Communication that leaves no trace. End-to-end encrypted, peer-to-peer direct. Nothing to seize, because there is no server holding it.
Most messengers protect the message and keep the map. GhostLink removes the map entirely.
Messages travel straight between devices over a direct encrypted link. There is no inbox in the middle to subpoena, breach, or shut down — because there is no middle.
Direct P2P meshAES-256-GCM over an ECDH P-256 key exchange, with keys generated and held on your device. Ciphertext is authenticated — tampering is detected, not quietly decrypted.
AES-256-GCM · ECDH P-256No account, no phone number, no email. Nothing records who spoke to whom or when, because nothing is in a position to watch. Your identity is a key you generate — not a profile we keep.
Zero-knowledge identityThe full feature list and the threat model are further down this page.
The desktop and web app, connected to a peer over the mesh — hover any message to peek at its ciphertext.
GhostLink creates a private key on your device the first time it runs. It never leaves. There is no account because your key is your identity.
Exchange a short invite code or QR with the person you want to talk to — in person, over any channel. The key exchange (ECDH P-256) happens between your devices alone.
Every message is AES-256-GCM encrypted and authenticated, then sent peer-to-peer. Close the app and the conversation exists only where you both chose to keep it.
Want the full walkthrough? Read the step-by-step setup guide.
A simplified scramble, running entirely in your browser. Type a message, encrypt it, and see what a wiretap would actually read.
Demo uses a character-level scramble for illustration. GhostLink itself uses real AES-256-GCM — the same class of cipher protecting banking and government systems.
Nine capabilities, all peer-to-peer, all encrypted on your device before anything moves.
Messages encrypted before they leave your device. Blockchain-chained for tamper detection.
E2E · tamper-evidentFiles split into encrypted 64KB chunks sent P2P. SHA-256 verified on arrival. Up to 2GB with Pro.
64KB chunks · SHA-256End-to-end encrypted calls via WebRTC. No call logs. No recording. No trace.
WebRTC SRTPShare your screen securely with connected peers. Encrypted stream, no third-party relay.
Encrypted streamSet messages to vanish in 30s, 60s, or 5 minutes. Cryptographically deleted — not just hidden.
30s · 60s · 5minYour 12-word phrase recovers everything on any device. Backed up across peers, not servers.
BIP39 · 12 wordsEvery conversation is a SHA-256 linked chain. Open the explorer and verify any message yourself.
SHA-256 chainShared encrypted vault for your team. One key, all members, zero server.
Shared vaultDuress PIN wipes everything silently. Nothing left. Not even a trace.
Duress PINWe don't ask you to trust us. The math does it.
| What | How |
|---|---|
| Encryption | AES-256-GCM |
| Key Exchange | ECDH P-256 |
| Identity | BIP39 12-word seed phrase |
| Integrity | SHA-256 blockchain chain |
| Key Backup | Shamir's Secret Sharing |
| Key Recovery | PBKDF2 100,000 iterations |
| Calls | WebRTC SRTP |
| Storage | Encrypted localStorage |
Nothing. There is no server. There is no us in the middle. Zero.
Nothing. We hold no keys, no messages, no metadata, no user records. There is nothing to hand over.
GhostLink is open source under GPL-3.0. Read the code, audit it, fork it — privacy tools must be transparent, and GPL-3.0 means no one can ever take GhostLink private.
View source on GitHub → Mirrored on GitLab →Free and open source under GPL-3.0. No account, no email, no payment details — on any platform.
Runs in the browser. Nothing to install, nothing left behind.
Windows 10/11, macOS 11 and later, and Linux builds.
Web: Chrome 89+, Firefox 90+, Safari 15+, Edge 89+ · Requires WebRTC, Web Crypto API and localStorage.
Platform builds, release notes and checksums ship with every release on GitHub.
The core app is free forever. Paid tiers fund development — no subscriptions platform, no card on file, keys delivered by email.
All licenses delivered as activation keys via email. No subscription platform. No credit card stored anywhere. Payment accepted in BTC, ETH, USDT, and other major cryptocurrencies.
Yes. The core app is free forever. Pro adds power features for users who need them.
Your data cannot be recovered without it. This is by design — no one can recover it for you, including us. Write it down, store it safely. Consider distributing Shamir fragments to trusted peers.
There is nothing to shut down. GhostLink has no central server. Every user runs their own node. Even if our website goes down, the app keeps working.
GhostLink does not require a phone number, email, or any personal information. Your identity is your cryptographic key pair — nothing else.
No. Messages are encrypted on your device before sending. We have no server, no keys, and no way to read anything.
First connection uses QR codes or invite strings — share out of band (Signal, email, in person). Reconnection uses cached peer info automatically.
Messages queue locally until the peer reconnects. Queue auto-clears after 24 hours.
Yes. End-to-end encryption is legal in most countries. GhostLink is a general purpose communication tool. Users are responsible for complying with local laws.
Free and open source, GPL-3.0. No account required — ever.
GhostLink collects no personal data whatsoever. We have no servers. We have no database. We cannot collect data even if we wanted to.
All core state and sensitive configuration parameters remain strictly on your physical hardware storage:
None of this ever leaves your device except as encrypted fragments distributed to your own chosen peers.
Messages travel directly between devices using WebRTC connections. The signaling server (used only for initial connection setup) sees only metadata associated with the handshake (timing and IP addresses). It never sees message content, identities, or keys.
A minimal WebSocket relay assists with the initial WebRTC handshake. It holds no logs or data between sessions. All messages routed through the signaling backend are connection setup signals only — never chat content.
Your 12-word seed phrase is generated locally. We never see it. We cannot recover it. You are solely responsible for keeping it safe.
GhostLink's source code is public under the GPL-3.0 license. Anyone can verify these claims by reading and compiling the code independently.
We will post any policy modifications directly on the GitHub repository. Continued use of the service constitutes acceptance of the current policy terms.
ghostlinkweb@proton.me
By downloading, running, or accessing GhostLink, you agree to be bound by these terms.
GhostLink is a peer-to-peer encrypted communication tool. It is provided as-is under the GNU General Public License v3 (GPL-3.0).
You are solely responsible for:
We provide the tool; you decide how to use it.
Because of our zero-knowledge P2P architecture, we cannot:
Do not use GhostLink for:
Violation of these restrictions may result in the revocation of Pro licenses.
Pro licenses are non-transferable between people and are device-bound. If the application does not work as described, refunds can be requested within 7 days of purchase. We reserve the right to revoke licenses used for prohibited purposes.
GHOSTLINK IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. WE ARE NOT LIABLE FOR DATA LOSS, HARDWARE LOSS, OR CORRUPTION OF PRIVATE CONFIGURATION VALUES.
GhostLink is GPL-3.0. Your rights under that license are separate from and supersede any limitations in these Terms of Service.
These terms are governed by applicable law. Any dispute shall be resolved through negotiation first.
ghostlinkweb@proton.me