Whisper Guard

Whisper Guard gives your phone something no other security app does: a real, verifiable identity, and a live verdict on the sites you are about to trust.

Every other app either filters a blocklist or hides you behind a shared IP. Whisper does the opposite. It warns you the instant a login page is a fake, and it gives your phone a real, routable identity that anyone can verify with standard internet tools, no account required.

WHAT IT DOES
- Catches look-alikes on your phone. Paste or type any site and the on-device detector flags impostors like "paypa1-secure.com" from the shape of the name, before you enter a password. It runs entirely on your phone; nothing about where you go leaves the device.
- Gives your phone a real identity. Sign in and your phone gets a real, routable IPv6 address that is its identity, anchored in the global DNS and checkable by anyone with standard tools (dig, RDAP), with Whisper never in the trust path.
- A live verdict, not a stale list. Signed in, ask about any host and get a verdict computed from a live security graph of billions of relationships, not a blocklist that lags behind new threats.

PRIVATE BY DESIGN
Only a site's name is ever checked, and only when you ask, to a single endpoint. Never a full web address, never your history, never page content. This is enforced in the app's shared core by construction and covered by a dedicated test.

HONEST BY DEFAULT
The look-alike check and identity verification work with no account: a free tier that is actually useful, not a demo. Signing in unlocks the live graph verdict and your phone's identity. We tell you plainly what each tier does and what leaves your phone. There is no keyless resolver, and we say so.

Built by people who have operated the internet's address registry and one of its root DNS servers.

WHY THIS APP USES A VPN CONNECTION
Whisper Guard uses Android's VpnService, which is why Android shows a VPN key icon while protection is on. There are two modes and you choose which one you are in. The app tells you which is active, on the Device screen, at all times.

MODE 1, ON BY DEFAULT: name checking only
The app offers itself as the phone's DNS resolver and claims two routes, its own two DNS addresses and nothing else. Only name resolution enters the connection. Your browsing, your apps and your messages take their normal path and are never carried by Whisper Guard.

We need this because a look-alike check that only works inside one browser tab protects almost nothing. Fake login pages arrive by message, in another app, or through a link that opens somewhere you did not expect. Watching name resolution is how the check covers the whole phone instead of one app.

Where those names go, and every entry records which:
- Signed in: the Whisper resolver over encrypted DNS (HTTPS).
- Not signed in: your network's own DNS servers, exactly as your phone would have used anyway.

MODE 2, OFF UNTIL YOU TURN IT ON: device-wide identity
Signed in, you can switch on device-wide egress. Then the connection also carries your apps' outbound TCP, so traffic leaves from your phone's own routable Whisper IPv6 address and the far end sees that identity. This is the point of the product: an address that is yours and that anyone can verify with standard internet tools.

Turning it on is your decision, and the app will not claim it is carrying your traffic unless it truly holds that route. Outbound UDP other than DNS is dropped rather than forwarded, so nothing quietly leaves by another path.

AND IT GETS OUT OF THE WAY WHEN IT CANNOT DO ITS JOB
A DNS connection that is up but cannot resolve would leave the phone with no working internet. After repeated failures Whisper Guard closes the connection, lets Android resolve normally again, and retries later. Protection should never be the reason your phone stops working.