Privacy hardware · built on GrapheneOS

A phone that protects itself.

A Google Pixel, hardened with GrapheneOS and our own security layer, configured and delivered by us — so your data answers to you, and no one else.

// Encrypted at rest · hardware-bound keys · hardened by GrapheneOS · armed by us
Vault Phantom logo
// What it is

Three layers, one device.

We don't ask you to flash firmware or trust a black box. We start with hardware you know and build up from there — in the open, in plain terms.

01

Google Pixel

We start with Pixel hardware — the platform GrapheneOS is built to run on, with its hardware security module.

02

GrapheneOS

A hardened, de-Googled Android with file-based encryption bound to the Pixel’s security chip, tighter per-app permissions, and no tracking baked in.

03

Vault Phantom layer

Our security app and concierge setup add wipe-on-trigger defenses and turn on GrapheneOS's strongest protections for you.

// The hardened base

Encryption you don’t have to think about.

Before a single Vault Phantom feature loads, the phone is already one of the most hardened in the world — because it’s running GrapheneOS on a Pixel. We don’t build that. We make sure it’s switched on properly, and we tell you exactly what it does.

Encrypted at rest

Locked, your data is just noise.

GrapheneOS uses file-based encryption with keys bound to the Pixel’s secure element — the dedicated security chip that also guards the unlock screen. While the phone sits locked, your files, messages and photos stay encrypted at rest. There’s no software-only shortcut around it, and every profile gets its own keys.

Keys sealed in hardware

GrapheneOS

Encryption keys live in the Pixel’s secure element, not in plain software. A locked device gives up nothing, even to someone holding it.

Falls back to a locked state

GrapheneOS

Left idle for a window you set, the phone reboots and purges its encryption keys from memory — back to the “before first unlock” state that resists extraction tools.

Brute-force throttled in hardware

GrapheneOS

Wrong-guess limits are enforced by the secure element itself, not just the software — so the lock can’t be rushed by a machine guessing PINs.

Permissions you actually control

GrapheneOS

Revoke Network or Sensors access per app. Hand over a scoped slice of your storage or contacts instead of all of it. Apps get what you allow, nothing more.

De-Googled, no telemetry

GrapheneOS

No analytics or tracking baked into the OS. Google Play, if you want it at all, runs sandboxed like any other app — with no special privileges.

Hardened to the metal

GrapheneOS

A hardened memory allocator, memory tagging on supported Pixels, verified boot, and the option to switch the USB port off at a hardware level — exploit mitigations woven through the whole OS.

// These are GrapheneOS protections — open-source, independently audited, and not ours to claim. What we add is getting them configured correctly, proven on your actual device, and the two wipe defenses that are genuinely our own.

// The defenses

Six ways the phone can lock down — or erase.

Two are ours. The rest are GrapheneOS protections we configure and verify for you. We keep the line honest, because the people who buy this read the changelogs too.

Remote SMS Wipe

Phantom Core

A coded text from a trusted number — like ●●●●●●●● — erases the device instantly, wherever it is.

Our own. Set up with a contact you trust.

Dead Man's Switch

Phantom Core

If the phone is left with no connection for a window you choose, it erases. A blunt last resort for the highest-risk moments.

Our own. Long fuse by default to avoid false alarms.

Duress PIN

OS Layer

A second PIN that wipes the phone the moment it's entered — while looking exactly like a normal unlock.

GrapheneOS native. We guide the setup.

Auto-reboot

OS Layer

Left idle, the phone restarts itself back into a fully-encrypted, locked state — blocking extraction without destroying anything.

GrapheneOS native. We recommend a sensible timer.

Inactivity Wipe

OS Layer

If the phone isn't unlocked for a long stretch you set, it erases. Resets on every unlock, so normal use never trips it.

Built on GrapheneOS protections.

Brute-force Guard

OS Layer

After too many wrong unlock attempts in a row, the phone erases. Tuned to consecutive failures, not scattered typos.

Built on GrapheneOS protections.

// Every trigger performs an irreversible wipe. The device is encrypted at rest by GrapheneOS.

// The app

See it running on the device.

The Vault Phantom layer, on a real phone. Every defense in one place — armed, and clear about what's ours and what's GrapheneOS underneath.

// Vault Phantom on a Pixel 8a

The triggers we built

Phantom Core

Remote SMS wipe and the dead man's switch — our own defenses, armed and managed from this screen.

The OS protections we turn on

OS Layer

Duress PIN, auto-reboot, inactivity and brute-force wipes — GrapheneOS protections we switch on and verify for you.

Status you can trust

Honest by design

The screen shows what's actually armed — and says so plainly when something can only be confirmed by you, like the GrapheneOS duress PIN.

// Who it's for

Built for people whose data is a target.

Professionals with a duty to protect

  • Lawyers holding privileged client files
  • Doctors and clinicians with patient records
  • Executives carrying commercially sensitive work
  • Anyone bound by confidentiality, on the move

People at genuine risk

  • Journalists protecting sources
  • Activists and organisers
  • Public figures and their households
  • Anyone who travels through hostile checkpoints
// Concierge

The setup is the product.

Anyone can read a guide. What you're really buying is a device that arrives ready, configured by someone who does this all day — and stays reachable after.

Configured

Each phone is flashed, hardened, and set up by hand before it ships — nothing left half-done.

Verified

We test the defenses on the device so you're not trusting a toggle that was never proven.

Supported

We walk you through the GrapheneOS-native protections and stay reachable as your needs change.

// Devices

Start sensible, step up as you need.

We build on current, supported Pixel hardware so GrapheneOS keeps receiving updates for the life of the device.

Entry

Pixel 8a

The accessible way in — full GrapheneOS support and every Vault Phantom defense, on capable, current hardware.

Step up

Pixel a-series (9 / 10)

More headroom and longer support windows for those who want the latest supported platform.

// How it differs

Why not just do it yourself?

You can. Here's honestly where Vault Phantom earns its place.

The alternative
What you take on
Flash it yourself
Free, but you own every configuration choice, every update, and every mistake — with no one to call when a wipe setting is wrong.
A modified-hardware phone
Physical tweaks you can't easily verify, often at a steep premium, with the software left generic.
A bundle of privacy apps
Apps on an ordinary phone don't change what the operating system underneath is doing.
Vault Phantom
Our own wipe defenses on a properly hardened base, configured and tested for you, with a person behind it — not a download.
// Questions

Straight answers.

Are you affiliated with GrapheneOS? +

No. Vault Phantom is built on top of GrapheneOS, but we are independent and not affiliated with, endorsed by, or partnered with the GrapheneOS project. We point you to their native features and configure them for you.

Could a wipe erase my data by accident? +

The triggers are powerful, so we ship them with conservative defaults and long thresholds, and we set them up to match your actual needs. Nothing aggressive is turned on without you understanding it first.

Is this on the Play Store? +

No. This isn't an app you download — it's a complete device we configure and deliver. The security software is part of that setup.

Is this legal to own and use? +

Yes. Vault Phantom is for protecting your own lawful personal and professional data. Understand your local laws before relying on any wipe feature in a specific situation, such as at a border.

// Discreet · personal · no pressure

Tell us what you're protecting.

Every setup starts with a quiet conversation about your situation. No accounts, no sales funnel — just a person who'll help you get the right device, configured the right way.

Message us on TikTok
// Reach us at @vault.phantom — a private channel is coming soon