🤖 Where we're taking keymail next, and how far along each piece is. Milestones is the story of what's already shipped; this is the honest plan for the road to V1 — the release where secure email feels like email, not like a science project. Updated as the tracks move, in plain language: what you'll feel, not how the boxes are run.
Toward the V1 release · reviewed 24 July 2026
V1 isn't a feature list — it's a bar. Five things have to be true before we'd call it finished.
The work that gets us over the bar, grouped by what it's for.
The core promise, working today.
End-to-end encrypted mail — subject, body, and attachments sealed in your browser before they leave it. First contact is gated by proof of work, so spamming a stranger costs the sender real compute. Rich text, drafts, undo send, trash, contacts, mobile — the everyday things are in.
Passkeys and an encrypted key vault instead of passwords.
Sign in with a passkey; your sealed key vault follows you to a new browser without your keys ever touching a server in the clear. The V1 work is breadth — more authenticator types handled gracefully — and making recovery foolproof.
The bridge that lets the rest of the world knock.
Ordinary email can't be end-to-end secure, so we don't pretend: a sender from the old world gets a doorbell — prove you're a real correspondent and your mail is sealed at the door instead of bounced. The machinery is built and dark; turning it on (and cutting over the MX) is the current work.
From "I've heard of this" to "I have an address" in minutes.
Self-serve signup exists; V1 makes the first five minutes the product — claiming an address, meeting the inbox, and inviting the people who aren't here yet, with no dead ends and no jargon.
The promises kept in the open — this site is part of it.
The carbon tally, the contributor index and the prompt ledger publish what most products hide, including how the AI that writes this app is used. That stays a principle, not a phase.
Real plans, deliberately held until the core is finished — named here because we'd rather be honest about the direction than quiet.
Real native apps — no webviews — with the same passkey-only, keys-in-your-hands model as the web. The groundwork (shared passkeys, universal links) is already wired into the domain.
keymail is one static binary with no dependencies by design; the after-V1 work is the honest guide and polish that make self-hosting a first-class, documented path rather than a trick for the brave.
Two keymail servers already speak to each other over a public, documented protocol. The next step is other people's servers — many small instances, no single operator anyone has to trust.