Ghost Phone Getting Started Guide

Table of Contents

Note: the content below used to be broken up into an online guide and a PDF that was printed and enclosed in all phones and tablets ordered. We have consolidated and updated the 2 guides, and all content found within both, into a single post below. We have also drastically shortened the Quick Start Guide that is enclosed w/ each phone and tablet shipped.

Welcome to your comprehensive guide for getting started with your new Ghost Phone. This guide provides you with everything you need to know to get started and make the most of your device’s privacy and security features.

The time it will take to get you up and running on your new device depends entirely on: how many accounts and applications you currently use, how much data you want/need to migrate from your current device to this new device, and how quickly you can learn some of the core privacy/security concepts as well as the functionality of the device itself.

Although this may seem complicated at first, I can promise you, YOU GOT THIS! … and even if things get tough, we’ll be here to help!

1. Introduction & Purpose

This guide is designed to facilitate your initial setup and familiarize you with your newly acquired secure communication device. We strongly advise reviewing this guide in its entirety, as it offers indispensable step-by-step instructions, valuable tips, and a comprehensive overview of utilizing your phone effectively.

We have a wealth of additional resources available online to help with setup and troubleshooting:

2. Pre-Setup Planning

Service Provider Options

The Ghost Phone is carrier agnostic, meaning it works with any carrier in the USA. You have several options:

Option 1: Keep Your Existing Number and Provider

Simply swap your existing SIM card into the new device while it’s powered down, then power it on. Your carrier will typically send a notification confirming the new device activation. If you don’t receive this notification, contact your provider as this could indicate a security concern.

iPhone users: You’ll need to deactivate iMessage and remove your phone number from iCloud to ensure proper message routing. We recommend following the steps outlined at this guide when ready to fully transition.

Option 2: New Number from Current or New Provider

Our customers frequently use Mobile Virtual Network Operators (MVNOs), which are resellers of AT&T, T-Mobile, and Verizon services. Recommended MVNOs include:

PureTalk – Inexpensive with nationwide coverage
efani – Great if you need advanced SIM card protection
Patriot Mobile – Reseller of all 3 major carriers

To learn more about what a MVNO is and why this is important for your privacy, please read our article on Can We Really Go Ghost w/ Our Devices?

Option 3: VoIP Provider

Use data-only plans or Wi-Fi with services like:

App Inventory & Assessment

Before proceeding, take inventory of:

Essential applications you need
Login credentials for each service
Which services can be accessed via browser instead of apps
Alternative FOSS (Free and Open Source Software) options for your current apps

3. Understanding Your Ghost Phone

What is GrapheneOS?

Your Ghost Phone comes equipped with GrapheneOS, an Android-based operating system that prioritizes privacy, security, and open-source principles. With GrapheneOS, your device is protected against tracking and spying attempts from large technology companies and other third parties. To learn more, visit grapheneos.org.

Navigation System Options

By default, your Ghost Phone is set up to use the “3 Button Navigation” system. You can change this to gesture navigation if you prefer. To modify this setting, go to Settings > System > Gestures > System navigation. You can also find this option in Settings > Accessibility > System controls > System navigation.

Gesture Navigation:

Home screen: Swipe up from bottom and release
Recent apps: Swipe up from bottom and hold
Back: Swipe from left or right edge
Switch apps: Swipe left/right on navigation bar
App drawer: Swipe up from anywhere (except navigation bar)

3-Button Navigation:

Uses three buttons at screen bottom: Back (left), Home (center), Recent Apps (right)
Most recent app appears on right side in app list
Swipe left to see older apps in history

Basic Navigation Videos

Quick App Store Tutorial

Display Adjustment Tutorial

4. Initial Setup Process

First Boot Instructions

Power on your phone using the colored button on the right side (2-3 second press).
You’ll see a warning about “loading a different operating system” – this is normal.
The Google logo will appear during bootloader process – this is just part of the hardware startup.
When the GrapheneOS start screen appears, you’re ready for basic setup.

Basic Configuration

Language: Settings > System > Languages & input > Languages
Time and Date: Settings > System > Date & time
Wi-Fi: Swipe down > Internet > Select your network

Special Notes

Wi-Fi Considerations:

Wi-Fi automatically toggles on at power-up
Phone will auto-connect to known networks (home/workplace)
We recommend keeping Wi-Fi toggle off to avoid automatically joining networks
Wi-Fi scanning activates when toggle is on – consider privacy implications
VPN can provide additional protection when using Wi-Fi

SIM Card Setup:

SIM installation is optional if you have Wi-Fi access
For cellular data, insert SIM before or during setup
New SIMs may require carrier registration
Data charges may apply based on your plan

Security Features:

Location Services: Disabled by default – enable per app as needed
Security Setup: Configure at least one security method (fingerprint, PIN, or password)
PIN Scrambling: Randomizes keypad numbers for enhanced security
- Enable at Settings > Security > Scramble PIN input layout
- Prevents observation of PIN patterns
Screen Lock Options:
- Go to Settings > Security > Screen lock
- Set your preferred login PIN/Password
- Consider disabling camera access from lock screen

Privacy Features:

Default settings prioritize privacy
Location access requires explicit permission per app
Review all app permissions carefully during setup
Consider using app sandboxing for additional security

5. Detailed Settings Configuration

Network and Internet Settings

Data Saver: If you have limited data, go to Settings > Network & Internet > Data Saver and toggle it on. Note that this may slow down some apps, so only use if necessary.
VPN Configuration: Found under Network & Internet settings – detailed setup covered in VPN section

Battery Settings

Battery percentage is displayed in the notification bar by default
To modify: Settings > Battery > Battery Percentage
Consider adjusting battery optimization settings for critical apps

Sound Configuration

Adjust ring and notification volume: Settings > Sound > Ring and notification volume
Default recommendation: Set to half volume

Display Settings

Adaptive Brightness: Settings > Display > Adaptive brightness (Recommended: ON)
Lock Screen Privacy: Settings > Display > Lock screen > Privacy > “Don’t show notifications at all”
Screen Wake Settings:
- Disable tap to check: Settings > Display > Lock screen > Tap to check phone (OFF)
- Enable double line clock: Settings > Display > Lock screen > Double Line Clock (ON)
- Disable lift to wake: Settings > Display > Lock screen > Lift to check phone (OFF)
- Disable wake for notifications: Settings > Display > Lock screen > Wake screen for notifications (OFF)
Screen Timeout: Settings > Display > Screen timeout (Recommended: 2 minutes)
Night Light: Settings > Display > Night Light (ON, customize schedule)
Auto-rotate: Settings > Display > Auto-rotate screen (Enable as needed)
Touch Sensitivity: If using thick screen protector, enable Settings > Display > Increase touch sensitivity

Security Settings

These security settings are crucial for maintaining your device’s privacy and security:

Essential Security Configurations:

Screen Lock Setup:
- Go to Settings > Security > Screen lock
- Set up your preferred login PIN/Password
- Disable camera access from lock screen (Settings > Security > Screen lock camera access > OFF)
PIN Scrambling:
- Go to Settings > Security > PIN scrambling
- Toggle ON to randomize keypad number positions
- This prevents others from guessing your PIN by observing your finger patterns
- Numbers will be in different positions each time you unlock
Secure Boot Verification:
- Verify boot message on startup is normal
- GrapheneOS warning message is expected

Keyboard Settings

Path: Settings > System > Languages & input > On-screen keyboard > GrapheneOS keyboard
Recommended settings:
- Select English (US)
- Disable “Vibrate on keypress”
- Choose “Material Dark” theme
- Enable personalized suggestions

6. Navigation & Control Methods

Default Navigation System

Your Ghost Phone comes configured with “3 Button Navigation” by default. You can change this based on your preference:

3-Button Navigation System

Back button (left triangle)
Home button (center circle)
Recent Apps (right square)
- Most recent apps appear on right side in app switcher

Gesture Navigation Option

To switch to gesture navigation: Settings > System > Gestures > System navigation

Home: Swipe up from bottom and release
Recent apps: Swipe up and hold
Back: Swipe from either edge
Quick switch: Swipe horizontally on the navigation bar
App drawer: Swipe up from anywhere except navigation bar

Quick Settings and Notifications

7. App Management & Stores

Alternative App Stores

F-Droid

F-Droid is an open-source app store hosting free and open-source applications that don’t depend on Google services. Visit F-Droid’s website to explore alternatives to popular apps.

Aurora Store

Aurora is a privacy-focused Google Play Store client offering several advantages:

Privacy Protection: Removes invasive trackers and permissions
Anonymous Access: Allows anonymous login with automatically generated credentials
Transparency: Shows number of trackers and permissions for each app

Additional Store Options

While other stores like APKMirror, APKPure, and Aptoide exist, we recommend sticking with F-Droid and Aurora Store for most needs. Only use alternative sources if F-Droid and Aurora are unresponsive and you urgently need a specific app. If for some reason Aurora is causing issues and not working properly, Aptoide is the next best option, although it may not have all of the same apps as found in Aurora.

List of All Apps Installed on the Ghost Phone

A complete and current list of the apps installed on all Ghost Phones shipping out the door can be found via the link below:

The Ghost Phone: A Complete List of Applications Installed

Installing Apps vs Using Websites

Before installing any app, consider whether you actually need it installed on your device. Many services (social media, banking, weather, etc.) can be accessed through your browser instead of requiring a dedicated app. This approach often provides better privacy and security.

Creating Website Bookmarks

Yes, we know there is no audio on this video… you should not need audio however to follow what is happening in the video!

App Installation Guidelines

When you do need to install apps, you have multiple options ranging from extremely cautious to more permissive. For detailed information about app compatibility and installation methods, visit: Will my app work on the Ghost Phone?

8. Essential Services Setup

Navigation & Maps with Magic Earth

While several navigation options are available, Magic Earth is our top recommendation. Key features:

Offline map downloads by state/country
Turn-by-turn navigation
Lane assistance
2D, 3D, and satellite views
Route planning
Dashcam functionality
Speed camera notifications
Current speed limit display

Visit www.magicearth.com for more details.

Internet & Browser Setup

Browser Selection

For best privacy and security, it’s important to consider three interconnected components: DNS servers, web browsers, and search engines. While they may seem separate, the choices we make in these areas greatly impact our overall privacy.

Brave Browser Recommendation

We firmly believe that Brave is hands down the most private and secure browser available. The team at Brave is 100% mission-aligned and on the front lines of the war to keep our information private and anonymous around the world. Their AI tool “Leo AI” is also aligned with their mission and extremely powerful – a great alternative to ChatGPT!

Want to see how Brave compares to other browsers? Check the comprehensive comparison at privacytests.org.

While alternatives like Freespoke and Firefox exist, examining the Privacytests.org matrix shows they simply don’t match Brave’s out-of-the-box privacy protections without extensive configuration.

Key Brave Features:

Built-in privacy protections
Consistently top ratings in independent privacy tests
Integrated private search
Built-in VPN option
Secure video conferencing
Privacy-focused AI assistant (Leo)

Secure Messaging Apps

Signal Setup

Insert SIM card (required for registration)
Open Signal app and follow registration process
Choose to import system SMS messages if desired
Enable “Optimize for missing Play Services”
Allow background operation when prompted

Telegram Setup

We recommend using the F-Droid ‘FOSS’ version of Telegram, which removes proprietary dependencies and trackers. Important notes:

Account creation requires non-FOSS version initially
Can create account on another device or through temporary installation of full version
FOSS version eliminates:
- Google Services Framework dependency
- Google Vision features
- Google Wallet integration
- Google Voice integration
- Google Maps (replaced with OpenStreetMap)
- Google Play Services GCM (uses Telegram’s push service)

VPN Configuration

Mullvad VPN Setup

Open Mullvad app and create account
Save your account number
Purchase credit through preferred payment method
Select nearby server location for optimal speed
Enable “Auto-connect” in preferences
Consider enabling “Always-on VPN” and “Block connections without VPN” in system settings

9. Transitioning from Other Devices

iPhone/iCloud Migration

If you’re transitioning from an iPhone, special attention is needed for proper migration:

iMessage Deactivation: You must remove your phone number from iCloud/iMessage to ensure proper text message routing
iCloud Account Management: Follow the steps at this guide when ready to fully transition from Apple services
Data Export: Export your contacts, calendars, and other data from iCloud before deactivation

Android Device Migration

For a complete tutorial on migrating your data from your current Android device to the Ghost Phone, visit our detailed guide at Migrating Your Data.

Account Transition Planning

Before beginning migration, verify:

Do you know which applications need login credentials on the new device?
Do you have all necessary login information readily available?
Have you verified access to all critical accounts?
Have you identified which services can be accessed via browser instead of apps?

App Assessment

Review your current apps and consider:

Which apps are truly necessary vs. convenient?
What FOSS alternatives exist for your current apps?
Which services can be accessed through Brave browser?
Do you need to maintain any apps for specific services (banking, work, etc.)?

Migration Checklist

Export and secure:
- Contacts and calendar data
- Important photos and files
- Text messages and call logs
- Authentication app data
Document and verify:
- All necessary login credentials
- Essential apps and services
- Required work or school accounts
- Two-factor authentication backups
Create backups:
- Cloud storage backups
- Local device backups
- Authentication recovery codes

10. Privacy & Security Configuration

Core Privacy Settings

Location Services: Disabled by default, enable only for specific apps when needed
App Permissions: Review and configure for each installed app
Network Permissions: Control which apps can access internet
Sensors: Manage app access to device sensors

Network Security

Wi-Fi Management:
- Keep Wi-Fi off when not needed
- Disable auto-join for networks
- Use VPN on public networks
VPN Configuration:
- Enable “Always-on VPN”
- “Block connections without VPN”
- Choose nearby servers for better speed

Advanced Security Features

PIN Scrambling: Randomizes keypad for enhanced security
App Sandboxing: Isolate apps for additional security
Secure Boot Verification: Verify system integrity on startup

11. Device Hygiene & Best Practices

Physical Device Care

Get a quality case and screen protector if you don’t already have one
Treat your device like the expensive mini-computer it is
- Avoid throwing or rough handling
- Keep track of device location
- Consider keeping device in 1-3 fixed locations throughout day
- Question whether you need the device on your person at all times
Maintain physical security of your device
Keep away from extreme temperatures

Digital Maintenance

Regular Backups:
- Frequency depends on how often you add new contacts, pictures, videos, emails
- Create a backup schedule that matches your usage
Update Management:
- Regularly update the device and applications
- Check for updates to GrapheneOS
- Keep F-Droid and Aurora Store updated
Data Management:
- Regularly purge unnecessary photos and videos
- Uninstall unused applications
- Clear app caches periodically

Usage Guidelines

Device Proximity:
- Keep device away from your body when possible
- Use speakerphone or air tube headphones for calls
- Maintain 12+ feet distance from head during sleep
App Management:
- Use browser alternatives instead of installing apps when possible
- Create shortcuts/bookmarks for frequently visited websites
- Keep questionable apps (social media, weather apps, etc.) off main user account
Privacy Practices:
- Use VPN when visiting sensitive websites
- Regularly review app permissions
- Learn to search settings for needed changes
- Use Brave’s Leo and Summarizer for finding answers to technical questions

12. Privacy and Security Features: Isolation Options for Maximum Protection

GrapheneOS provides powerful options for isolating applications and services to maintain your privacy and security. Here we cover the two main approaches with a focus on the most privacy-preserving methods.

Understanding Google Play Services on GrapheneOS

Before exploring isolation options, it’s important to understand how GrapheneOS handles Google services differently from standard Android:

Sandboxed Google Play Services is GrapheneOS’s implementation that contains and restricts Google’s services within a secure sandbox, preventing them from accessing your entire device or modifying system settings.
Google Play Store is Google’s app marketplace that typically requires logging into a Google account.
Aurora Store is an open-source alternative that lets you download apps from Google Play without requiring a Google account login, making it the preferred option for maintaining privacy.

For most users, we recommend using Aurora Store to download apps rather than logging into Google Play Store directly. Only log into Google Play Store when absolutely necessary for specific app functionality that requires Google account authentication.

Private Spaces – The Preferred Isolation Method

GrapheneOS users on Pixel 6, 6a, 6 Pro and higher devices can utilize the “Private Spaces” feature introduced in Android 15 as the recommended method for enhancing privacy and security.

A Private Space functions as an isolated workspace within the owner profile, offering strong separation while being more convenient than separate user profiles. This feature is particularly useful for compartmentalizing apps and data, ensuring that sensitive information remains isolated from the main user environment.

GrapheneOS fully supports Private Spaces and recommends them as a replacement for work profiles managed by local profile admin apps, citing better OS integration and isolation.

Example Use Case

If you need to use an application that requires Google Play Services but prefer to keep it separate from your main profile, you can set up a Private Space dedicated to this app. This approach allows you to maintain the necessary functionality while preserving the privacy and security of your primary user environment.

Setting Up Private Spaces

Step 1: Create and Access Private Spaces

Swipe up from the bottom of the screen to open the App Drawer
Tap on Settings (⚙️)
Scroll down and tap Security & Privacy → then tap Private Spaces
If you already set up a Private Space, select it and enter your PIN/password
If not, tap Create Private Space and follow the setup process

Step 2: Install Apps in Your Private Space

Once inside the Private Space, you will only see the standard stock GrapheneOS apps already installed within it. You can install new apps by:

Using Aurora and/or F-Droid App Stores (Recommended)

Open the “Vanadium” browser app
Go to www.f-droid.org and tap on the blue “Download F-Droid” button to download and then install F-Droid
After installation, open the app and then search for and install the Aurora Store app
Tap Install, and the apps will now be available only within Private Spaces
From these 2 apps you can install whatever apps you may want or need within your Private Spaces environment

Using the Google Play Store

Open the “App Store” app
Tap on Google Play services
Tap on Google Play Store and install
If the app you want to use requires Google Play services, you’ll need to also install Google Play services

Step 3: Using Your Private Space

The apps you install will only be visible in Private Spaces and won’t affect your main profile
To switch back to your regular space, lock the screen and log in with your main profile’s PIN/password

Secondary User Account – Alternative Isolation Method

While Private Spaces are the preferred approach for most users, in some scenarios you might want to use a completely separate user account for even stronger isolation.

Creating a Secondary User Account

Settings > System > Multiple users (or it might just say “Users”)
Toggle “Allow multiple users” ON
Tap “Add user”
Name the account (e.g., “Sandbox”)

Configure the new account:

When creating a new User account, you should have the ability to select which currently installed apps you want to also install within the new user account. Be sure to select at very least the F-Droid and Aurora app stores so that you can install new apps quickly once the new environment is created!
If, for some reason, the process does not allow you to select which apps you want to install from your primary user account, you’ll need to go to www.F-Droid.org and download the F-Droid app, and then once installed, download and install the Aurora app.

Important Security Notes

Any data in a secondary account or private space with Google Play services installed may be accessible to Google
Keep sensitive data out of environments where Google Play services are installed
Regular apps cannot share data between accounts or spaces unless you provide them access to do so
Google Play services can still access any data within their specific sandbox

Installing Sandboxed Google Play Services (When Necessary)

Before proceeding with Google Play Services installation, carefully consider all alternatives. Ask yourself:

Can the task be done through a web browser instead?
Is it just an inconvenience (like mobile check deposits) rather than a necessity?
Have you explored FOSS alternatives?

For example, if you have a Gmail account, the mobile web interface at gmail.com is extremely simple and far more private than installing the Gmail app.

If after careful consideration you still must have Google Apps & Services, follow these instructions to install them within your Private Space or Secondary User account:

Open the ‘Apps’ Application:
- Swipe up from the bottom of your home screen to access all apps
- Locate and tap on the ‘Apps’ application
Install Google Play Services:
- Within the ‘Apps’ interface, find and select ‘Google Play services’
- Tap ‘Install’ to begin the installation process
- This action will also prompt the installation of the ‘Google Play Store’
Configure Permissions:
- After installation, grant a battery optimization exception to ‘Google Play services’ to ensure features like push notifications function properly
- Navigate to ‘Settings’ > ‘Apps’ > ‘All apps’ > ‘Google Play services’ > ‘Battery’ > ‘Unrestricted’
Using Aurora Store Instead of Google Play Store (Recommended):
- Install Aurora Store from the Apps application
- Use Aurora Store to download applications without logging into Google
- Only log into Google Play Store if a specific app requires Google account authentication
Signing In to Google Account (Only When Absolutely Necessary):
- If you must use services that require a Google account:
  - Open the ‘Google Play Store’ app
  - Follow the on-screen instructions to sign in with your Google credentials
- Note: Signing in should be avoided when possible to maintain privacy
Manage Location Services:
- By default, GrapheneOS reroutes location requests from Google Play services to its own implementation
- Keep this default setting for better privacy
- Only if absolutely required by a specific app:
  - Go to ‘Settings’ > ‘Apps’ > ‘Sandboxed Google Play’
  - Disable the ‘Reroute location requests to OS APIs’ toggle
  - Grant ‘Google Play services’ the necessary location permissions

Choosing the Right Isolation Method

Here’s a quick comparison to help you choose the right approach:

Private Spaces (Recommended):
- Convenient balance of isolation and usability
- Easy to switch between spaces
- Good for most apps requiring isolation
- Integrated within your main user profile
Secondary User Account:
- Strongest isolation with complete separation
- Best for apps that need maximum containment
- More cumbersome to switch between accounts
- Useful when absolute separation is required

For most users, Private Spaces provide the ideal balance of security and convenience. For extreme cases where you need complete separation, the Secondary User approach offers the highest level of isolation.

Remember that no matter which method you choose, GrapheneOS provides significantly better privacy and security than standard Android implementations.

13. Backup & Maintenance

Backup Procedures

We consider regular backups a high-priority task to prevent data loss. A detailed backup guide can be found at our resources page.

Update Management

System Updates:
- Keep GrapheneOS updated
- Monitor for security patches
- Follow update notifications
App Updates:
- Regularly check F-Droid for updates
- Monitor Aurora Store for critical updates
- Review update changelogs when available

Regular Maintenance Tasks

Data cleanup and organization
Permission reviews
Storage management
App assessment and cleanup

Troubleshooting Resources

A complete, updated list of the most common questions and answers related to the Ghost Phone can be found in our FAQ Guide.

For those who have already gotten up and running on the device, we maintain a comprehensive post-activation troubleshooting guide at Troubleshooting Guide.

Before reaching out for support:

Search your settings for the things you need/want to change
Learn to search for answers online – this is often what tech support does!
Use Brave’s Leo and Summarizer to find answers to most questions about the device
Check our documentation for similar issues
Review community discussions for solutions

14. Support & Training Options

Support Options Overview

Self-Help Resources (Free)

Before reaching out for direct support, we recommend reviewing our comprehensive documentation:

FAQ and Troubleshooting guides
This detailed Guide!
Video guides from our Rumble Channel

Community Support (Free)

Telegram Channels:
- Main Channel – For announcements and updates
- Chat Channel – For community discussion
- Connect with hundreds of other users on the same journey!
- Learn from shared experiences
- Get peer support for common issues

Direct Support (Free)

LiveChat:
- Not always available but leave a message for 1-2 business day response
- Staff typically available 9am – 5pm Mon-Fri
- Best for quick questions and immediate assistance
Email Support:
- Contact support@MARK37.com
- 1-2 business day response time
- Best for detailed questions or issues
- Include relevant screenshots or information

Premium Support Options

Migration Support Service:
- One-on-one assistance with device transition
- Help moving from iCloud/Google/Microsoft
- Data transfer assistance
- Custom migration planning
IT Support Service:
- Broader technical assistance with apps
- Complex setup help
- Integration with other devices
- Custom solutions for specific needs
Live Training Programs:
- 12-week group training course
- Virtual sessions
- Comprehensive device mastery

The Ghost Phone: A Step-by-Step Guide to a Successful Start