Orifude

Your letter will find someone you have never met.

With Orifude, you write a private, pseudonymous letter in your terminal, and the post office carries it to one unrelated person who may reply once.

Install v0.2.0See how it works

Private alpha. Online identity creation is invite-only.

See a complete exchange in the real TUI.

The recording uses a local demonstration post office and stores no real correspondence.

Read the recording as text
  1. Sora creates a local demonstration identity.
  2. Sora writes, previews, folds, and releases a letter.
  3. A waiting letter from Mori is claimed and explicitly unfolded.
  4. Sora sends the one allowed reply and keeps the exchange.
A squirrel holding a folded letter on a branch

Your letter travels to one stranger and goes no farther.

You do not choose an audience or browse for a recipient. The post office quietly carries your words to one eligible person.

  1. You write a letter and let it go.The TUI lets you read it once more before you release it.
  2. The post office finds one stranger.That person may claim your letter and choose to unfold it.
  3. A single reply completes the exchange.Either person can keep the finished correspondence privately.

Orifude makes room for a private conversation.

There are no public reactions, popularity scores, or profiles to tend. The exchange belongs only to the two people reading it.

Your letter has no audience. There is no feed, follower count, search page, or public profile.

You cannot browse for a recipient. The post office chooses one eligible stranger without exposing a directory of people.

The conversation ends after one reply. When the recipient answers, the exchange is complete and can be kept privately.

Your letters stay out of the browser. This website only explains Orifude and helps you install the TUI.

Here is what the post office can see.

The design limits who can read a letter and what strangers learn about each other. It does not pretend the post office is invisible.

Your correspondence is protected at rest.

  • Correspondence is application-encrypted in PostgreSQL.
  • Only the matched participants can request an ordinary message.
  • Aliases are non-searchable and reveal no public profile.
  • This static website has no letter API, account state, or analytics.

The post office still handles delivery.

  • Orifude is not end-to-end encrypted.
  • The authorized post office can decrypt ordinary messages.
  • The service sees operational metadata and participant relationships.
  • A running-service compromise is outside storage-encryption protection.

Install Orifude on your computer.

Orifude v0.2.0 ships for Linux, macOS, and Windows on amd64 and arm64. Start with a package manager, or use a verified installer if you prefer to inspect every step.

Start with your package manager.

Homebrew, Scoop, and the AUR install the same published release and verify the archive selected for your machine.

Choose the command for your system.

# Homebrew on macOS or Linux
brew install nuggocto/tap/orifude

# Scoop on Windows
scoop bucket add nuggocto https://github.com/nuggocto/scoop-bucket
scoop install nuggocto/orifude

# AUR on Arch Linux
paru -S orifude-bin
Use the verified POSIX shell installer.
curl -fsSLo install-orifude.sh https://orifude.com/install.sh
less install-orifude.sh
sh install-orifude.sh --version 0.2.0
Use the verified PowerShell installer.
Invoke-WebRequest https://orifude.com/install.ps1 -OutFile install-orifude.ps1
Get-Content .\install-orifude.ps1
.\install-orifude.ps1 -Version 0.2.0

Download and verify the release archive yourself.

Every archive below is immutable. Compare its SHA-256 value with the published checksum file before you install it.

Linux

  • amd64tar.gz031d0745469418c3d3c8946e777e6456f52a95ee3e5afc5ff4bd906fc2490873
  • arm64tar.gz1ef37a506e9aead816a232c86b6fd29c91204ceed31ef32b7a1be8c001acff00

macOS

  • amd64tar.gzb87bfd54bebbfc80331c5510bef67d1646c6c323696ff3b1c3faeca142c17230
  • arm64tar.gzdbb964b90cb10e468a6b1e6725cfc77cc9c28cddb020bada32b92ad93d45c027

Windows

  • amd64zip2e82b72d99036b8f7530d16897bd461509ec733a4eef1cd8fe7e6ffc40a92c17
  • arm64zip428986437be69d17b535bf93d7e041df23db553b7df68c717ac560b4d0b32af1
Complete SHA-256 checksum file

A few things are worth knowing.

Is Orifude anonymous?

It is pseudonymous. A matched stranger sees your immutable alias. The service still sees operational metadata and the relationship between the two identities.

Is it end-to-end encrypted?

No. Correspondence is encrypted in storage, but the authorized post office decrypts messages for delivery and separately handles reported evidence.

Can I choose who receives my letter?

No. The post office assigns one unrelated eligible recipient. There is no user search or direct-message system.

Why is online access invite-only?

The online service is still a private alpha. The downloadable TUI and its checksums can be public before open registration is ready.

What if I lose my device?

The device key cannot be recovered. The separate revocation credential shown during identity creation can only delete the lost identity.