About

AuraMail is a native email client for Windows and Linux, built around privacy, performance, and productivity. Your mail lives locally — encrypted, searchable offline, and free of any unnecessary cloud layer.

Built with Electron, React, TypeScript, and SQLCipher.

Features

• Encrypted by default — SQLCipher (AES‑256) database, credentials stored via the OS keychain (DPAPI / Secret Service / KWallet)
• Real-time sync — IMAP IDLE push, automatic reconnect, sleep/wake recovery
• Offline search — full-text search across your mailbox via SQLite FTS5
• Rich composer — Tiptap editor with checklists, code blocks, send later, and snooze
• One workspace — integrated calendar, contact timeline, thread notes, automation rules
• Keyboard-first — global command palette (Ctrl K) and full keyboard navigation
• Multi-account — unified inbox, each account with its own identity and color
• Multilingual — English and Polish interface

Preview

Architecture

Isolated Electron processes connected by a secure IPC boundary.

Renderer  (React · Fluent UI · Tailwind · Zustand)
    │
  secure IPC
    │
Main process  (Mail · SMTP · Sync · Calendar · Scheduler)
    │
 ┌──┴───────┐
 SQLCipher   OS Keychain

_{Full breakdown in ARCHITECTURE.md.}

Tech stack

Installation

Requirements: Node.js 24+, Git, C/C++ build tools (plus libsecret dev headers on Linux)

git clone https://github.com/qvbvs/auramail.git
cd auramail
npm install
npm run setup   # rebuilds native modules for Electron's ABI
npm run dev

On Wayland: npm run dev -- --ozone-platform-hint=auto

# Debian / Ubuntu / Mint / Pop!_OS
sudo apt install build-essential libsecret-1-dev python3

# Fedora / RHEL
sudo dnf install make gcc-c++ libsecret-devel python3

# Arch / Manjaro
sudo pacman -S base-devel libsecret python

Security

• Mail data is stored in a local SQLCipher-encrypted SQLite database (AES-256)
• The encryption key is protected per-install via Electron's safeStorage (Windows DPAPI / Linux Secret Service)
• Account credentials live in the OS credential manager via keytar — never in the app database
• Hardened Electron: contextIsolation, sandbox, no nodeIntegration; external links open in the system browser

Found a vulnerability? See SECURITY.md.

Keyboard shortcuts

Build

npm run typecheck   # type checking
npm test            # tests
npm run lint        # lint

npm run build:win     # Windows
npm run build:linux   # Linux
npm run build:all     # all platforms

Artifacts land in dist/ — .exe/NSIS on Windows, .AppImage/.deb/.rpm on Linux.

Roadmap

• Advanced automation rules
• Additional calendar integrations
• Improved contact management
• More customization options
• Extended keyboard workflows

Contributing

Contributions and bug reports are welcome — please read CONTRIBUTING.md before opening a PR.