PHANTOM logo

About PHANTOM

The right to communicate, by design
Mission

Communication has become constant and essential — and at the same time increasingly restricted, filtered, and watched. PHANTOM is being built so that people can stay in contact and speak freely regardless of circumstances, limitations, or borders. Access to private communication should never depend on permission.

How it's built

Built assuming the network is hostile.

Messages are end-to-end encrypted with a custom Double Ratchet implementation over libsodium, using ED25519 identity keys generated on your device. A sealed-sender design keeps the relay from learning who is talking to whom.

To stay reachable under censorship, the app routes through several transports — including traffic that is indistinguishable from ordinary HTTPS — and falls back automatically when a route is blocked. Everything is open-source under AGPL-3.0.

The assumptions, adversaries, and out-of-scope cases are written down in full — read the threat model →

On-device keys

Identity keys never leave your phone.

No metadata graph

Sealed sender hides who talks to whom.

Routes around blocks

Multiple transports, automatic fallback.

Open & auditable

AGPL-3.0. No hidden components.

Who builds it

One developer. No investors. No compromise.

PHANTOM is built by a single independent developer, operating through Willen LLC (Wyoming, USA). It is not a startup chasing growth and takes no venture funding.

The project is driven by a simple conviction: that private, censorship-resistant communication is infrastructure people deserve to have — and that it should be open, auditable, and answerable to no one but its users.

See the roadmap → Support the project