๐Ÿ‘ป GhostBook

December 14, 2025 ยท View on GitHub

Your contacts. Encrypted. Tap to share.


The Problem

You meet someone at a con, a meetup, a party. They want your contact info.

You could:

  • Hand over your phone (awkward)
  • Spell out your Discord (they'll typo it)
  • Write it on paper (they'll lose it)

There has to be a better way.


The Solution

Tap. Share. Done.

GhostBook turns your Flipper Zero into an encrypted digital business card.

โ”Œโ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”
โ”‚    >> GhostBook <<     โ”‚
โ”‚    ================    โ”‚
โ”‚    @yourhandle (o_o)   โ”‚
โ”‚    ----------------    โ”‚
โ”‚    Name: Ghost         โ”‚
โ”‚    Discord: ghost#1337 โ”‚
โ”‚                        โ”‚
โ”‚    [Hold to share]     โ”‚
โ””โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”€โ”˜

How It Works

Share: Your Flipper emulates an NFC tag containing your encrypted card. Hold it near another Flipper running GhostBook.

Receive: Scan for nearby cards. One tap, saved to contacts.

Protect: Wrong passcode too many times? Everything melts.


Security That Bites Back

FeatureWhat It Does
6-10 Button Passcode46K to 60M combinations
Auto-Wipe3/5/7/10 wrong attempts = gone
256-bit EncryptionMilitary-grade protection
10K IterationsBrute force? Good luck.
No CloudYour data never leaves your device

The Wipe

Enter the wrong passcode too many times and watch your ghost melt:

!! I'M MELTING !!        !! MELTING... !!        !! GOODBYE !!

    (o_o)                    (x_-)                   . . .
    /| |\        โ†’          ~~~~~        โ†’
     | |

All data destroyed. No recovery. By design.


What You Can Store

  • @Handle โ€” Your username
  • Name โ€” Real name (optional)
  • Email โ€” Contact email
  • Discord โ€” Your tag
  • Signal โ€” Phone number
  • Telegram โ€” Username
  • Notes โ€” Whatever you want
  • Flair โ€” ASCII art icon

Quick Start

  1. Install ghostbook.fap on your Flipper
  2. Choose security level (passcode length)
  3. Choose wipe threshold (attempts allowed)
  4. Create your passcode
  5. Fill in your profile
  6. Start sharing

For The Security-Minded

On-device protection:

  • Passcode never stored (only hash)
  • Wipe happens on the Flipper itself
  • No way to extract passcode from files

Offline attack resistance:

  • Unique 16-byte salt per device
  • 10,000 hash iterations
  • Random IV per encryption

Threat model:

  • โœ… Casual snooping
  • โœ… Lost/stolen device
  • โœ… Nosy friends
  • โš ๏ธ Determined attacker with your SD card
  • โŒ Nation-state actors (use Signal)

Why GhostBook?

GhostBookBusiness CardPhone
Encryptedโœ…โŒโŒ
Auto-wipeโœ…โŒโŒ
Tap to shareโœ…โŒMaybe
Works offlineโœ…โœ…โŒ
Hacker credโœ…โœ…โœ…โŒโŒ

Get It

Download: Releases

Build:

git clone https://github.com/digitard/ghostbook
cd ghostbook && ufbt && ufbt launch

Version 0.6.0

  • โœ… NFC tap-to-share (NTAG215 emulation)
  • โœ… NFC tap-to-receive
  • โœ… Variable passcode (6-10 buttons)
  • โœ… Configurable wipe threshold
  • โœ… Melting ghost animation
  • โœ… Encrypted storage
  • โœ… vCard/CSV export

Built by Digi โ€” @digitard

Trust no one. Leave nothing.

(o_o)