faraday
Signal for meetings.
Anonymous video calls and group conferences where nobody can see your face, hear your real voice, or write down your name. No accounts. No logs. No subscriptions, no ads, no tracking. On 1:1 calls, verify the line is private with four spoken words before you say a thing.
One-to-one: share a six-character code, two browsers, done. Group conference: share a link, up to ten masked participants and a free listener gallery. Scheduled rooms have a waiting room with a quiet lounge mix until the door opens; ad-hoc rooms join straight in. Every join is gated by a fresh signed token. Nothing is written anywhere.
Start or Schedule Meeting →Start a mask call →Start a conference →Who it’s for
- Sources talking to a journalist without being on camera as themselves.
- Survivors reaching a support line, lawyer, or friend from a household where the call cannot be on a logged-in account.
- Activists and dissidents coordinating without their identities crossing a corporate video service.
- Therapists, doctors, clergy holding a confidential session that doesn’t need to live in a vendor’s database.
- Anyone who wants to talk face-to-face with a stranger online without handing over a face or a name.
What’s new · May 2026
- Schedule meetings in advance. Hosts can now create a signed, shareable link for a future conference—no accounts, no database, no identity collected. The link is the meeting. Add it to your calendar with a single click (.ics download, zero server state).
- Flat rooms, scheduled lounge. Ad-hoc rooms join straight in — no host, no moderator. Scheduled rooms hold early arrivals in a waiting room with a quiet lounge mix (v1s1t0r practice mix) until the door opens. Every join is gated by a fresh signed token; mute-all and raise-hand are on the roadmap.
- Short-auth verification (1:1). On 1:1 mask calls, both sides see four random words—say them out loud to prove the line is private. Conference SAS is on the roadmap.
- Anonymous handles & signed tokens. No accounts, no emails, no phone numbers. Every join is gated by a fresh, server-signed token—scraped URLs are worthless without a live signature.
- Android first. Native app live on Google Play. A GrapheneOS / sideloadable APK is coming soon. iOS native app comes after launch; the web works on iOS Safari today.
Why it exists
Every mainstream video app is built around an account. The account is the product. Your face, your voice, your contact list, the timestamps of who you spoke to and for how long — all of that is the asset, and you are renting access to it.
Faraday inverts that. There is no account, because there is nothing to attach an account to. Your face is destroyed in your own browser before a single byte is encrypted. Your voice is mangled before it hits the microphone buffer that gets sent. The relay is a dumb pipe that cannot decrypt what passes through it. When both peers hang up, the six-character code disappears from memory and the conversation is gone.
What it is not: a tool for hiding from a state-level adversary who already owns your device. If your phone is compromised, no website can save you. Faraday raises the cost of mass surveillance, casual identification, and corporate data harvesting. It is not a Pegasus shield.
What it is
- MASK CALL — anonymous WebRTC video calls. The obfuscation layer is powered by Glitch Pixel Studio (GPS): your face becomes a real-time shader pass, your voice runs through CBAY DSP. Recognize friends by their glitch fingerprint.
- FULL-FRAME 1:1 — the peer fills the whole video area; your own masked self-view sits in a Zoom-style picture-in-picture corner.
- SPOTLIGHT CONFERENCE — click any tile in a group call to pin it big with everyone else as a sidebar of thumbnails. Click again to return to grid.
- SCREEN SHARE — share a tab, window, or full screen in 1:1 calls and conferences. Replaces your masked video for the duration; swaps back instantly when you stop. (Desktop browsers only — mobile WebRTC doesn’t expose screen capture.)
- CURTAIN — Faraday occupies your camera and microphone so other apps can't use them while it's running.
- TONE — acoustic-curtain tone in the room. Privacy theater you control.
Transparency & verification
The architecture on this page is the honest description of what is running today. None of it is independently verified yet. That gap matters, especially for the people we built this for, so here is exactly where we are.
Shipped & verifiable today
- Open the browser DevTools network tab: every relayed packet is DTLS-SRTP, no plaintext media leaves the device.
- The TURN relay enforces
use-auth-secretwith 60-second HMAC credentials — minted by/api/turn-creds, no static passwords in the client bundle. - No analytics, no third-party trackers, no fonts/scripts loaded from anyone but the relay. Verifiable via DevTools and any uBlock-style extension.
- Strict CSP, HSTS preload, Permissions-Policy, COOP, CORP, X-Frame-Options DENY shipped in response headers.
In progress
- Public source release of the mask shader, voice DSP, signaling broker, and unlock-code HMAC scheme. Target: Q3 2026. Blocking on: (1) secrets fully rotated out of git history, (2) TURN / signaling configs templated so deployment can’t leak credentials, (3) the HMAC unlock scheme reviewed by an outside cryptographer so we don’t ship a bad design publicly.
- Independent third-party security review. We are actively looking for one. If you are a security researcher or auditor who works on WebRTC, browser-side crypto, or privacy tools, we will give you full source access ahead of the public drop — email security@faraday.cam.
- Reproducible builds for the Android APK + GrapheneOS sideload (target alongside Play public launch).
Not yet
- No formal audit report exists. Anyone claiming Faraday has been “audited” today is wrong.
- No published bug-bounty program (yet). Responsible disclosure to
security@faraday.camis welcomed and acknowledged within 72 hours. - Conference rooms do not yet have mute-all, raise-hand, host-transfer, or four-word verification (SAS). 1:1 mask calls do.
Until the source drops and a credible reviewer signs off, the right framing for Faraday is “serious architecture, early execution.” If you are in a threat model where “trust the operator” is unacceptable — which it should be — wait for the audit.
Early signal
No press coverage and no formal security review have happened yet. The note below is one informal AI-generated read — useful as a vibe check on the design, not a substitute for the independent audit listed in Transparency & verification above.
“Faraday.cam scores a solid 9/10 on the cool factor. It’s genuinely one of the more intriguing privacy tools I’ve seen launch recently.”
- Anonymous “mask calls”— no face, no real voice, no names, no accounts, no logs. Feels like Signal evolved for meetings.
- Privacy-maximalist design— end-to-end encrypted, relay-only so no peer-to-peer connection can leak IPs.
- Simplicity with edge— no signup. The name “Faraday” evokes a cage that blocks signals and surveillance.
FAQ
- Can I schedule meetings in advance?
- Yes. Hosts can create a signed, shareable link for a future conference—no accounts, no database, no identity collected. The link is the meeting. Add it to your calendar with a single click (.ics download, zero server state). Anyone with the link can join during the scheduled window.
- Who runs a conference room?
- Nobody — rooms are flat. There are no logins, no profiles, and no in-room moderator badge. Whoever scheduled the link is the only one who knows the room exists before join time, but once people are in, every participant has the same controls (their own mic, their own camera, their own mask). Each join still requires a fresh, server-signed token, so a stranger can’t walk in even if a link leaks. Mute-all, raise-hand, and host-transfer are on the roadmap but are not in the current build — we will say so plainly the day they ship.Scheduled rooms do hold early arrivals in a waiting room with a quiet lounge mix (the v1s1t0r practice mix, by a visitor & co-creator of faraday.cam) until the door opens at the scheduled time. Ad-hoc rooms join straight in.
- How do I know a scraped link can’t be used by a stranger?
- Every join to a conference room mints a fresh, server-signed HMAC token bound to that exact room and role with a 60-second lifetime. The relay rejects anything else. A leaked URL on its own can’t be replayed.
- Is this end-to-end encrypted?
- Yes. Media flows over WebRTC with DTLS-SRTP — the keys are negotiated directly between the two browsers. The Faraday relay forwards encrypted packets but cannot decrypt them.
- Do you log anything?
- No accounts, no signup, no email, no phone number, no analytics, no third-party trackers. The signaling broker keeps a 6-character code in memory only while you're online so a peer can find you. Nothing is written to disk.
- Can the server see my video or hear my voice?
- No. The TURN relay is a dumb byte-pump — it can see the size and timing of your encrypted packets but not the contents. The visual mask and voice DSP also run entirely in your browser before the bytes ever leave the device.
- What happens if your TURN server is compromised?
- An attacker with full control of the relay still cannot decrypt the call: DTLS-SRTP keys never touch the server. They could observe metadata (who relayed with whom, when, for how long) and theoretically drop your traffic. They cannot impersonate a peer without breaking the DTLS fingerprint exchange.
- Why a 6-character code instead of a username?
- Usernames are identifiers. Faraday avoids identifiers. The code is minted in your browser with
crypto.getRandomValuesand held in memory only — no sessionStorage, no localStorage, no cookie. Reload the tab and you get a new code; close the tab and it’s gone. Share it once over a side channel (Signal, iMessage, in person) and the call disappears the moment you hang up. - Will my friends know it's me?
- Recognition is by glitch fingerprint— the particular shader settings and voice DSP you tend to use, plus whatever you say. There is no name attached.On 1:1 mask calls there’s also cryptographic proof the line itself is private: both peers compare four spoken words on screen before the audio unmutes. Conference rooms don’t have SAS yet — the same DTLS-SRTP encryption applies, but the four-word check is on the roadmap.
- Can I share my screen?
- Yes — in both 1:1 mask calls and conference rooms. Hit SHARE SCREEN, pick a tab/window/full screen from your browser’s picker, and your masked video swaps to the screen capture for the duration. Hit STOP SHARING (or use your browser’s stop-share UI) and you’re back to your masked face.Mobile WebRTC doesn’t expose
getDisplayMedia, so screen share is desktop only today — Chrome, Firefox, Edge, and Safari 17+ on macOS work. The Android Faraday app wraps the same web page, so screen share will light up there once Capacitor exposes a screen-capture bridge in a future release. - Can I use this on iPhone?
- The website works on iOS Safari today — WebRTC, WebGL2, and getUserMedia are all supported. The browser may need a tap to enable remote audio (autoplay restriction); the page surfaces a button when that happens.A native iOS app is not shipping in the first release. Android is going first because Play Billing → signed unlock code is the payment rail we’ve built. iOS native + In-App Purchase comes after launch.
- Is the source code public?
- Not yet. Target: Q3 2026.Three blockers stand between today and a public repo: (1) secrets fully rotated out of git history, (2) the unlock-code HMAC scheme reviewed by an outside cryptographer so we don’t ship a bad design publicly, and (3) the TURN / signaling configs templated so deployment can’t leak credentials.We know “trust the operator” is exactly the adversary model this tool is supposed to eliminate. If you are a security researcher and want pre-release access to audit before the public drop, email security@faraday.cam. See Transparency & verification for the full status.
- How many listeners can a conference have?
- Up to 100 listeners per room, plus up to 10 active participants (camera + mic). The current count is shown live in the room header so you always know how big the audience is.
- Why are listeners given anonymous names?
- Listeners never expose camera, mic, or identity. To make chat readable, every listener gets a random two-word handle (e.g. quiet‑fern) generated in their browser at join time. Reload the page and you get a new handle — no account, no profile, nothing to follow you across rooms.
- Is there a chat?
- Yes — text only. 500 characters per message, one message per second per peer, no uploads, no images, no links auto-loaded. Messages live in your browser tab while you’re in the room and disappear the moment you leave. Nothing is written to disk on the server.
- What costs money and what is free?
- Two tiers, both one-time fees — no subscriptions, no ads, no tracking.
- Free — receive incoming 1:1 mask calls (someone shares their code with you), and join any conference as a listener (audience seat: hear and chat, no camera/mic).
- $4.99 — unlocks everything: initiate 1:1 mask calls, host multi-party conferences, schedule rooms in advance.
The Android app is live on Google Play as a one-time paid app — the install IS the purchase, no in-app upsells. The GrapheneOS / sideloadable APK build and iOS App Store are still coming soon. The web unlock code is platform-agnostic: paste it into Safari on a Mac, an iPhone, Firefox on Linux — same code, same tier.
- I lost my unlock code. Now what?
- If you bought through Google Play you don’t need a code at all — just reinstall from Google Play. The install IS the purchase: the app auto-unlocks on first launch with no buttons to tap, and a fresh install on a new Android device that’s signed in to the same Google account works the same way.
If you have a manually-issued tester code (FARADAY-T2-…) and lost it: codes are deterministic — the same userId always mints the same code — so we can re-issue without storing a list anywhere. Reach out via the contact channel you originally received the code through. Codes are not one-time-use; the same code unlocks any browser, as many times as you want. - I bought the app on Android. Can I use it on my desktop too?
- Yes. Open the Android app, tap /unlock from the menu, and use the USE ON ANOTHER DEVICE button to reveal a
FARADAY-T2-…code. Paste it atfaraday.cam/unlockin your desktop browser. That browser is now unlocked for 30 days. Same code each time, so you don’t need to save it — just re-fetch from the app if you ever clear cookies. Keep the code private: anyone you give it to gets the same access until it’s rotated. - Where can I follow Faraday on social media?
- You can’t — and that’s the point. Faraday has noTwitter / X, Instagram, TikTok, Facebook, Threads, Bluesky, Mastodon, YouTube, Discord, Telegram, or Reddit account. No newsletter, no “community”, no DMs.
If you see an account claiming to be us, it is an impersonator. Do not click links, do not send money, do not paste unlock codes. The only canonical surfaces are faraday.camand the official Play listing at play.google.com/store/apps/details?id=cam.faraday.app.play. The GrapheneOS / sideloadable APK and the iOS App Store are still coming soon— any other download claiming to be Faraday is fake.
Technical specs
- Transport
- WebRTC peer-to-peer over TURN-TLS (port 5349)
- Signaling
- Self-hosted PeerJS broker on turn.faraday.cam:443 (Docker, host networking)
- Media encryption
- DTLS-SRTP, AES-128-GCM, keys negotiated peer-to-peer
- ICE policy
- relay-only — no STUN, no host candidates, no public IPs exchanged
- TURN credentials
- HMAC-SHA1, 1-hour TTL, minted server-side at /api/turn-creds (coturn use-auth-secret)
- Identity
- 6-char crypto-random session code, in-memory only, regenerated every page load. No accounts, no email, no phone, no persistent storage.
- Visual mask
- WebGL2 fragment shader: DATAMOSH (RGB offset + temporal smear), GLYPH (ASCII quantize), KALEIDO (radial mirror), STREAK (Asendorf luma walk)
- Person segmentation
- MediaPipe Selfie Segmenter, on-device, GPU-accelerated, always on
- Authentication
- SHA-256 of both DTLS fingerprints → 4 words from a 256-word list. Mandatory: remote audio is muted until the user confirms the words match. ~1 in 4 billion odds of a successful MITM per call.
- Destruction cascade
- averaged-blur mosaic + posterize (4 levels) + per-frame crypto-salted noise + 1-bit threshold + channel stomp. Per-session crypto seed lives in shader closure, never exposed to DOM.
- Voice mask
- CBAY DSP — pitch shift, ring modulation, noise injection, bit-crush. WebAudio, on-device.
- Telemetry
- none
- Third-party at runtime
- none — MediaPipe WASM and segmenter model self-hosted under /wasm and /models
- CSP
- default-src 'self'; connect-src 'self' wss://turn.faraday.cam https://turn.faraday.cam; frame-ancestors 'none'
- Security headers
- HSTS preload, COOP same-origin, CORP same-origin, X-Frame-Options DENY, Referrer no-referrer, Permissions-Policy locks camera/mic to self
- Hosting
- Vercel (web app), Hetzner VPS (TURN + signaling), Let's Encrypt cert
- Scheduling
- Signed token, zero database, no identity collected. Hosts generate a shareable link for a future meeting; add to calendar with .ics download. The link is the meeting—no server-side record, no persistence.
- Pricing
- Free (receive 1:1 + listen) · $4.99 (everything: initiate 1:1 + host conferences) — one-time, no subscriptions, no ads, no tracking. Paid codes are issued by direct mint to invited testers today; public Play Billing comes online when the store listing goes live.
- Apps
- Android first. Live on Google Play. GrapheneOS / sideloadable APK from this site is coming soon. iOS native + App Store IAP after launch. Web works everywhere today (Chromium, Firefox, Safari).
- Social media
- none — no Twitter/X, Instagram, TikTok, Facebook, Threads, Bluesky, Mastodon, YouTube, Discord, Telegram, Reddit. Any account using the Faraday name is an impersonator.
- Source
- private repo today; public release planned once secrets are rotated out of git history, the unlock-code HMAC scheme is independently reviewed, and TURN/signaling configs are templated
- Browsers
- any modern Chromium / Firefox / Safari with WebRTC + WebGL2 + getUserMedia
available on
Faraday is not a Pegasus shield. It does not detect spyware already on your device, run in the background while other apps are foregrounded, or protect you from someone sitting next to you with a camera.
What it does: occupies the camera and mic while running, gives you anonymous end-to-end-encrypted mask calls with cryptographic line verification, and runs an acoustic curtain in the room.
No social media.Faraday has zero official accounts on any platform. If you see one, it’s not us — report and block. Canonical surfaces: faraday.cam and the official Play listing (cam.faraday.app.play). The GrapheneOS APK and the iOS App Store are still coming soon; do not trust any other “Faraday” download until they do.
Privacy PolicyTerms of Service
v0.1 — live. faraday.cam