Open-source, Android-first encrypted messaging in Alpha 2, with multiple transport paths tested on specific mobile networks. No phone number or email is required. Security boundaries and relay-visible metadata are documented publicly.
PHANTOM is not another chat app with an encryption sticker. Every design decision assumes a hostile network and an adversary with state-level resources.
A custom Double Ratchet implementation over libsodium, with ED25519 identity keys generated on your device. The relay never sees plaintext.
Multiple transport paths reach the network, including one that reshapes the observable wire pattern to resemble ordinary TLS. When one route is blocked, another takes over.
No phone number, email, or real name is required. Sealed-sender-style envelopes reduce exposed sender metadata, while the relay can still observe timing, sizes, authenticated sessions, and delivery destinations.
Licensed AGPL-3.0-or-later. The source, threat model, known issues, and architecture decisions are public. The custom protocol has not yet received an independent security audit.
Each mode picks a different chain of transports to reach the network — trading latency for resistance. Ghost never silently downgrades: if it can't go through Tor, it fails visibly rather than exposing you.
Direct-first chain. Lowest latency for everyday use on open networks.
Uses the REALITY transport first. Metadata exposure and limitations are documented in the threat model; this mode does not provide anonymity.
Tor-only chain. Never silently downgrades — fails visibly if Tor can't bootstrap.
Encrypted WebSocket over TLS for normal conditions.
REALITY changes the observable wire pattern to resemble ordinary TLS. It is not an anonymity system and may not bypass every DPI policy. Founder-run tests covered specific networks and dates.
Text-only emergency fallback for hostile networks. Does not carry calls.
Short-poll delivery when WebSocket frames are silently dropped.
Peer-to-peer transport without infrastructure. Planned — not yet built.
PHANTOM is an Android-first Alpha 2 project. Source builds and tagged development snapshots are available on GitHub. No public end-user APK or open beta is available yet. Groups and calls are not production-ready, and the custom protocol has not been independently audited.
Public builds land at Beta — watch releases on GitHub →
See the full roadmap →PHANTOM is independently developed and does not sell user data. The project is open to mission-aligned grants and pre-seed investment that preserve its open-source license and published security boundaries.