No packages are published yet. This page describes what is coming and how you will be able to check that what you install is what we published. Until a signing key is published here, nothing on this page is a download link.
Nothing to install. Open the web app in a modern browser. Tested on Chrome and Firefox; Edge and Safari are expected to work.
Be aware of what this costs you: the web client's code is served by this hub. A hub operator who wanted to read your content could do it by serving you modified code, and no protocol design prevents that. It is the convenience tier, not the secure tier. Everything else — your files, your group keys, your messages — is unreadable to the hub, and the desktop client below removes this last exception by shipping its code with the application instead of receiving it from us.
A desktop application that ships its own interface, keeps your keys on your own machine, and can install and manage a node running on that machine. It will not replace the web client: the same account works with both, on as many devices as you like.
| Platform | Format | Status |
|---|---|---|
| Ubuntu 24.04+ | DEB, apt repository | In development |
| Fedora 44+ | RPM, dnf repository | In development |
| Windows 10+ | MSI (per-user, no administrator rights) | Planned, after Linux |
Updates will come through your distribution's package manager rather than a built-in updater, so your system verifies the signature the same way it does for every other package you have installed.
You do not need these to use MeshBay. They are for running your own node — the machine that stores and serves your group's files — or your own hub.
| Package | Platform | Status |
|---|---|---|
| meshbay-node | Fedora / RHEL (RPM) | In development |
| meshbay-node | Ubuntu / Debian (DEB) | In development |
| meshbay-hub | Fedora / RHEL (RPM) | In development |
| meshbay-hub | Ubuntu / Debian (DEB) | In development |
A node runs as a normal user account, not as root, and it stores its data under that user's home directory. Running one on your own desktop needs no administrator rights; running one on a server is an ordinary system service. Python 3.12 or later is required.
An Android client is planned. It will be distributed as an APK from this site, and on F-Droid if the project's requirements can be met.
Packages will be signed, and the repositories will be signed. That protects you against everyone except whoever controls this website — including us. If this site were compromised, it could serve you a modified package and a matching fingerprint on this page, and both would look correct.
So the signing key's fingerprint will also be published somewhere this website does not control, and you should compare the two before trusting a package. The locations will be listed here once the key exists.
We would rather say this plainly than let a page of checksums imply a guarantee it cannot give.
Clone the repository from GitHub and follow the README. Building from source is the one path that depends on nothing published here.