WhisperBox
WhisperBox is a forms and surveys app for Basecamp and Android that syncs peer to peer over Logos Messaging, with each answer end-to-end encrypted to the form's key. It is a rebuild of whisperbox-org/whisperbox for the Logos stack, published by the GitHub user vpavlin.
What it does
- Lets a researcher publish a form. Respondents submit answers sealed to the form key, so only the creator and co-owners can read them.
- Syncs over one shared Logos Messaging topic with its own catch-up for late joiners. There is no server and no central store of readable data.
- Lets the creator close and reopen a form, edit a published form, add co-owners, and send private replies or quiz scores.
- Signs every answer inside the sealed payload. Forms limited to listed addresses drop unsigned answers, and forms open to anyone show them as unverified.
- Exports answers as CSV, with unverified answers marked.
- Runs on Android through the Loam shared node, or on its own node without Loam.
- Runs headless as a hub, with the core under
logosctl.
The README lists the limits of its privacy model. Form definitions are public, relaying nodes see which node sent an answer and when, co-owner access cannot be revoked, there is no forward secrecy, and local data in ~/.whisperbox-core is not encrypted.
Stage: Prototype. The README states no stage. The page lists it as Prototype because it has working code and install steps. It says WhisperBox 0.3.x, the version for Basecamp 0.2.x, "is no longer maintained". The README does not say whether it is an official Logos project.
Use it
- This needs Basecamp 0.3. Add the repository
https://apps.vpavlin.xyz/logos-repo.jsonand install WhisperBox. It pullswhisperbox_coreand its transportloam_core, which brings the officialdelivery_module. - Always update
whisperboxandwhisperbox_coretogether. - On Android, install Loam and WhisperBox from the F-Droid repository
https://apps.vpavlin.xyz/fdroid/repo("Logos Apps"). Open Loam once and approve WhisperBox when asked. Without Loam, WhisperBox runs its own node.
Both packages are listed for Linux x64, Linux ARM64 and macOS (Apple Silicon). For the view, the README adds "from 0.4.2".
Build it
nix build .#whisperbox_core .#whisperboxbuilds the packages.scripts/test.shruns every test layer that does not need nix.- docs/BUILD.md covers the toolchain, the
.lgxbuilds, the arm64 Android APK and releasing.
Releases
The latest tags are arm64-0.5.4 and darwin-0.5.4, both dated 3 November 2026. module/metadata.json gives whisperbox version 0.5.4, and whisperbox_core/metadata.json gives whisperbox_core version 0.5.4.
See also
Sources
- whisperbox-logos README, GitHub, last commit 3 November 2026
- module/metadata.json and whisperbox_core/metadata.json, GitHub
- whisperbox-logos tags, GitHub