Most messaging apps ask for a phone number before you can say hello. Some ask for an email too. A few even want your real name. Phantom Chat asks for none of that. Pick a username, tap create, and you’re in. That’s the entire signup process.
Built by Curtis Tunaley, a solo developer out of Western Australia, Phantom Chat is an iOS messenger that treats anonymity as a hard requirement, not a checkbox feature. It’s currently in public beta on TestFlight, limited to 1,000 testers. But what’s already inside is worth paying attention to, especially the encryption architecture.
This isn’t just another app with a privacy badge slapped on the App Store listing. The technical decisions here are specific, documented, and unusually transparent for a beta product.
Key Features of Phantom Chat
Post-Quantum Encryption Baked In From Day One
Phantom Chat uses a hybrid of the Signal Protocol and NIST’s post-quantum standard, specifically ML-KEM-768 (FIPS 203). That means every conversation is protected by both classical encryption (Curve25519) and a quantum-resistant algorithm simultaneously. If either holds up over the next 20 years, your messages stay private. Signal only added post-quantum support in 2024. Phantom Chat ships with it from the very first beta build.
Hardware-Bound Identity Keys via the Secure Enclave
Your long-term identity key is generated inside the iPhone’s Secure Enclave, a tamper-resistant chip that sits isolated from iOS itself. The private key cannot be extracted, even by malware or a jailbroken device. This is the same chip Apple uses for Face ID and Apple Pay. It’s a meaningful architectural choice, not a marketing talking point.
Invite-Code-Only Contact Discovery
There’s no public directory. No one can search for your username. To connect with someone, you generate a one-shot QR code or paste-link that expires in 24 hours and works exactly once. It’s a friction-by-design approach that keeps your contact list invisible to anyone who didn’t receive a direct invite from you.
Emergency Account Reset with Four Quick Methods
You can wipe your account instantly using a shake gesture, a Lock Screen widget, a separate reset PIN or you set a self destruct timer up to 24 hours which will trigger the deletion. The deletion uses a secure multi-pass overwrite, so the data can’t be recovered after the fact. This kind of quick-escape mechanism is rare in consumer messaging apps.
A Real-World Scenario: Maya at 11 PM Before a Work Trip
Maya is a freelance journalist who covers sensitive political stories. At 11:15 PM the night before flying to cover a protest, she needed to share background documents with a source who had specifically asked not to use Signal, since they were concerned about the phone number registration requirement.
She downloaded Phantom Chat through the TestFlight link, created an account using the username “nightowl”, and was fully set up within about two minutes. No verification SMS. No email confirmation. She generated a one-shot invite code, sent it through a separate encrypted channel, and her source joined the conversation. By 11:40 PM, they had exchanged three documents and two voice notes, entirely without either party revealing any personal identifiers to the app or its servers.
Maya noted one thing specifically: the onboarding walk-through explains the encryption clearly, with plain-language descriptions of what ML-KEM-768 actually does. It didn’t feel like a privacy lecture. It felt like a product that respects its users enough to be honest about how it works.
How Signing Up and Sending Your First Message Works
Step 1: Choose a Username
Open the app (iOS 17+ required, currently TestFlight only). You’ll see a single field: pick a username. No phone number field. No email field. Tick the Terms of Service checkbox and tap “Create Account.”
Step 2: Walk Through the Onboarding Screens
A short onboarding flow explains each privacy feature: encryption, invite codes, group chat, emergency reset. You can set each one up or skip it. The progress indicator shows where you are in the process, typically around 7 to 10 short screens.
Step 3: Generate an Invite Code and Start Chatting
To contact someone, generate a QR code or copy a paste-link from within the app. Send it however you like. Once they join via that code (it works once, expires in 24 hours), the conversation thread opens and encryption starts immediately. You can reset the keys in key management with one on one chats.
Step 4: Join or Create a Group
Group chats work through a similar code system. Creators set a participant cap (up to 500) and an expiry window for the invite code. It keeps groups intentional rather than open to anyone who stumbles across a link.
Pricing
The beta is free. When the app is released on the App Store there will be a 14 day trial no credit card required. After the trial period, Phantom Chat offers two paid tiers:
- Personal: US$14.99 per month
- Annual plan: US$119 per year (roughly US$9.92/month)
- The will also be 3 waves of founder pricing: This is to pay for the server infrastructure needed for Phantom Chat to be self hosted and get off Googles servers so the app will be more secure.
There’s no free tier listed beyond the trial, so if you want to evaluate it properly, the 14-day window is your window to do it.
Who Should Try Phantom Chat
If you’re a journalist, activist, lawyer, or anyone who regularly communicates with people who have good reasons to stay anonymous, this beta is worth your time. It’s also worth watching if you’re simply tired of messaging apps that treat your phone number as a required credential. Phantom Chat is still in beta and limited to 1,000 testers, so now is the time to get in before that cap fills. You can join at veilusdigital.co and see all the information you need about the app and how it works and grab the TestFlight link from there.
