Free encrypted shipping on hardware orders over $250 · Now shipping the OPZT Phone internationally
New: OPZT Phone now shipping internationally

Privacy, engineered into the things you carry.

OpZeroTrace builds phones, laptops, pens, and accessories engineered around a single idea: the person who owns a device is the only authority over what it senses and transmits.

Hardware kill switches Verified boot No accounts, no telemetry Discreet shipping
OpZeroTrace
Mic kill switch
Camera kill switch
Baseband disconnect
Verified boot
Hardware kill switches
Verified boot
No accounts required
Open, inspectable firmware
International shipping
Discreet packaging
Hardware kill switches
Verified boot
No accounts required
Open, inspectable firmware
International shipping
Discreet packaging
The OpZeroTrace ecosystem

One company. A complete privacy stack.

Phones, laptops, pens, and accessories built to the same standard — and engineered to work as one ecosystem, with no account required to use any of it.

Physical, not just software

Where it matters, OpZeroTrace protections are physical: power rails, magnetic caps, mechanical shutters. Protections that cannot be revoked in software.

Inspectable, not opaque

We publish our boot chains, our firmware, and our reasoning. A device that asks for your trust should also accept your inspection.

Independent by default

No accounts, no telemetry, no cloud coupling you did not choose. The product should work without us.

Honest about limits

We do not sell invisibility. Privacy is a set of habits and infrastructure. Our job is to make the infrastructure good enough.

The technology

Protections that don't depend on a setting.

The core protections on every OpZeroTrace device are physical and inspectable. They cannot be revoked by an update, a policy, or a server we control.

Microphone kill switch

A physical switch removes power from the microphone. No software path can re-enable it while the switch is off.

Camera kill switch

Both cameras are on a separately switched power rail. When the switch is off, the cameras have no electrical path.

Baseband disconnect

The baseband radio is on its own switch. When it is off, the phone is silent on every band it supports.

Verified boot

A cryptographically verified boot chain checks the operating system on every startup. A modified state is clearly indicated.

Per-app firewall

Each application has an explicit allow/deny rule and a captured-traffic log you can inspect. No background connections by default.

Full-disk encryption

Every laptop ships with full-disk encryption configured by default. The recovery key is yours alone.

Principles

Four principles we will not move on.

These are not marketing positions. They are the constraints every OpZeroTrace product is designed against.

01

Physical, not just software

Protections that depend on software can be revoked. Where it matters, OpZeroTrace protections are physical.

02

Inspectable, not opaque

We publish our boot chains, our firmware, and our reasoning. Inspection is invited, not gated.

03

Independent by default

No accounts, no telemetry, no cloud coupling you did not choose. The product should work without us.

04

Honest about limits

We do not sell invisibility. Privacy is a set of habits and infrastructure, and we make the infrastructure durable.

0+
Years of committed updates per device
0
Accounts required to use any product
0
Hardware kill switches on the OPZT Phone
0%
Reproducible firmware builds
Flagship

The OPZT Phone.
Built from the hardware outward.

A hardened smartphone built on a degoogled Android foundation, with hardware kill switches for microphone, camera, and radios, and a verified boot chain.

Hardware kill switches
Dedicated physical switches sever power to the microphone, cameras, and baseband radios at the hardware level.
Verified boot
A cryptographically verified boot chain checks the integrity of the operating system on every startup.
Degoogled Android
A hardened Android foundation with no Google services, no telemetry, and no background account coupling.
Sandboxed permissions
Each application runs in its own sandbox. Permissions are granular, revocable, and never implicitly granted.
OPZT OSverified boot ✓
No account
all systems offline · ready
Microphone○ off
Camera○ off
Baseband● on
Watch

Engineering notes, on video.

Short, technical walkthroughs of how OpZeroTrace hardware actually works.

OpZeroTrace Academy

Learn to operate the hardware you own.

Academy is a small set of practical courses on privacy engineering — written for owners, not for casual readers. No account required.

From owners

What people say after they buy.

Real reviews from verified OpZeroTrace owners. We do not fabricate endorsements.

The kill switches are not a marketing claim. I measured the baseband silence with an RF meter. This is the first phone I trust.
J
J. O.
Security engineer
OPZT Phone
I carry the OPZT Pen every day. It writes like a real instrument and the magnetic cap is satisfying. Nothing about it signals what it does.
M
M. K.
Daily carry
OPZT Pen
The laptop is a real workstation. The hardware mic switch is the single most-used feature on the machine. I write code on it for a living.
D
D. M.
Software developer
OPZT Laptop
OpZeroTrace does not sell invisibility — they sell durable, sustainable privacy. That honesty is why I bought from them.
S
S. P.
Verified owner
OPZT Phone
The Academy courses are written for owners, not for casual readers. Threat Modeling for Owners changed how I think about my own setup.
L
L. T.
Academy student
Academy
Recommended by

Trusted by privacy advocates.

The communities, projects, and organisations that work on the same problems we build for.

PPrivacyGuidesCommunity
EEFFAdvocacy
TTor ProjectOnion routing
WWireGuardVPN protocol
MMoneroPrivate money
GGuardian ProjectMobile security
Questions

What people ask before they buy.

Short, direct answers. If something here is not covered, the Support page has a contact form.

No account required

Carry privacy, not a setting.

Every OpZeroTrace device is built so its protections are physical, inspectable, and not dependent on a server we control.