Request to order

Your keys never leave your phone.

White Phone puts every private key, every signature, and every message on hardware you hold — not a server, not a cloud, not anyone else's computer.

See how it works

The problem with "trust us"

Most wallets, password managers, and messaging apps ask you to trust a company's server with material that, if it's leaked, breached, or subpoenaed, is gone for good. Custodial key storage, cloud key escrow, phone-number-linked messaging accounts — every one of these is a promise, not a guarantee.

White Phone removes the promise. Your keys are generated on the device you're holding, and there's no server that could leak them — because there's nothing on it to leak.

How it works

Two things run on the device: a signing agent and a messenger. Neither one puts your keys anywhere but on the phone.

KeyMaster — SSH, GPG, and Nostr signing

  • Your SSH, GPG, and Nostr private keys are generated on the phone and stay there.
  • When your laptop needs a signature, the request goes out over a relay you control to the phone — the key itself never crosses the wire, only the request and the signed result do.
  • You approve or deny each request with a tap.
  • Bridges standard ssh-agent and gpg-agent sockets, so tools that already talk to those agents keep working unchanged.
  • Open source, GPL-3.0.

White Noise — encrypted messaging

  • Group and one-to-one messaging built on MLS (via the Marmot protocol) carried over Nostr relays — forward secrecy and post-compromise security, no phone number, no central server, no account anyone can freeze or seize.
  • Every secret — your identity key, your messaging keys — lives in one password-encrypted vault (XChaCha20-Poly1305, keys derived with Argon2id). Nothing sits in a keyring or in plaintext on disk.
  • Open source, AGPL-3.0.
Request to order

Verify it yourself

We'd rather you check than take our word for it.

  • Open source. Read the code, build it yourself, or have someone you trust review it.
  • No backdoor. There's no remote access point to put one in — keys and messages never reach a server we operate.
  • No recovery. This is a deliberate design constraint, not an oversight — see the FAQ below.

Built for two kinds of exposure

For individuals holding real crypto

Sign transactions without ever exposing the signing key to an internet-connected computer. Your SSH key, your GPG key, your Nostr identity: generated once, on the phone, and never copied anywhere else.

Request to order

For companies protecting information they can't afford to leak

Give your team hardware-backed signing for SSH and GPG without operating your own HSM. Deploy across a team and keep every signing key off every laptop.

Talk to sales

FAQ

What happens if I lose the phone?

You lose what's on it — the same way you would with a hardware wallet or a security key. That's the trade-off behind "no recovery": nothing recoverable also means nothing stealable from a server. Back up your seed phrase and vault backup separately, the same way you would with any hardware key.

Do you hold a backdoor or recovery key?

No. We don't hold a copy of your keys, and we can't produce one if asked — there's nothing on our end to hand over.

Can I use it with my existing SSH/GPG setup?

Yes. KeyMaster bridges standard ssh-agent and gpg-agent sockets, so tools that already talk to those agents keep working without changes.

What if I'm buying for a team, not myself?

Use the enterprise option in the request form below, or reach out directly — companies typically buy through procurement rather than a one-off order, and we're set up to work that way.

Request to order

There's no checkout on this page yet — submit your details and we'll follow up directly with pricing and lead time.