The crypto phone for those who cannot afford to be found, read, or compromised. No phone number. No account. No backdoor. End-to-end encrypted communication carried by a relay that can only ever see scrambled bytes.
Five apps. One Owner Gate.
Every app on a GhostWire handset is release-signed by us. Every command path — install, update, unlock — runs through a gate only a key we hold can open. Underneath it sits infrastructure we own outright: no Google push, no app store, no third-party relay.
← drag to see the whole system →
Privacy isn't a setting. It's the architecture.
Most "secure" apps still know your number, your contacts, and when you're online. GhostWire is built so that even we can't. There is nothing to hand over, because there is nothing to see.
Zero identity
No phone number. No email. No real name. You pair devices with a one-time invite, so there is no account database to breach — because there are no accounts. You are unknown by design.
End-to-end encrypted, always
Messages are sealed on your device and only opened on your contact's, using the audited Olm double ratchet (vodozemac). Keys rotate every message — forward secrecy and post-compromise security. Only you and your recipient can read a word.
Panic-PIN wipe
A second PIN destroys your GhostWire vault and every key the instant it's entered. Irreversible. Unstoppable. Undetectable. Forced to unlock under duress, the vault you hand over holds nothing — and GrapheneOS's own duress PIN can take the whole device with it.
No backdoors. Ever.
We cannot read your messages. We don't store your messages. We don't have the keys. The relay holds ciphertext only, and undelivered messages self-erase. By design — not by promise.
Built for the real world
No push services tied to Google or Apple. An anonymous eSIM that works in 160+ countries so the network never sees the real you. No trace. No logs. No weakness.
A complete secure communications ecosystem.
Not an app you download onto a phone that's already watching you — a hardened device where every layer is chosen for one thing: that your conversations, plans, and movements can't be read, tracked, or sold.
Pixel 9a
Hardened & relocked
GrapheneOS
Locked down
Anonymous eSIM
160+ countries
GhostWire Shield
Threat detection
Cake Wallet
XMR · BTC · USDT/USDC
Duress PIN
Instant vault wipe
Room reader
Sweeps for hidden cams & mics
WiFi reader
Every device on a network, seen
IMSI-catcher alert
Fake cell towers, caught
Audio-visual guard
Mic & camera lockdown
WiFi protection
Hostile network defence
And more
Threat detection, always on
When the conversation actually matters.
Built for people whose communications are a target — and who can't afford a "trust us" answer on where their words end up.
Privacy, elevated.
Executive-grade security for the life you've built, so you can live it without being watched. Premium hardware, family and staff ready, concierge onboarding.
Sovereign comms.
Hardened Pixel + GrapheneOS + a relay you can self-host, so only your government holds the keys. Accountable, contracted, sovereign — sold as data protection, never as evasion.
If they can't find you.
No account, no number, no backdoor. An anonymous eSIM so the network never sees the real you, and a duress PIN that wipes the keys if you're forced to unlock. Personal safety, by design.
Serious cryptography. Not marketing.
GhostWire is built on audited, battle-tested primitives — the same class of ratchet that protects the world's most scrutinised messengers — and hardened for people who are genuinely targeted.
- Message encryptionOlm double ratchet · vodozemac 0.10
- Security propertiesForward secrecy + post-compromise
- Relay storageCiphertext only · auto-purge
- Key vaultSealed under a 32-byte Argon2id key
- HandsetPixel + GrapheneOS · verified boot
- App integritySigned builds · self-hosted updates
- IdentityNone — invite pairing · fingerprint verify
- Screen captureBlocked · FLAG_SECURE on every screen
- CallsE2E voice & video · minute bundles
- Push notificationsSelf-hosted — no Google, no Apple
- VPNMullvad, installed as standard
- PaymentsCake Wallet — XMR · BTC · USDT/USDC
- DuressSecond PIN wipes vault + keys
- ConnectivityAnonymous eSIM · 160+ countries
- Shield suiteRoom reader · WiFi reader · IMSI-catcher alert · AV guard
- BackdoorsNone. By design, not by promise.
How GhostWire moves a message.
One engineering drawing, no marketing: what leaves your device, the only thing the relay can ever hold, and what arrives. If a box isn't on this sheet, it doesn't exist in the system.
Real encryption. Real privacy.
- ▸End-to-end encryption — audited Olm double ratchet (vodozemac). Keys rotate every message: forward secrecy and post-compromise security.
- ▸Sender authentication — signed messages. "From X" is provably from X.
- ▸Zero-knowledge relay — holds ciphertext and routing tokens only, erases on delivery. The operator cannot read a word.
- ▸Proof-of-possession registration — identity hijacking is stopped at the door.
- ▸Sealed key vault — everything rests under a 32-byte Argon2id key that never leaves the device.
- ▸Verified conversations — fingerprint verification and delivery receipts, without identity.
All communications. All secure.
Encrypted text
E2E chat
Voice calls
Clear · secure
Video calls
E2E · HD
Files & media
Any type · any size
No screenshots
FLAG_SECURE
Private push
Self-hosted
Built-in VPN
Mullvad standard
No numbers
Zero identity
Fingerprint verify
Contacts · proven
One price. Everything included.
No tiers, no add-on maze. A complete hardened device with everything on it, one simple recharge when your term ends, and encrypted minutes when you need them.
- Hardened Pixel 9a — GrapheneOS, relocked
- Case + screen protector, fitted
- GhostWire secure messaging pre-installed
- Anonymous eSIM data service — 6 months included
- GhostWire Shield + the full safety-tech suite
- Duress-PIN wipe armed & tested before handover
- GhostWire units — full service renewal
- Anonymous data service continued
- Relay service + security updates
- Shield suite kept current
- End-to-end encrypted calls on every unit
- No per-minute billing while service is active
- GhostWire SCARAB — endpoint shield, intrusion alerts to your pocket
- GhostWire Privacy Audit — hidden-camera & network sweep
- GhostWire Safe Room — RF & Bluetooth bug sweep, hidden transmitters found
- Ask for the full add-on catalogue when you order
Private rollout — devices are allocated in order of request. Order online at ghostwire.store, or arrange your kit directly with us.
Buy, recharge or top up — anonymously.
One Bitcoin address for everything: your device, the 6-month recharge, Secure-minutes top-ups and paid add-ons. No card, no bank, self-custodial. Scan or copy, and pay the £ value in BTC at today's rate.
bc1q2kkmlgc96w8rngm4c5c4nx4220v40l4ea9r3p5
- Scan the QR or copy the address, and send your Bitcoin.
- Message us on Telegram (or email) with what it's for and your delivery details — we'll confirm the exact BTC amount with you first if you like.
- We verify the payment on-chain and arrange your device or top-up.
An open invitation
Think you can break GhostWire? Come and try.
We will hand you the keys: a device on the table, the full spec sheet, and our undivided attention. Get in, show us how, and we will fix it and shake your hand. That is how confident we are in what ships.
Take the challenge