YOUR PRIVATE WORKSPACE

Everything. In your control.

Communications, connections and files — one secure-first ecosystem.

◈

GHOST privacy controlOne app-wide setting for Messenger, Phone and Mail handoffs

Local-only mode is off. This does not mean the GHOST VPN is connected.

YOUR APPS

GHOSTsuite

6 services

Get startedExplore tools that work in the current pilot.

What is actually protected today?

GHOST messenger and phone provide manually paired, temporary browser WebRTC sessions. Drive encrypts selected files locally. Mail has a local composer, import analysis, and provider connector plan. A first-party device-wide VPN, mailbox, persistent message delivery and cloud file storage are not deployed or independently audited.

GHOST / PRIVATE COMMUNICATIONS

Your conversations.

A simpler inbox experience. Contact identity, secure invitations, offline delivery and persistent conversations require the authenticated relay now being engineered.

Pilot · no saved inbox

ChatsActive peer sessions appear below. No fabricated messages or contacts.

No server mailbox

Connect a second device

Current browser pilot: exchanging WebRTC signals manually. This is not the finished friend-and-contact workflow.

Disconnected

Caller creates an offer. Recipient pastes it and generates an answer. Caller pastes the answer. Both verify the DTLS fingerprint using a separate trusted channel.

Paste incoming offer / answer

My outgoing signal — send privately to the peer

Remote DTLS fingerprint:Not available

No peer connected.

Private session

Live only · not saved

G

New direct conversationConnect an authenticated peer to begin. No chat backup or offline delivery yet.

No messages yet. Establish the encrypted peer connection first.

Transport uses WebRTC encryption. Not Signal's Double Ratchet, verified contacts, offline delivery or independent audit. Peers may see connection metadata and IP addresses.

Encrypted offline message capsule

Send a protected message file through a channel of your choice. This is symmetric AES-256-GCM file encryption, not a Signal conversation or identity-verifying messenger.

Create encrypted message

Local only

Message Unique shared passphrase (16+ characters)

AES-256-GCM · 650,000 PBKDF2-SHA256 iterations · authenticated format.

Read encrypted message

No account required

Received .ghostmsg Shared passphrase

Decrypted text — never automatically copied

A wrong passphrase or modified capsule fails authentication.

Identity limitation: Anyone with the shared passphrase can create a capsule. This does not authenticate the sender, prevent phishing, hide the fact that a file was shared, or provide forward secrecy. For sensitive conversations, a verified cryptographic identity protocol and an independently reviewed messenger backend remain required.

Encrypted private Messenger notes

Saved locally · no server

Protect notes in this device's local encrypted archive. No contact, call or conversation is created. Browser storage may be removed by Android or by clearing site data.

Messenger note Archive passphrase (16+ characters)

No archive operation yet.

Authenticated note preview

GHOSTmessenger signed device identities

P-256 ECDSA · offline pilot

Create a locally encrypted sender signing key and a shareable public identity. Independently verify the public key fingerprint with your correspondent before trusting signed files. This is authenticating a pinned key, not proving a real-world name, hiding metadata, adding post-quantum protection or replacing a full messaging ratchet.

1 · Establish your identity

New private-key passphrase (16+ characters)

Store the private .ghostid file and its passphrase safely. Share only .ghostpub.

2 · Sign encrypted message

Encrypted .ghostmsg Your encrypted .ghostid Private key passphrase

Signing proves possession of a key, not verified personhood.

3 · Verify sender signature before decrypting

Received .ghostsigned Previously verified sender .ghostpub

Verification is only meaningful after out-of-band fingerprint confirmation.

Authenticated encrypted payload (read-only)

The signed message is still encrypted; use the message-capsule decryption tool above with the shared encryption passphrase.

Security gate: P-256 ECDSA is conventional public-key signing, not a post-quantum signature or forward-secret identity ratchet. A compromised or substituted trusted key can compromise attribution. Independent device-identity verification and protocol review remain required.

GHOSTmessenger · encrypted pinned contacts

Identity continuity · no phone number

Import a sender's .ghostpub and check the displayed fingerprint through an independent trusted channel. Only then pin it in your encrypted contact vault. Signed messages can be checked against the original saved identity, preventing silent acceptance of a substituted public key.

Pin a verified public key

Contact's .ghostpub

Fingerprint:

No public identity inspected. I independently verified every fingerprint group with the intended contact. Contact label Encrypt with an archive passphrase (16+ characters)

Verify later signed messages

Received .ghostsigned message Archive passphrase to unlock pinned key

Verified encrypted payload

No identity has been pinned or verified.

Trust boundary: No automatic contact discovery, no remote key transparency registry, and no proof of real-world identity. If a friend changes keys, the new key must be checked independently before you trust it. The pinned key is protected under your chosen passphrase and included in your user-exported encrypted portable backup.

GHOSTguard · link privacy check

Offline · no opening links

Paste suspicious link text from a message, phone transcript, or email. GHOST checks obvious syntax indicators locally without visiting the destination, resolving DNS, or sharing the text with a scanning provider.

Suspicious link or message text

No text analyzed.

GHOST / UNIFIED COMMUNICATIONS

GHOSTphone

One place to reach your owned mobile, VoIP, Wi-Fi and business numbers. GHOST currently hands off cellular/SMS to the device and supports manually paired browser audio; hosted telephony and number sync require authorized provisioning.

Portable phone contacts · GHOSTphone

Manual import · no account permissions

Import an exported UTF-8 vCard from another phone or contact service, deduplicate dialable numbers, and select one for the GHOSTphone dialer or SMS handoff. Names and numbers stay in page memory, are never uploaded, and are cleared on reload. This does not register a new telephone number, synchronize a CRM, or verify caller identity.

Select exported .vcf file (2 MB maximum)

No contact file imported.

Call or message

Device handoff

Phone number Route

Open dialer ↗Text with device ↗

These actions open the device dialer or SMS application. GHOST does not originate or intercept cellular calls or text messages.

Number integrations

◉Cellular · LTE / 5G / legacy GSM / CDMAAndroid dialer and default-SMS role where supported. Carrier controls the network.Device

◎Wi-Fi-only · VoIP · SIP / WebRTCPhone-number or SIP-trunk provisioning and signaling are required.Planned

▤Business · DID · CRMTwilio, Telnyx, PBX, HubSpot, Salesforce, Zoho and custom APIs are adapter targets.Planned

SIP application handoff

Open a SIP address with an installed compatible calling app. This does not sign in to, or operate, a SIP server.

SIP addressOpen SIP handler ↗

Requires an installed SIP-capable application and a provisioned account.

CRM activity export

Prepare a structured contact activity to copy into an authorized CRM. No CRM is connected; nothing is transmitted.

Activity note (optional)

Local export only · no synchronization.

GHOST peer audio

Manual WebRTC pilot

No active call

Pair two browsers in GHOSTmessenger first, then enable your microphone here.

Limits: This is not a replacement SIM, carrier dialer, emergency service, live CRM integration, phone-number host or Signal-grade calling. Browser audio needs manual peer pairing and usable NAT connectivity.

Encrypted private call note

No CRM connection

Export a protected note and destination number to a .ghostcall file. Nothing is stored or synced to a server.

Call note Export passphrase (16+ characters)

No note exported.

Encrypted private Phone notes

Saved locally · no server

Protect notes in this device's local encrypted archive. No contact, call or conversation is created. Browser storage may be removed by Android or by clearing site data.

Phone note Archive passphrase (16+ characters)

No archive operation yet.

Authenticated note preview

GHOST / UNIFIED MAIL

GHOSTmail

One inbox for every authorized identity, without exposing passwords to a browser form. Direct provider connectors need OAuth and a separately secured, deployed mail service; the local composer and import analysis work without them.

GHOSTmail▣ Unified inbox◇ Drafts➤ Sent☆ Starred▤ Archive

✉

Connect every mailbox

Provider adapters are queued for authorized OAuth or delegated access. No account credentials or messages are stored in GHOST today.

No mailboxes connected

Google / GmailOAuth · Gmail APIConnector backend required

Microsoft 365 / OutlookOAuth · Microsoft GraphConnector backend required

Other hosted mailIMAP / SMTP / JMAPSecure credential broker required

Encrypted mail / archivesApproved export / desktop bridgeNo direct Android Bridge shortcut

Compose in an installed mail app

Use the account already configured on your device; GHOST cannot read its inbox or send on your behalf.

RecipientSubjectMessage

Inspect a mail export locally

Select one .eml file up to 1 MB. GHOST checks envelope metadata locally; it will not upload the email, display its body or add it to a mailbox.

Local .eml export

No file analyzed.

Multi-message migration preflight

Offline · no account access

Analyze up to 25 local .eml messages (10 MB combined). Detect repeated Message-ID headers and basic import shape without displaying bodies or attachments.

Select .eml files

No files analyzed.

GHOSTmail encrypted local archive

Device only · no provider sync

Save individual .eml exports to an AES-256-GCM archive on this device. Each record is encrypted with its own random salt and nonce. Email account credentials, inbox messages, metadata and attachments are not retrieved from any provider. Browsers may evict this storage.

Select one .eml file (up to 4 MB) Archive passphrase (16+ characters)

No archive operations yet.

Decrypted text preview (never renders HTML)

GHOSTguard · suspicious-mail inspection

No network · no scripts executed

Inspect exported .eml messages for suspicious Reply-To domains, risky attachment filenames, deceptive URLs, remote-image tracking, or active HTML. This is a limited local heuristic, not antivirus, spam filtering or authenticated SPF/DKIM/DMARC verification.

Select up to 25 local .eml exports (10 MB total)

No mail analyzed or uploaded.

Security boundary: Imported mail requires sender verification, protected credentials, encryption keys, abuse and spam controls, migration reconciliation and verified restores. Connecting a provider does not automatically make standard SMTP email end-to-end encrypted.

GHOST / OWNED NETWORK PRIVACY

GHOSTvpn

A proprietary GHOST-controlled service with our own gateways, device enrollment and policies. Its audited packet encryption can use interoperable WireGuard primitives; proprietary orchestration must not be confused with inventing untested cryptography.

◇

GHOST NETWORK / TUNNEL STATUS

GHOST tunnel offline

No GHOST-owned gateway or verified native tunnel is provisioned on this device. We do not claim your traffic is protected by GHOST.

Native Android VPN · new APK required

The current APK does not include this engine; this button unlocks only in a future signed build that implements the native API.Independent gateway · native device tunnel · verified kill switch

GHOST network profiles

Select a target profile to see its requirements. These are design profiles, not active server locations.

FastDirect GHOST gateway · low latency PrivateOwned DNS · leak prevention Multi-hopMultiple independently routed gateways Work / SchoolScoped resources and split tunnel policies

Selected: Fast. Not available until the GHOST gateway and Android client are commissioned.

Deployment readiness

Browser network stateChecking…

GHOST-controlled gatewayNot provisioned

Native Android WireGuard engineCode prepared · APK unverified

Device identity & peer keysNot enrolled

DNS / IPv6 leak + kill switch validationNot tested

Release gate: WireGuard-class native transport, locked-down gateway, revocable keys, resilient routing, DNS/IP leak tests, always-on policy, independent review. No false Connect button.

GHOST VPN routing-policy analyzer

Redacted configs only

Review a non-secret WireGuard-style routing configuration for missing default IPv4/IPv6 and DNS directives. Never paste a private key, preshared key, API token or password. Input is cleared immediately after analysis and not uploaded.

Redacted configuration (no secrets)

Never paste real private keys.

DATA / DEVICE-SIDE PROTECTION

GHOSTdrive

Encrypt and decrypt a local file using Web Crypto. Files are never uploaded by this page. The encrypted download is portable; there is currently no GHOST-managed cloud storage or device restore.

Encrypt a file

Select up to 5 local files (20 MB each, 30 MB combined)New file passphrase (12+ characters)

Encryption runs only inside your browser.

Decrypt a GHOST file

Select .ghost fileFile passphrase

Incorrect passwords or modified ciphertext fail authentication.

Cryptographic restore drill

Read-only

Authenticate and decrypt a .ghost file entirely in memory, verify its encrypted header and display a SHA-256 checksum of the restored plaintext without creating another copy.

Encrypted .ghost file Original passphrase

No authenticated restore test run yet.

GHOSTdrive encrypted device vault

AES-256-GCM · device-only

Store encrypted files persistently in the browser's private local database. Filenames and file contents are encrypted. This is NOT cloud sync or a verified backup: clearing this app's data can erase the vault permanently.

File to protect (up to 4 MB) Archive passphrase (16+ characters)

No encrypted items opened.

Portable GHOSTsuite encrypted backup

User-controlled · cross-device

Export encrypted records across Mail, Messenger notes, pinned contacts, Phone notes and Drive. The default v2 bundle also encrypts record count, item types and metadata under a separate backup passphrase. It is not remote synchronization or a verified secondary copy until you export and successfully test a restoration.

Backup bundle passphrase (16+ characters; independent of individual vault passwords)

Restore encrypted backup on this device (.ghostbackup2 or legacy .ghostbackup)

No backup has been exported or restored.

Recovery policy: Keep both the backup bundle passphrase and each original item passphrase in a trusted recovery location. Legacy v1 exports are importable but disclose record counts/types; use the new v2 format for metadata confidentiality. Duplicate IDs are rejected. Test a second-device restore before erasing originals.

Format: GHOST file v1 · PBKDF2-SHA256 with 310,000 iterations · AES-256-GCM with unique 16-byte salt and 12-byte IV. No recovery escrow. A file download is not a verified backup; maintain an independent copy and restore-test it before deleting anything.

GHOST / MIGRATION

GHOSTswitch

Understand your data before you move it. The current tool analyzes local contact exports and identifies duplicates, without sending the file to a server or changing an existing account.

⇄

Move deliberately.
Keep control.

Local preflight checks are available today. Connected mail, Drive and calendar import workflows are not deployed.

LOCAL PREVIEW

Analyze a contacts export

Choose a .vcf / .vcard or .csv contacts file (up to 1 MB). Nothing is uploaded, saved to our servers, or migrated to your contacts.

Local contact file

Select a file to begin.

Preflight report

Your local contact summary appears here after analysis.

Migration boundary: Analysis is not import. No account sign-in, provider login, contact write, mail migration or cloud synchronization occurs. Keep the source export; verify a separate backup and test restore before deleting anything.

INDEPENDENT COMPETITOR INTELLIGENCE

Strengths. Weaknesses. Every field.

25 providers, 200 field-level assessments. Select a product to inspect its own capabilities, limitations, scoring rationale and source. Not a comparison against GHOST.

25Competitor products

200Strength / weakness audits

8Weighted metrics per product

PROVIDER PROFILE

Select provider

Analyst assessment of documented product maturity — not a laboratory security score.

—Official source ↗

Five-provider category matrix

Each field is rated 0–4. Open a product above for its individual strengths and weaknesses.

Eight-field provider scores
Rank	Provider	Total	Core	Crypto	Privacy	Integrations	UX	Reliability	Recovery	Assurance

Methodology: Scores are editorial estimates using official provider information; they are not measured VPN speed, uptime, messaging latency, call quality or cryptographic superiority. A weakness may be a tradeoff, limited support or evidence gap rather than a confirmed defect. Source dates and plan/platform limitations should be rechecked before purchase or deployment.