ZeroTrace is a stealth communications platform built for closed-mesh operations. It requires zero third-party dependencies and runs natively on standard web infrastructure using standard W3C WebCrypto APIs.
Key Architectural Invariants:
0% Cryptographic Compromise: All communications utilize military-grade AES-256-GCM room encryption combined with ephemeral ECDH P-256 escrow derivation and ECDSA P-256 in-RAM sender signatures.
Decoy Chameleon Mask: Appears as a fully functional Financial Modeling & Tax Calculator ("TriRole Insights"). No chat, network, or cryptographic interfaces are visible without the secret PIN.
Zero-IP RAM Scrubbing: LiteSpeed / Apache reverse proxy headers (CF-Connecting-IP, X-Forwarded-For, User-Agent) are physically stripped in RAM before reaching application logic.
Autonomous Ephemeral Ring Purge: Server-side messages are held in an AES-256 encrypted memory buffer and automatically shredded every 5 minutes or according to per-message TTL timers.
Zero-EXIF Canvas Pipeline: Photo uploads are rendered onto an HTML5 canvas and re-encoded to WebP in memory, stripping camera metadata, GPS coordinates, and hardware IDs.
2. Decoy Calculator & Emergency Access Codes
When the app opens, it displays an interactive financial calculator. Key in specific sequences on the keypad followed by no additional characters to unlock features:
Code / Action
Result / Behavior
Target User
1234 (Default)
Unlocks the stealth ZeroTrace Messenger interface. (Can be customized to any 4–6 digit PIN in Settings).
All Users / Members
0000
Prompts for the Master Admin Passphrase and opens the Admin Control Console directly.
Admin & Sub-Admins
9999
Duress / Anti-Tamper Shred: Instantly wipes all in-memory keys, deletes local and session storage, and locks back to calculator 0.
Emergency Lockdown
Tap v3.3
Header trigger shortcut opening an explicit PIN prompt dialog.
Alternative Unlock
3. User Workflow & Features
3.1 Choosing Channels & Direct Messages (DMs)
All-Hands Closed Mesh: The broadcast channel accessible to all enrolled members of the organization.
Direct Messages (DM): Tap on any peer in the roster list to open a private 1-on-1 cryptographically isolated channel.
3.2 Privacy Veil (Anti-Shoulder Surfing)
By default, messages are protected by the ZeroTrace Privacy Veil (blurred with an 8px Gaussian blur) to prevent unauthorized viewing in public:
Hold to Unblur: Press and hold the green bar at the bottom (HOLD FINGER TO UNBLUR CONVERSATION). The text will remain clear as long as your finger touches the bar.
Toggle Eye Icon: Tap the eye icon (👁️) in the chat header to toggle unblur on or off permanently.
Settings Option: In Settings under Privacy Shields, choose Disabled (Always Clear) if you prefer messages to remain unblurred by default.
3.3 Multi-Option Burn & Ephemeral Timers
Use the selector at the top of the chat view to change message retention policies:
12h Reset: Standard policy; messages automatically shred after 12 hours.
Wipe on Close: Automatically purges the entire room history from RAM as soon as you exit the conversation.
3.4 Apple-Style Interactions & Gestures
Hold-to-Talk Voice Note: Press and hold the microphone pill to record. A red pulsing indicator will appear. If you change your mind, slide your thumb left by ~55px to cancel and release. To send, simply release without sliding. A quick tap also toggles hands-free recording.
Edge Swipe-to-Go-Back: Swipe from the left edge of your screen towards the right to dismiss the chat or settings view, exactly like native iOS.
Long-Press Message Action Sheet: Long-press on any message bubble for 450ms to open the frosted-glass action sheet to copy text or execute an instant remote shred across all devices.
3.5 Creating & Managing WhatsApp Groups (👥⁺)
Any enrolled member can create cryptographically isolated closed-mesh groups:
Open New Group Screen: In the Chats tab, tap the 👥⁺ button in the top header.
Set Group Subject: Enter the group name (e.g., "Executive Taskforce" or "Operations Core").
Select Participants: Tap members from the checklist. Selected participants will appear as chips at the top.
Create: Tap the floating green checkmark (✓) at the bottom right.
Cryptographic Isolation: The group generates its own independent AES-256-GCM room key. Only selected participants will see the group in their chats list.
Group Info & Deletion: Tap the group header to view the participant list or delete/shred the group.
4. Admin & Sub-Admin Workflows
Admin Console Access
Enter 0000 on the calculator decoy keypad. Enter the Master Admin Passphrase (default: ZeroTraceAdmin2026!).
Member Roster & Roles: View all active members. Use the dropdown to promote or demote members between Admin, Sub-Admin, and Member.
Revoke Access: Instantly de-authorizes a compromised seat from sending or receiving messages.
Signed Single-Use Invites: Generate cryptographically signed invite tokens for new members with custom seat identifiers and expiry durations.
Passphrase Rotation: Rotate the Admin Master Passphrase directly in the UI.
Global Emergency Wipe: Instantly shreds all messages across every room and re-keys the server ring buffer.
5. Offline Admin Decryption Kit
For administrative oversight, the Master Escrow Private Key remains strictly offline and is never stored on the web server.
Run the automated sync tool: python zerotrace_offline_admin_kit/admin_tools/sync_and_decrypt_vault.py
The script securely downloads the encrypted escrow vault via FTP and invokes decrypt_vault.js locally using the offline master private key.
Decrypted messages and scrubbed media attachments (.webp, .webm, .pdf) are safely extracted onto your offline workstation.
6. PWA Home Screen Installation
iPhone (iOS Safari): Tap the Safari Share button (box with upward arrow) ➔ tap "Add to Home Screen". The app will launch with a black status bar, full-screen decoy calculator, and haptic engine active.
Android (Chrome): Tap the 3 dots in the top right ➔ tap "Install App" or "Add to Home Screen".
Windows / Mac (Edge / Chrome): Click the install icon in the URL address bar.
7. Frequently Asked Questions (FAQ)
Q: Why does my text look blurred? A: This is the ZeroTrace Privacy Veil designed to stop shoulder-surfing. Hold the green bar at the bottom, or tap the eye icon (👁️) in the header to view messages clearly.
Q: Can an admin or network provider see my IP address? A: No. ZeroTrace physically strips all client IP headers in RAM upon packet arrival. No server logs exist, and WHOIS privacy is active on the root domain.
Q: What happens if an unauthorized person gets my phone? A: They only see a working financial calculator. If forced to unlock, key in the Duress PIN 9999 to execute a silent memory and storage wipe.