Hermes

Hermes live · desktop & web

End-to-end encrypted DMs over Nostr, addressed by your on-chain registered name instead of a public-key string. Same wallet is your identity — no email, no phone number, no company, no server that can delete your account.

Lives inside Theseus (Hermes icon in the left sidebar, or Ctrl+Shift+E E as in Ermis) and in any browser at hermes.x/messenger. Brand kit at /hermes/branding.

Hermes.X is the messenger's sovereign site, served from its own on-chain name. Mirror: silentmode.st/hermes-x/ · gateway: navigate.st/bns/hermes.x/ · native with a resolver: https://hermes.x/

What ships today

Hermes is live inside the Theseus desktop browser and as a web messenger at hermes.x/messenger. Core messaging, sign-in, profiles and the address book work end to end. Mobile and Tor transport follow.

live

Threaded chat

Contact list on the left with search and unread badges, the selected conversation on the right with bubbles and inline reply. Enter to send, Shift-Enter for a new line.

live

Send and receive by name

Type alice.x. The client resolves the name on-chain, wraps the message NIP-17 to the recipient's Nostr key and publishes to their declared relays. Sealed-sender: the relay never sees who sent what to whom.

live

Three ways to sign in

Open with Theseus ID (the browser's own identity), a name and password, or a seed phrase (12 or 24 words, or an nsec). You stay signed in on the device; a new device needs the seed phrase.

live

Handles the way you like them

One identity, three spellings: hermes:alice, alice.x, or the email form. Paste any of them; pick which one the client shows in Settings.

live

Profiles

Display name, picture and a short bio as a standard Nostr profile, so other clients see them too. Non-unique and display-only; the name is the identity.

live

Address book and vCard import

Named contacts stored locally, with optional vCard import from an existing address book. You preview who gets added; nothing is uploaded.

live · opt-in

Phone discovery

Link a phone number and let contacts who know it find you. Off unless you turn it on; lookups work the other way too, by number.

live

History on your device

Messages persist to disk per identity. Close and reopen the panel and your threads are still there, unread marks included. Seed backup lives behind your password.

preview

Web messenger

The same panel wrapped as a stand-alone web app at hermes.x/messenger, for anyone without the desktop browser. Same crypto, same identity, signs in with an nsec or a mnemonic.

next

Mobile

Ariadne for Android already opens hermes.x from its menu. A native Messages tab is a multi-release port of its own (Schnorr signatures, NIP-44 and a WebSocket client inside the JDK-8 build); it ships in slices.

planned

Tor transport

Relay traffic over the Tor client Theseus already runs, so even your connection IP leaves the relay. The UI will say when it is on.

The one idea that makes this different

Every existing Nostr client has the same wart: identity is npub1q8s7f3k… gibberish. The human-name fix, NIP-05, resolves alice@example.com through a DNS domain and a web server. That is exactly the ICANN-plus-server chain Silent Mode exists to escape: decentralized messaging bolted onto centralized identity.

The Hermes pitch.
alice.x publishes her Nostr pubkey as an on-chain record. Her name certificate is her verified, seizure-resistant identity. Message anyone by their on-chain registered name, with no phone number, no email, no ICANN, no company, and no server that can delete your account.

How it works

  1. Your name owns your key. Register any name on the chain, or reuse one you already own, and publish your Nostr pubkey to it as an np record. The key is derived from the same wallet seed as the name, so one seed backs both.
  2. Find people by name. Type bob.x. The client resolves it against the chain, pulls np (Nostr pubkey) and nr (preferred relays). No directory server involved.
  3. Send the message sealed. NIP-17 gift-wrapped DMs: the relay sees neither sender nor content, only that a wrap addressed to some pubkey exists. Route over Tor to also hide your IP.
  4. The name shows, not the pubkey. Incoming messages reverse-resolve pubkey to name where possible, so your chat list looks like a normal chat list rather than a wall of hex.

Getting a name

Today a Hermes identity is any on-chain registered name, such as one under .x from Sirius. Two more paths are designed and wait for the mainnet launch, when the Hermes top-level domains get minted.

today

Your own on-chain name

Register alice.x at Sirius, publish the Nostr pubkey to it, sign in to Hermes with the same seed. One transaction, yours for good.

designed

Free sub-identity

A name under the Hermes parent, issued through its signed-records manifest on Sia with no chain fee, for people who have no Bitcoin Cash on hand. Promote it to a sovereign name later from Settings in one transaction; the chain wins once both exist.

designed

Hermes TLDs

A short Hermes TLD for the dotted form and a second one for the email form, both minted on mainnet rather than the test network. The client already parses all three spellings, so the switch is a configuration change.

Where it lives

live

In Theseus desktop

A Messages panel in the left sidebar of the browser you already have. Reuses the built-in wallet's seed as the messaging identity.

preview

In any browser

hermes.x/messenger, served from the name itself over Sia. Sign in with a seed phrase; history stays in that browser's storage.

next

In Ariadne mobile

Opens hermes.x from the menu today. The native Messages screen, with the same seed and the same identity so you can message from either device, arrives in later releases.

Where your history lives

Three modes, one toggle. The default assumes no cloud at all; every later option is opt-in, and none of them let anyone but you read your messages.

default

Local only

The client keeps your message history on the device. Nothing else knows it exists. The same seed on two devices gives two-device redundancy; lose both and history is gone. Signal's model, on purpose.

designed

Silent Mode cloud backup

Toggle on and the client encrypts your history with a key derived from your wallet seed, then backs it up to the Sia network. Only you can read it. Text only, no media.

designed

Your own Sia account

Prefer to own the storage? Hermes sets up your own Sia account and routes backups there instead. Same encryption, and media backup becomes possible.

Honest boundaries

Messaging, not email

No Gmail interop, by design. A separate anonymous-mailbox product covers signing up on services without leaking a real address.

Metadata resistance is good, not perfect

NIP-17 hides sender and content from relays. Relays still see the recipient pubkey, timing, and your connection IP until Tor transport lands.

Relays are Nostr's soft spot

A message lives only while some relay keeps it. Silent Mode runs one relay and writes to a few public relays for reach and redundancy.

Design documents. The protocol design is in Hermes/DESIGN-hermes.md, the Android plan in DESIGN-mobile-hermes.md, and the free sub-identity scheme in DESIGN-sub-identity-manifest.md, all in the same folder. The desktop client ships as a bundled Theseus add-on and updates on its own channel, independent of browser releases.