A Real-World Review of Nostr Mail (Nmail)

Email has become run-of-the-mill standard. The same players control the space year on year: Google Workspace, Microsoft 365, and Fastmail. Having recently experimented with modern setups like Mailflare and Agentic Inbox workflows alongside traditional mail, I decided it was time to broaden my scope and take a look at decentralised email.

And where better to start than with a Nostr Mail environment (Nmail via nostrmail.org)?

What is Nostr Mail (Nmail)?

Before diving into how it performs, it helps to understand what Nmail actually is.

Nmail is an open-source web application designed to bring a traditional email interface—complete with an Inbox, Sent folder, Compose window, and Drafts—to the Nostr protocol. Instead of storing your messages on a central mail server like Gmail or Fastmail, Nmail connects directly to independent Nostr relays over WebSockets.

Instead of a username and password hosted by a tech company, your identity rests on a pair of cryptographic keys (standardised via Nostr's NIP-19 format):

npub (Public Key): Think of this as your public email address or bank account number. It starts with npub1... and is completely safe to share publicly. It’s how other users find you, send you encrypted messages, or verify that a post came from you.
nsec (Private Key): Think of this as your master password and digital signature rolled into one. It starts with nsec1... and must never be shared. It is stored locally on your device or inside a browser extension to sign messages and decrypt incoming mail.

Every email you write in Nmail is signed locally using your nsec, encrypted client-side, and dispatched to the Nostr network. To the end user, it feels just like opening webmail in a browser, but under the bonnet, it is a zero-knowledge, relay-based messaging client where you hold the master keys.

Speed & UI Responsiveness: How Does Decentralised Webmail Perform?

Coming from bloated traditional webmail clients like Gmail, the immediate takeaway from using Nmail is its snappiness and complete lack of server latency.

Zero Page Reloads: Built as a modern Flutter/Web client, the UI loads once in the browser and manages state locally. Switching between Inbox, Sent, Drafts, and Settings is instantaneous.
Real-Time WebSocket Syncing across Independent Relays: Traditional IMAP clients poll central servers or rely on delayed push mechanisms. Nmail maintains direct, persistent WebSocket connections across multiple independent, decentralised Nostr relays simultaneously (such as relay.nmail.li or relay.primal.net). Incoming encrypted events render almost immediately without manual refresh triggers.
Decoupled Architecture: Because fetching metadata from distributed relays and rendering the interface are decoupled from message parsing, browsing through email threads feels significantly smoother than corporate webmail suites.

Nostr Mail webmail web application interface showing an inbox with a message thread from Paul O'Brien — Speed & UI Responsiveness

Beyond the Browser: Native Desktop and Mobile Clients

While testing nostrmail.org in a web browser works brilliantly for a quick evaluation, relying on webmail running third-party JavaScript isn't the only way to read your inbox. Because Nostr is an open protocol, your data isn't locked inside a web application—meaning you can access the exact same emails across a range of dedicated native applications.

Desktop Apps (macOS, Linux & Windows)

If you prefer a dedicated window over browser tabs, you have two primary routes:

Native Desktop Apps (e.g. nostr-mail): Built as a lightweight, cross-platform app using Tauri and Rust, nostr-mail runs directly on your operating system. It features a local SQLite database that caches your inbox and contacts locally, allowing you to draft or search past communications offline. It handles NIP-44 decryption directly on your machine without relying on a remote web server.
Progressive Web App (PWA): If you like the Nmail interface, you can turn nostrmail.org into a standalone desktop app in two clicks. In Safari or Chrome, simply select File $\rightarrow$ Add to Dock / Create Shortcut. This packages the interface into an isolated window with native notifications, running independently of your main browser tabs.

Mobile Access (iOS & Android)

Decentralised email on mobile offers a similar level of flexibility:

Dedicated Mobile Nmail Clients: Native mobile ports of Nmail provide a familiar, mobile-optimised email interface with push notifications and local key storage via your phone's secure enclave or key manager.
Fallback via Standard Nostr Clients: Because Nostr Mail uses standard NIP-44 encryption and NIP-59 gift-wrapped event formats, you aren't strictly limited to email clients. If you log into standard Nostr apps like Damus (iOS) or Amethyst (Android) using your key, your emails will appear alongside your standard messages. While formatted more like direct message threads than a traditional inbox, the underlying encrypted data remains fully accessible.

Is Nostr a Blockchain? (Why It Matters)

People often hear "decentralised identity" and assume a heavy blockchain layer is involved. Nostr Mail does not use a blockchain, and that distinction is critical to why it feels so fast:

No Global Ledger or Consensus: Blockchains require every node to validate and agree on a single global state via mining or staking. Nostr has no global ledger.
Zero Gas Fees or Tokens: You don't pay network gas fees or hold crypto tokens to send an email, save a draft, or publish a NIP-05 profile.
Pure Cryptography + Lightweight Relays: Nostr uses the same secp256k1 Schnorr signatures found in crypto networks to sign every email locally on your device. Relays simply store and pass along these signed, encrypted JSON text blobs over WebSockets with standard web speed.

Security Posture: Nostr-Native vs. Legacy SMTP Bridges

Nostr Mail fundamentally overhauls email privacy, provided you understand where encryption starts and stops:

Native Nostr-to-Nostr (Zero-Knowledge): When emailing another npub key or NIP-05 address, messages are encrypted client-side using NIP-44. Furthermore, messages are sealed inside NIP-59 "Gift Wrapping". Relays carrying your message cannot read the body, inspect the subject line, or identify who sent or received the payload.
SMTP Bridge Fallback (The Legacy Compromise): To communicate with traditional inboxes (like Gmail or Outlook), messages route through an SMTP bridge (such as uid.ovh). Because legacy email servers cannot interpret Nostr event signatures, the bridge acts as a translation gateway. This introduces a brief point of cleartext decryption on the bridge server before the message moves onto the open SMTP internet.

Domain Ownership & NIP-05: The Decentralisation Paradox

Mapping a human-readable handle (like paul@mydomain.co.uk) via NIP-05 bridges the gap between raw cryptographic keys (npub1...) and recognisable names.

By deploying a 10-line Cloudflare Worker serving a /.well-known/nostr.json route, you can attach custom domain identity verification without paying for Google Workspace or modifying your primary MX records.

The Key Architectural Takeaway:

On centralised platforms, your domain is your identity; if your domain host cancels your account or gets seized, your entire inbox dies with it. On Nostr, your domain is simply a temporary verification badge pinned to your public key. If your domain ever disappears, your cryptographic identity (npub), contacts, and encrypted historical messages remain 100% untouched across the decentralised relay network.

Decentralised Resilience: What Happens If `nostrmail.org` Goes Offline?

The most compelling aspect of this setup is client independence enabled by true protocol-level decentralisation.

If the nostrmail.org website vanishes tomorrow:

You lose access to that specific web page UI, but zero email data is lost.
Because your emails live encrypted as signed JSON events distributed across independent, decentralised relays, you can instantly open another web client—or launch a local native desktop app built with Tauri/Rust—paste your nsec private key, and your entire inbox reappears instantly.

The Verdict

Nostr Mail (Nmail) proves that decentralised communications no longer require sacrificing usability. The webmail interface is fast, responsive, and intuitive enough for daily use, while giving you complete self-sovereignty over your cryptographic keys. For native communications, its decentralised network offers privacy and metadata protections that legacy SMTP can simply never match.