encrypt each personification information pinch 1 maestro password.
• Single Logout: Logging retired from either Webmail aliases CryptPad automatically logs you retired crossed the full session/device.
• Global Logout ("Logout from each devices").
• Password change Change your maestro password without loosing your data.
• Key Synchronization: Seamless cardinal syncing crossed authorized personification devices.
• Core Integrations: Full characteristic sets inherited from underlying services (CryptPad, Bulwark Webmail and the PGP E2E Plugin for Bulwark).
• Account install : You tin create users successful LDAP pinch your workflow and springiness them a impermanent password. Users past sojourn sso.domain/init to create their maestro password and activate their account.
• Web Key Server : Imported/Generated cardinal successful the PGP Plugin are automatically discoverable pinch Web Key Directory.

• Emergency Account Hold: A unafraid URL generated astatine relationship creation that disables the relationship if accessed (protecting information if a maestro password is compromised).
• Emergency Account Destruction: A unafraid URL that permanently destroys the relationship and its associated keys if visited.

Here is really the components fresh together. Items highlighted successful bold are built by the Aurion team:

• LDAP: User guidance (Identity Source of Truth).
• Ory Hydra: SSO OAuth2/OIDC backend handling authorization flows.
• SSO Web App: Frontend for authentication and Zero-Knowledge cardinal derivation.
• Stalwart Server: High-performance JMAP message server backend.
• Bulwark Webmail: Webmail frontend interface.
• Bulwark PGP Plugin: Extension enabling end-to-end OpenPGP message encryption.
• Core-API: Central server managing cardinal sync, convention state, and inter-app communication.
• Bridges: Lightweight span scripts handling unafraid concealed sharing during login/logout routines.
• CryptPad (Customized): Integrated pinch the SSO plugin and civilization styling for a unified UI.

AurionMail is simply a distributed suite. However, you tin usage Orchestra to get a azygous binary covering

• Hydra
• SSO
• Bulwark
• Core API
• Bridges
• Cryptpad Customized

See Installation Guide for much details.

Explore the individual sub-modules of the project:

• SSO App
• Bridges
• PGP Plugin
• Core API
• CryptPad Customized
• Orchestra

Are you a strategy administrator looking to trial AurionMail? Check retired the Installation Guide.