GhostCode Messenger

GhostCode Messenger is a private messaging app designed for people who cannot afford leaks: journalists, lawyers, doctors, activists, executives and negotiators. Every message, voice note, photo, document and secure letter is encrypted end-to-end on your device before it leaves the phone. Not even we can read it.
Real post-quantum encryption, not marketing We use a hybrid v3 scheme that combines classical cryptography (ECDH P-256) with post-quantum cryptography (ML-KEM-768, NIST standard), reinforced with Signed Prekeys, One-Time Prekeys (OTPK) and Double Ratchet. This means that even if a "harvest now, decrypt later" attacker records your traffic today, they will not be able to decrypt it with a future quantum computer.
Private keys in secure hardware Your private keys never leave the Android Keystore / StrongBox of your device. They cannot be extracted, copied or exported, not even by us. Every session uses ephemeral keys and forward secrecy: compromising one message does not compromise the previous or the following ones.
Conversation Mask Activate the Mask on top of any chat and the app instantly replaces real names with decoy aliases and blurs the visible text. Perfect for reading in public, in front of a camera or during a border check. The mask is disabled only with your PIN — a quick glance at your screen reveals nothing useful.
Screenshot and screen recording protection While the app is open, Android blocks screenshots and system screen recording at the operating system level. The system itself denies the action and the app does not appear as a thumbnail in the recent-apps switcher, preventing accidental or malicious captures of sensitive conversations.
Voice notes with distorted voice Every voice note is processed locally before being encrypted: pitch shift, formant filtering and controlled noise that break biometric voice fingerprinting used by identification systems. The original audio is never stored or transmitted in the clear from your phone — only the distorted, end-to-end encrypted version travels through the network.
No phone number, no email required GhostCode Messenger does not ask for your phone number or your email to work. You create your identity with an internal alias and connect with your contacts through cryptographic tokens or QR codes. Zero metadata linked to your real identity.
Coercion protection
Panic PIN: enter a different PIN and the app hides all your data without deleting it, showing a clean session.
Auto-wipe on brute force: 3 failed attempts and the account self-destructs.
Root / jailbreak detection: the app locks itself on compromised devices.
Inactivity lock and forced re-authentication.
Secure Letter Send messages with delivery receipt, one-time reading and automatic self-destruction after being read. Ideal for credentials, contracts and one-shot confidential information.
Own secure keyboard Built-in on-screen keyboard that never leaves traces in the system clipboard or in third-party keyboard suggestions. Numeric mode for PINs and uppercase-forced mode for sensitive fields.
Encrypted offline cache Your messages remain available without connection through an encrypted local cache (AES-GCM over IndexedDB). Nothing is stored in the clear on disk, not even temporarily.
Key Transparency Log Every public key published by the system is anchored to an auditable transparency log. You can verify at any time that the key of your contact has not been silently replaced by an attacker or an operator.
Zero ads, zero trackers, zero unnecessary metadata No advertising, no analytics SDKs, no profiling. We only store the minimum required to route your encrypted messages.
Additional features
Encrypted groups with the same post-quantum protection.
Voice notes, images, videos and documents, all end-to-end encrypted.
Secure native notifications without leaking content on the lock screen.
Cryptographic fingerprint verification between contacts.