Device-held identity
Every device generates and retains its own key. Existing owner authority approves enrollment, rotation, removal, and recovery.
Daemonet™ · open infrastructure · owner-controlled by design
Your devices.
Your keys.
Your network.
Daemonet is an open network layer for connecting the computers, phones, servers, storage, and services you already control. Build private infrastructure without making one provider the owner of every relationship.
Open source. Self-hostable. Managed services remain optional.
DAEMONET PROFILE OWNER AUTHORITY
Your laptopdevice-held key
Tor-assisted discovery
direct WireGuard + origin HTTPS
Your serverserves the bytes
✓ coordination leaves the data path
Device identity Explicit policy No central proxy
OWNdevices, keys, and relationships
DIRECTwhenever a verified path works
MINcentral state and retained metadata
PORTself-hostable and replaceable
Cloud convenience without cloud captivity
You use the network.
The network does not use you.
The modern internet is remarkably convenient—provided you place every file, identity, conversation, permission, and payment relationship inside somebody else’s account.
Daemonet takes a different approach. Devices hold their own identities. Authorized peers discover one another through privacy-preserving rendezvous. Connections travel directly whenever possible. Supporting services remain optional, replaceable components rather than permanent owners of the relationship.
Our public compact
Daemonet makes private digital infrastructure a public right. 1Man funds and operates it without owning the people who use it. Read the mission →
The open product
Identity, policy, naming, and routing live together.
A Daemonet profile is a user-owned authority graph, not a cloud tenant. Membership never silently opens an application: profile policy and a service’s own signed access policy both have to allow the connection.
Private names
Signed profile DNS maps stable names to authorized services and current routes. DNS describes authority; it never pretends to be transport.
Exact service gates
Lock an app to named members, portable entitlements, finite timed trials, or unlimited trial starts. A destination-issued pass is short-lived and bound to one device key.
Direct encrypted paths
Tor can introduce peers; WireGuard carries the private network; host-held HTTPS keys authenticate the application endpoint. Failure never invents an unapproved relay.
One private fabric
Use the machines you already own.
Attach a laptop, workstation, NAS, Raspberry Pi, home server, cloud VM, or cluster. Keep application custody at the endpoint while Daemonet supplies a consistent identity and route.
Remote work
SSH, Remmina, private dashboards, administration tools, and long-running sessions without exposing the origin as an anonymous public host.
Storage and media
Mount network drives, resume transfers, synchronize files, stream games, or reach a media library over the same owner-controlled profile.
Private applications
Publish internal HTTPS names, authorize exact users for exact periods, meter trials at the host, and revoke a device without changing the service identity.
Across the digital economy
Change the relationship beneath the industry.
Games, applications, clouds, IT teams, creators, marketplaces, data centers, and institutions all depend on the same identity, access, transport, storage, compute, payment, and operations layers. Daemonet makes those layers independently selectable.
Games and applications
Portable player identity, private builds, community servers, service continuity, signed distribution, and real-time events.
Cloud and networks
Private origins, replaceable edges, policy-driven storage, signed names, data centers, IoT, and compute placement.
IT and institutions
Scoped work identities, exact service access, temporary support, customer environments, revocation, and quorum operations.
Direct distribution
Portable purchases, seller-held relationships, paid files, creator channels, sponsorship, and privacy-aware measurement.
The Daemonet ecosystem
One foundation. Named systems with bounded jobs.
Daemon is the device runtime. DaemonPersona is the holder-controlled proof layer now in product design. DaemonPortal applies portable authority to service relationships. Pocket Dimension applies it to storage. DaemonPay applies it to commerce. Later systems appear only after their dependencies and claims can be proven.
DEVICE RUNTIME
Daemon
Holds device identity, applies policy, discovers authorized peers, and creates secure connections.
Meet the Daemon → HOLDER-CONTROLLED PROOFDaemonPersona
A proposed credential and disclosure layer for proving only the claims a service needs, without turning an account into the person.
Explore the product design → SERVICE ENTRANCEDaemonPortal
A persistent Virtual Front Door where the service proves its identity and each visitor presents only the authority the destination requires.
Walk through the Front Door → STORAGE SYSTEMPocket Dimension
One client-encrypted vault across devices you choose, with explicit placement, integrity, repair, and tested recovery.
Open the Pocket Dimension → COMMERCE FOUNDATIONDaemonPay
Verifiable events, portable entitlements, local gates, receipts, subscriptions, and finite use without payment custody.
Gate access with DaemonPay → OPTIONAL MANAGED SERVICE1Man
Rendezvous, access, names, and later separately selected managed capacity when you do not want to operate it.
Let 1Man handle the plumbing →Try the direct model now
DaemonChat is a free, accountless Daemonet demonstration.
Create a two-browser private room for text, opt-in calls, and encrypted file transfer. 1Man introduces fresh keys with expiring opaque state; it never becomes the conversation or file path.
When you want managed operations
1Man works for Daemonet.
It does not become your Daemonet.
1Man is Daemonet’s official managed operations and integration layer: enrollment coordination, verified names, certificate workflows, entitlements, availability operations, support, and explicit publication.
Non-negotiable boundaries
Convenience cannot rewrite authority.
Free and paid users receive the same privacy model. Managed infrastructure is allowed to know only what its explicit job requires, for only as long as that job requires it.
Devices are source of truth
No durable managed copy of the user’s topology can override current device state.
No operator impersonation
No password-account fallback lets Daemonet or 1Man approve a device or recover an identity.
No accidental data path
Coordination, DNS, and entitlements cannot silently become a content proxy, CDN, or relay.
Visible failure
Certificate, Tor, DNS, route, entitlement, or identity failure stops visibly instead of downgrading trust.
Portable systems
Stable service identity survives host replacement, and leaving 1Man does not destroy the underlying Daemonet.
Honest observation claims
Encryption protects content and integrity; it does not claim encrypted packet timing was literally unobserved.
Install, inspect, improve
Daemonet is an open product—not a signup form.
Start from source or a catered release. Managed access can be attached later without replacing the keys and profiles you create now.