Prizrak

Messaging that can't be
read or blocked

Prizrak is a decentralized messenger with end-to-end encryption and a transport invisible to DPI. No phone number, no central server, no surveillance.

🔒 E2E Double Ratchet + MLS 🌐 Federation with no center 🛡 Built-in VPN, two hops 🥷 Stealth, looks like HTTPS 👤 No phone number
Three pillars

What Prizrak stands on

Three principles everything else grows from. None of them can be switched off on demand — they are built into the architecture itself.

🌐

Federation with no center

There is no main server that can be seized or blocked. Anyone can run their own server on their own domain in a couple of minutes — and their users instantly talk to everyone else. Like email: many servers, one network.

🔒

End-to-end encryption

The server is a dumb relay of sealed envelopes. No one can read your messages — not the server owner, not your provider, not whoever seizes the server. Only the participants hold the keys. Every message gets its own one-time key (forward secrecy).

🥷

Invisible to DPI

Traffic and calls look like an ordinary visit to a major website over HTTPS. There is nothing for censorship gear to fingerprint: on the wire it's real TLS to a real domain. If a censor probes the server, it sees a harmless decoy page.

For the user

How it works

On the surface — an ordinary messenger: chats, calls, files. Underneath — cryptography that keeps your conversation out of everyone's reach but your contact's.

Install the app

Download the client and pick a name like you:your-server. No phone number, no email.

Keys are born on your device

Your cryptographic "passport" is created right on your device. The private key never leaves your phone.

Message anyone

On your own server or someone else's domain — messages travel directly between servers, like letters.

Call in stealth

Voice and video ride inside "real HTTPS". To the network it's indistinguishable from ordinary web browsing.

Threat model

What it protects against

We're honest about what we can and can't do. The goal is to make surveillance and blocking disproportionately expensive for the adversary — not to promise magic.

  • A server owner, or a seized server — sees only metadata and ciphertext. No content.
  • Your ISP and censorship gear — see traffic indistinguishable from HTTPS to a live site.
  • Active probing — the server hands the censor a plausible decoy page.
  • Key substitution — prekeys are signed by your passport; fingerprints are verified via QR.
AdversaryWhat they seeProtection
Server / seizuremetadata + ciphertextE2E, forward secrecy
ISP / censorship geartraffic on the wirelooks like HTTPS
Active censorprobes the serverdecoy page
MITM during exchangetries to substitutesignature + safety number
Device compromisecurrent keysself-healing ratchet
Alice
Client🔑 keys
servera.org
Bob
Client🔑 keys
serverb.org
sealed envelope · if the path is cut → the hidden-node network 👻
(nodes never see the content)
Resistance to blocking

The hidden-node network

If the direct link between two servers is cut, the envelope travels through intermediate "hidden nodes" — encrypted store-and-forward vaults that can never read what passes through them.

  • Data is spread across several nodes with redundancy — like a fault-tolerant storage system.
  • A node goes down — data is automatically topped up on a live one. It comes back — the excess is removed.
  • The recipient's address is a "blind box": the node knows neither who it's from nor who it's for.
  • Lists of servers and nodes propagate through the network itself — with no static configs that are easy to block.
Run your own node →
Built-in VPN

Prizrak VPN

Getting around a messenger block isn't always enough — sometimes the whole internet is closed. So Prizrak can route all of your device's traffic through itself. No configs: pay in ghosts, tap a country, and you're under a different IP — over the same stealth protocol as the messenger.

  • Two hops. Phone → a relay closer to you → an exit abroad → the internet. Your provider sees only an encrypted stream; sites see the exit country's IP.
  • The "Shadow" protocol. Noise + ChaCha20-Poly1305: a featureless stream on the wire, with nothing to fingerprint or block by DPI.
  • Pay in ghosts. The same 👻 wallet as the messenger. Tap a country and traffic flows through it; the country switches on the fly.
  • WireGuard-grade resilience. Holds the connection for days, comes back up after a reboot and reconnects when the network changes. Up to 3 devices per subscription.
  • On the same nodes. Exits and relays are volunteer network nodes; operators earn ghost donations, just like hidden-node hosts.
🛡 Prizrak VPN for your computer → Become a network node →
📱 Phone
"Shadow" stealth tunnel ↓
Relaycloser to you — faster
second hop ↓
Exit (abroad)your "visible" IP
↓
🌐 Internet
the provider sees only the stream to the relay — not the site
Download

Install Prizrak

Start with the app. Want more? Run your own server or a hidden node and strengthen the network for everyone.

The app

Client 📱💻

A messenger for Android, Windows, macOS and Linux. Chats, voice and video calls, files, the 👻 wallet and a built-in VPN — all end-to-end encrypted.

Download the client
Your own server

Homeserver 🌐

Bring Prizrak up on your own domain in a couple of minutes. Your users, your rules, full federation with the network.

Deploy a server
👻 For a donation

Hidden node

Give a little disk and traffic — help route around blocks. Node operators receive donations in ghosts.

Become a node
Questions

Frequently asked

Is it true no one can read my messages?

Messages are encrypted on the sender's device and decrypted only on the recipient's (end-to-end encryption). The server sees only an encrypted envelope and the "who→whom" route. Even if the server is seized, the message content can't be recovered — and thanks to forward secrecy, neither can the history.

How is this better than an ordinary messenger?

There's no single center that can be blocked or forced to hand over data. There's no tie to a phone number. The transport is designed to be indistinguishable from ordinary HTTPS, so it's hard to block by DPI. And you can run the whole infrastructure yourself.

Do I need a phone number?

No. Your identifier is a name like you:your-server plus a cryptographic key created right on your device. Neither a phone nor an email is required.

What is a "hidden node" and why does it matter?

It's an intermediate encrypted vault that lets messages get through even when the direct link between servers is cut. The node never sees the content. Anyone can run one — and earn ghost donations from the community for it.

How does the built-in VPN work?

Prizrak VPN routes all of your device's traffic through the network in two hops: phone → an intermediate relay → an exit node abroad → the internet. The connection is encrypted with the "Shadow" stealth protocol (Noise + ChaCha20-Poly1305), so on the wire it looks like a featureless stream and isn't fingerprinted by DPI. You pay in ghosts (the same wallet as the messenger), pick the exit country with a tap, and switch it on the fly. The VPN holds the connection for days and comes back up after a reboot.

How is the VPN different from the messenger's stealth transport?

The stealth transport masks the traffic of the messenger itself — so chats and calls keep working even when they're blocked. The VPN routes all of your device's traffic through Prizrak — your browser and any app — for when the whole internet is closed, not just one service. Technically both use the same stealth protocol.

Is it legal?

Prizrak is an open-source tool for privacy and freedom of communication. The legality of censorship-circumvention tools varies by country; complying with the law that applies to you is your responsibility. We provide the technology — how you use it is up to you.

Is the project production-ready?

Prizrak is under active development. The core — federation, end-to-end encryption, stealth transport, calls and the hidden-node network — runs on live code. The cryptography is built on proven libraries; an independent audit is recommended before high-stakes use.

Take back your privacy

Download Prizrak and communicate freely — no surveillance, no phone number, no borders.