An open protocol for per-public-key backends ("homeservers") enabling censorship-resistant web applications with "credible exit" — the freedom to switch homeserver providers without losing data. Identity is an Ed25519 keypair; PKARR (Public Key Addressable Resource Records) publishes DNS-style records to the BitTorrent Mainline DHT for homeserver discovery, while the homeserver itself handles data storage/serving over standard HTTP/REST. Live ecosystem includes pubky.app (social), an Explorer, and demo apps (mapky.app, eventky.app). Structurally comparable to Solid's personal-data-pod-plus-portable-identity model, though homeserver discovery is DHT-based rather than WebFinger/WebID. Formerly called Pubky Core.
TermsSelf-hosting (run own homeserver) + hosted homeserver providers; identity (keypair) and homeserver are separable, matching the protocol's "credible exit" design
FundsUndisclosed
Based OnPKARR (Public Key Addressable Resource Records) for homeserver discovery via BitTorrent Mainline DHT; standard HTTP/REST for data serving
Content AddressingNo (homeserver data addressed by HTTP path; PKARR records addressed by the owning public key, not content hash)
E2EENot stated as a protocol-level guarantee (application-dependent); transport is standard HTTPS
SignatureEd25519 keypair-based identity and authentication
PermissionsHomeserver-defined (per-homeserver access control over hosted data)
Semantic Web CompatibilityNot stated (arbitrary data storage, no mandated RDF/Linked-Data layer, unlike Solid)
Federation ModelHomeserver-based (analogous to Solid Pods): any homeserver can serve any keypair-identified user; discovery is DHT-based rather than DNS/WebFinger; apps and homeservers are decoupled
Instance / Server RequirementsLow to moderate (homeserver designed to be self-hostable; Docker Stack and CLI tooling provided)
Account PortabilityFull portability by design — "credible exit" is the protocol's own stated core value proposition: switch homeserver providers without losing data or identity
Discovery / Relay ArchitecturePKARR-based: Ed25519 keypair signs DNS-style records published as BEP44 mutable items on the BitTorrent Mainline DHT; HTTP-to-DHT relay gateways bridge browser/UDP-restricted clients
Server Authority ModelUser-controlled identity, homeserver-controlled data custody unless self-hosted — keypair identity is independent of any single homeserver's authority
Protocol Maturity / StandardizationNo formal standards-body process; single-maintainer (Synonym) reference implementation; live production components alongside actively-developed pieces
Data SovereigntyUser-controlled (keypair-based identity independent of hosting provider; credible exit between homeservers)
Relationships
How this tool connects to other tools and organizations, from relationships reviewed by the OpenHaven data steward. They describe how projects connect, not how good they are.