How GhostWire compares.
A secure handset built as a complete privacy system: zero-identity communications, post-quantum protection, hardened hardware, counter-surveillance tools and an integrated secure application suite. Provisioned on Pixel 7a, Pixel 8a, Pixel 9 or Pixel 9a, hardened on GrapheneOS with a relocked bootloader. An optional six-month prepaid roaming eSIM for a handset, or physical SIM for a handset or router, covering 160+ countries is sold separately. The Pixel 10 range is prepared to order. Here is how that honestly stacks up against the phones people cross-shop us with.
| As of October 2026 | GhostWire Kit | NitroPhone | Above Phone | UP Phone (Unplugged) | Librem 5 (Purism) |
|---|---|---|---|---|---|
| Base platform | GrapheneOS, Pixel 7a, Pixel 8a, Pixel 9 or Pixel 9a, bootloader relocked, verified boot | GrapheneOS on Pixel | GrapheneOS on Pixel | LibertOS (their own Android-based OS) | PureOS Linux, own hardware |
| Zero-identity messaging built in | Yes — no number, no email, no account, post-quantum protected | No bundled messenger | Their service suite uses accounts | Own messenger in their ecosystem | No bundled messenger |
| Post-quantum handshake shipping | Yes — ML-KEM-768 hybrid, on device today | Not advertised | Not advertised | Not advertised | Not advertised |
| Encrypted voice & video calling | Yes — ML-KEM-rooted frames over secure TURN; rings locked | No bundled calling | Account-based SIP / VoIP | Account-based calling | Cellular / basic VoIP |
| Decoupled relay queue architecture | Yes — independent message, call-signalling & control queues eliminate starvation | n/a (no relay) | Single shared queue | Proprietary cloud relay | n/a |
| Encrypted media security | Yes — zero-disk in-memory zoomable viewer, no shared storage leaks | Standard Android gallery | Standard Android gallery | Proprietary gallery | Standard Linux image viewer |
| Roaming data option | Handset eSIM or physical SIM, six months, 160+ countries, sold separately | — | SIM plans available from them | SIM plans available from them | — |
| Duress protection | Multi-tier — duress PIN wipes GhostWire vault; GrapheneOS duress PIN wipes device; optional USB auto-wipe | Available via GrapheneOS, self-setup | Available via GrapheneOS, self-setup | Their advertised kill features | Hardware kill switches |
| Counter-surveillance suite | Yes — cellular anomaly warnings, camera/network-risk indicators, Safe Room acoustic guard, Vehicle Scanner | — | — | Firewall-focused tooling | — |
| Preloaded secure app suite | 14 apps — GhostMail, GhostBrowser, GhostMaps, LinkBond, Shield, SCARAB, Privacy Audit, Safe Room, Vehicle Scanner + Molly, Telegram, Cake Wallet, Mullvad | Stock GrapheneOS apps | Their app bundle (uses accounts) | Unplugged suite | PureOS Linux apps |
| Managed communications service | Yes — GhostWire-controlled delivery, call and update infrastructure; signed mandatory OTA | n/a | — | — | n/a |
| Pricing model | All-in kit £1,500–£1,700 by device + £499/6mo service; Pixel 10a £1,850 prepared to order | One-time device | Device + subscriptions | Device + subscriptions | One-time device |
Honest answer: who should buy what?
Buy a NitroPhone if…
you just want a clean GrapheneOS Pixel, one-time purchase, no bundled service, and you are happy configuring apps, comms and data yourself.
Buy an Above Phone if…
you want a GrapheneOS device plus a subscription ecosystem of privacy services (mail, VPN, voice) and are comfortable with service accounts.
Buy an UP Phone if…
you prefer an integrated vendor ecosystem with its own OS and app store, and you are comfortable trusting that vendor's firmware over a Pixel + GrapheneOS base.
Buy a Librem 5 if…
you want a true Linux phone with physical kill switches and accept older hardware and rougher day-to-day usability for it.
Buy a GhostWire Kit if…
you want the whole problem solved in one handover: hardened device, zero-identity communications, hybrid post-quantum messaging, current-pair ML-KEM-rooted call frames, counter-surveillance tooling, 15 preloaded secure applications, and duress-PIN protection you configure with your own credentials. Optional six-month prepaid handset eSIM and physical SIM options cover 160+ countries and are sold separately; routers use the physical-SIM path. Worldwide, dispatched within 48 hours of payment, crypto accepted. For organisations, GhostWire's controlled service layer is designed as part of the system, not as an outsourced consumer platform.
See the full specification.
Every layer of the kit, field-verified and priced by device.
Visit the GhostWire Store →