The crypto phone for those who cannot afford to be found, read, or compromised. No phone number. No account. No backdoor. End-to-end encrypted communication carried by a relay that can only ever see scrambled bytes.
Privacy isn't a setting. It's the architecture.
Most "secure" apps still know your number, your contacts, and when you're online. GhostWire is built so that even we can't. There is nothing to hand over, because there is nothing to see.
Zero identity
No phone number. No email. No real name. You pair devices with a one-time invite, so there is no account database to breach — because there are no accounts. You are unknown by design.
End-to-end encrypted, always
Messages are sealed on your device and only opened on your contact's, using the audited Olm double ratchet (vodozemac). Keys rotate every message — forward secrecy and post-compromise security. Only you and your recipient can read a word.
Panic-PIN wipe
A second PIN destroys your vault and every key the instant it's entered. Irreversible. Unstoppable. Undetectable. Forced to unlock under duress, you hand over a device that holds nothing.
No backdoors. Ever.
We cannot read your messages. We don't store your messages. We don't have the keys. The relay holds ciphertext only, and undelivered messages self-erase. By design — not by promise.
Built for the real world
No push services tied to Google or Apple. An anonymous eSIM that works in 160+ countries so the network never sees the real you. No trace. No logs. No weakness.
A complete secure communications ecosystem.
Not an app you download onto a phone that's already watching you — a hardened device where every layer is chosen for one thing: that your conversations, plans, and movements can't be read, tracked, or sold.
Pixel 9a
Hardened & relocked
GrapheneOS
Locked down
Anonymous eSIM
160+ countries
Pharoah Shield
Threat detection
Cake Wallet
XMR · BTC · USDT/USDC
Duress PIN
Device-level wipe
Room reader
Sweeps for hidden cams & mics
WiFi reader
Every device on a network, seen
IMSI-catcher alert
Fake cell towers, caught
Audio-visual guard
Mic & camera lockdown
WiFi protection
Hostile network defence
And more
Threat detection, always on
When the conversation actually matters.
Built for people whose communications are a target — and who can't afford a "trust us" answer on where their words end up.
Privacy, elevated.
Executive-grade security for the life you've built, so you can live it without being watched. Premium hardware, family and staff ready, concierge onboarding.
Sovereign comms.
Hardened Pixel + GrapheneOS + a relay you can self-host, so only your government holds the keys. Accountable, contracted, sovereign — sold as data protection, never as evasion.
If they can't find you.
No account, no number, no backdoor. An anonymous eSIM so the network never sees the real you, and a duress PIN that wipes the keys if you're forced to unlock. Personal safety, by design.
Serious cryptography. Not marketing.
GhostWire is built on audited, battle-tested primitives — the same class of ratchet that protects the world's most scrutinised messengers — and hardened for people who are genuinely targeted.
- Message encryptionOlm double ratchet · vodozemac 0.10
- Security propertiesForward secrecy + post-compromise
- Relay storageCiphertext only · auto-purge
- Key vaultSealed under a 32-byte Argon2id key
- HandsetPixel + GrapheneOS · verified boot
- App integritySigned builds · self-hosted updates
- IdentityNone — invite pairing · fingerprint verify
- Disappearing messages1h / 24h / 7d · both sides
- CallsE2E voice & video · minute bundles
- Push notificationsSelf-hosted — no Google, no Apple
- VPNMullvad, installed as standard
- PaymentsCake Wallet — XMR · BTC · USDT/USDC
- DuressSecond PIN wipes vault + keys
- ConnectivityAnonymous eSIM · 160+ countries
- Shield suiteRoom reader · WiFi reader · IMSI-catcher alert · AV guard
- BackdoorsNone. By design, not by promise.
How GhostWire moves a message.
One engineering drawing, no marketing: what leaves your device, the only thing the relay can ever hold, and what arrives. If a box isn't on this sheet, it doesn't exist in the system.
Real encryption. Real privacy.
- ▸End-to-end encryption — audited Olm double ratchet (vodozemac). Keys rotate every message: forward secrecy and post-compromise security.
- ▸Sender authentication — signed messages. "From X" is provably from X.
- ▸Zero-knowledge relay — holds ciphertext and routing tokens only, erases on delivery. The operator cannot read a word.
- ▸Proof-of-possession registration — identity hijacking is stopped at the door.
- ▸Sealed key vault — everything rests under a 32-byte Argon2id key that never leaves the device.
- ▸Verified conversations — fingerprint verification and delivery receipts, without identity.
All communications. All secure.
Encrypted text
E2E chat
Voice calls
Clear · secure
Video calls
E2E · HD
Files & media
Any type · any size
Disappearing
1H · 24H · 7D
Private push
Self-hosted
Built-in VPN
Mullvad standard
No numbers
Zero identity
Fingerprint verify
Contacts · proven
One price. Everything included.
No tiers, no add-on maze. A complete hardened device with everything on it, one simple recharge when your term ends, and encrypted minutes when you need them.
- Hardened Pixel 9a — GrapheneOS, relocked
- Case + screen protector, fitted
- GhostWire secure messaging pre-installed
- Anonymous eSIM data service — 6 months included
- Pharoah Mobile Shield + the full safety-tech suite
- Duress-PIN wipe armed & tested before handover
- GhostWire units — full service renewal
- Anonymous data service continued
- Relay service + security updates
- Shield suite kept current
- End-to-end encrypted calls
- Top up any time, no contract change
Private rollout — devices are allocated in order of request. Order online at ghostwire.store, or arrange your kit directly with us.