How can we secure your experience?

Open the app and generate a Ghost ID. Your identity is a key pair created on your device, so there is no phone number, email, or username to provide, and nothing to verify.

You add people by their Ghost ID, either by sharing your ID, scanning their QR code, or opening an invite link they sent you. Your address book is never uploaded.

Only if you switch it on. Phone discovery lives in Settings under Find me and is off by default. While it is off, no entry for you exists in the directory at all.

Yes, if you saved your Recovery Code. Install Ghost, sign in, enter the Recovery Code, and unlock with your PIN: your Ghost ID and contacts are restored. Your Recovery Code is shown when you create your account and can be viewed again any time in Settings.

Then that account cannot be restored. Your data is encrypted with keys that exist only on your device, so there is no master key or backup on our side that we could use to let you back in. Save your Recovery Code somewhere safe before you need it.

Open Settings, go to the Account section, and tap Delete Account. That erases the encrypted database and keys on your device and asks our relay to drop your account record. Full steps are on our Account Deletion page.

Yes. Messages, voice calls, and video calls are end-to-end encrypted, so our relay forwards data it cannot read and keeps no message history once a message is delivered.

Panic Mode is a second, decoy PIN you can set in Settings. Entering it at the unlock screen looks like a normal unlock but immediately erases the encrypted database, the encryption keys, and the key salt on that device, and asks the relay to purge your queued messages and push tokens. There is no confirmation and no undo, and it cannot recall messages already delivered to other people.

Yes. The app auto-locks after a period in the background, and Chat Lock can gate an individual chat behind your device PIN.

Yes. Messages carry a disappearing timer, set globally in Settings and overridable per chat. The timer travels with the message, so both sides expire it. Ghost also supports view-once photos.

Groups have Owner, Admin, and Member roles. Owners and admins manage membership and group settings. Invites go out over your encrypted connection to contacts you choose, not as public links, and the relay cannot read group names or member lists.

Yes. Voice and video calls work one to one and in groups, with mute, speaker, camera switching, and Bluetooth headset support built in. Group calls connect every participant directly to each other, so they are limited to a small number of people per call.

A wallet built into the app. You can top up, send and receive money, request payments, split a bill, and withdraw, without leaving your chats. See the Wallet page for details.

NPUSD is the currency your wallet balance is held in. However you fund the wallet, the balance is stored in NPUSD, which is designed to hold a 1:1 value with the U.S. Dollar.

No. The wallet is kept separate from messaging, so deleting chats or resetting the messaging side does not touch your balance or transaction history. Your wallet is protected by its own PIN, and every payment is confirmed before it is sent.