Four protections, active at all times
Four complementary protections, always active, designed for the worst day of your digital life. Here is what they do, and how.
Remote wipe
You launch your remote wipe program from any computer, on any operating system, and leave it running. Your phone regularly checks whether that program has been launched; as soon as it detects it, it destroys its data, wherever it is, even locked. The order travels through two channels: over the internet via Tor, without anyone seeing where it leaves from or where it arrives, or by SMS, which reaches the phone even without a data connection. Whichever the channel, the order is signed: without your program it cannot be forged, including by us.
Dead-man timers
Danger does not always announce itself, and a stolen phone is quickly cut off from the network. Dead-man timers run on the device itself: too long without signal, an airplane mode that drags on, a burst of failed unlocks… and the wipe fires on its own, with no network, no command, no you.
Separate secret space
A device that slips out of your hands must not surrender your most sensitive data. That data lives in a separate space, encrypted with its own keys, which can be destroyed on its own and in silence: what remains is a perfectly ordinary, coherent, lived-in phone. Whoever holds it finds nothing there, and nothing tells them that anything is missing.
Anti-tamper
Égide installs with full administrative power (“Device Owner”) on a verified-boot system. Trying to uninstall it, strip its rights, put the device into recovery, or boot another system: each of those moves is detected and triggers the wipe. There is no way to disable Égide without wiping the device.
Under the hood
For the curious: the four technical building blocks everything rests on.
- GrapheneOS, a hardened Android system, developed independently, whose code is public and verifiable by anyone. No Google services, reinforced encryption, verified boot.
- Device Owner, Android's highest administrative status, normally reserved for corporate fleets. It gives Égide the right to wipe the device and prevents removal through normal means.
- Key attestation, a certificate of authenticity signed by the phone's security chip, like a notary's seal that cannot be forged: our servers can verify they are talking to a genuine, uncompromised device, without ever knowing who owns it.
- Tor, the benchmark anonymity network. Updates and commands travel through a hidden service: the server has no visible domain name and no visible IP address, so no one can block it, watch it, or link your phone to our servers.
What is included
- Single licence, for one installation
- Security updates included, at no extra cost
- Step-by-step guided installation
- Your own remote wipe program
What is not included
- The phone itself: get a Google Pixel, new or second-hand
- Locating the device: no geolocation service is provided
- Recovery of wiped data: a wipe is final, that is the point
Guided installation, end to end
After the purchase, a web assistant accompanies you step by step. It sets up GrapheneOS, installs Égide as Device Owner, then has you generate your own remote wipe program. Everything happens in your browser: we hold no secret concerning you.