PHANTOM
Alpha 2 · Android AGPL-3.0 No phone number Validated vs TSPU DPI

An end-to-end encrypted messenger built to survive state-level surveillance and network censorship.

Open-source. No phone number, no email, no metadata harvesting. Engineered to keep working on hostile mobile networks where other messengers are restricted.

What it is

Privacy that holds under pressure.

PHANTOM is not another chat app with an encryption sticker. Every design decision assumes a hostile network and an adversary with state-level resources.

DESIGN PREVIEW
9:41●●●
MH
Maya Hertzog
● online
🔒End-to-end encrypted · ED25519 · @maya
Can you look over the contract draft? There's a clause on p.4 I'd like your read on.14:18
Section 4.2 — the liability clause — reads too broad. I'd flag it before signing.14:20 ✓✓
That's exactly what I was unsure about. Ask legal to revise?14:21
Yes. I'll draft a note this afternoon.14:22 ✓✓
Message

End-to-end encrypted

A custom Double Ratchet implementation over libsodium, with ED25519 identity keys generated on your device. The relay never sees plaintext.

Censorship-resistant

Multiple transport paths reach the network, including traffic that blends in with ordinary HTTPS. When one route is blocked, another takes over.

No identity required

No phone number, no email, no real name. Sealed-sender routing means the relay cannot build a graph of who talks to whom.

Fully open-source

Licensed AGPL-3.0. Every line is auditable — no closed components, no hidden telemetry, no trust-us black boxes.

Privacy modes

Three levels of exposure. You choose.

Each mode picks a different chain of transports to reach the network — trading latency for resistance. Ghost never silently downgrades: if it can't go through Tor, it fails visibly rather than exposing you.

Standard

Direct-first chain. Lowest latency for everyday use on open networks.

Private

Reality-first chain. Hides your source IP from the relay behind cover traffic.

Ghost

Tor-only chain. Never silently downgrades — fails visibly if Tor can't bootstrap.

Transport diversity

SEVERAL WAYS TO REACH THE NETWORK

Direct WSS

Encrypted WebSocket over TLS for normal conditions.

REALITY / Xray

Traffic indistinguishable from ordinary TLS. Validated through Russia's TSPU in production.

Tor (v3 onion)

Text-only emergency fallback for hostile networks. Does not carry calls.

REST fallback

Short-poll delivery when WebSocket frames are silently dropped.

Offline mesh

Peer-to-peer transport without infrastructure. Planned — not yet built.

Where the project stands

PHANTOM is in active development (Alpha 2), Android for now. Text messaging is reliable across the multi-transport stack, and the censorship-circumvention transport has been validated against TSPU in production. Voice notes work; voice calls are experimental. Group chats are partial. iOS, channels, and offline mesh are in the next stage of development. We ship a release only when the claim has been tested on real devices.

Public builds land at Beta — watch releases on GitHub →

See the full roadmap →
Support

If you'd like to help PHANTOM grow.

PHANTOM takes no venture capital and sells no user data — it's built by one developer. If the project is something you'd like to support, any contribution helps it keep moving forward.

Ways to donate Star on GitHub ↗