Question 1

What is Norypt?

Accepted Answer

Norypt is a provider based in Europe of pre-configured privacy and security devices. We supply encrypted phones running GrapheneOS, encrypted laptops, 4G privacy routers with VPN pre-installed, encrypted eSIMs, and Live USB drives — all configured correctly before they reach you. We also offer custom device services including camera and microphone removal, MDM deployment, and fully bespoke builds for organisations with specific requirements.

Question 2

What products and services does Norypt provide?

Accepted Answer

Our product range includes: Norypt Pixel Secure (Google Pixel with GrapheneOS, pre-configured for privacy), Norypt Secure Laptop (encrypted Linux laptop with LUKS full-disk encryption), Norypt Privacy Router (4G VPN router with zero traffic logs), Norypt eSIM (anonymous eSIM for travel), and Norypt Live USB (Tails OS on a pre-configured USB drive). We also offer Custom Devices services — camera and microphone hardware removal, custom MDM and remote wipe deployment, and fully bespoke device builds quoted per project.

Question 3

Is Norypt a verified and trusted provider of encrypted technology?

Accepted Answer

Norypt devices are built on independently verified, open-source technology — GrapheneOS (audited by the security community and maintained by a non-profit), LUKS encryption (the Linux standard for full-disk encryption), WireGuard VPN (independently audited), and Tails OS (used by journalists and security professionals worldwide). We don't invent our own encryption. We configure proven, publicly auditable tools correctly — and ship them with documentation so you can verify what was done. Every device ships with tamper-evident seals and a re-locked verified bootloader (on phones), providing cryptographic assurance that the OS is exactly what it should be.

Question 4

What does it mean for a device to be encrypted?

Accepted Answer

Encryption transforms the data stored on your device into an unreadable form using a cryptographic key. Without that key — derived from your password or PIN — the data is computationally infeasible to decode. If your phone or laptop is lost, stolen, seized, or forensically examined without your key, the storage yields nothing usable.

Question 5

Are all encrypted devices equally secure?

Accepted Answer

No. There's a significant difference between a device that technically supports encryption and one that's correctly configured. The critical factors are: whether full-disk encryption covers every partition (including swap and temp storage), whether the key is hardware-backed by a dedicated chip (TPM or Titan M2) rather than stored in software, and whether the encryption key is stored locally only — not backed up to a cloud account, which substantially weakens the protection.

Question 6

What does hardware-backed encryption mean?

Accepted Answer

Hardware-backed encryption means the cryptographic key is managed by a dedicated security chip — a TPM (Trusted Platform Module) on laptops, or a Titan M2 chip on Google Pixel devices. The key never leaves this chip and cannot be extracted from memory. This is significantly stronger than software-only encryption, where a sophisticated attacker can pull the key from RAM on a running device.

Question 7

Does encryption protect everything on my device?

Accepted Answer

Encryption protects data at rest — meaning the data stored on the device when it's locked or powered off. It does not protect against network surveillance (use a VPN and encrypted DNS for that), malware on a running device, or an unlocked device physically in someone else's hands. It's one layer of a complete privacy setup, not a standalone solution.

Question 8

Why does the operating system matter for an encrypted device?

Accepted Answer

A device can have excellent encryption and still expose significant data through the OS. Windows sends telemetry to Microsoft by default. Stock Android routes data through Google. These are OS-level data exposures that encryption doesn't address. A genuinely private device pairs strong encryption with a privacy-respecting OS — GrapheneOS for phones, hardened Linux for laptops — that doesn't harvest data in the background.

Question 9

How secure are encrypted devices compared to standard smartphones?

Accepted Answer

A standard smartphone collects and transmits significant data by default: location history, app usage, contacts, and device identifiers all routed through vendor infrastructure (Google or Apple). Full-disk encryption is present, but the key is often backed up to a cloud account, substantially weakening it. A correctly hardened device like a Norypt Phone removes this entire layer: no Google services, no vendor cloud, no telemetry. The key is stored locally only, hardware-backed by the Titan M2 chip, and protected by a re-locked verified bootloader. The security gap is substantial — not marginal.

Question 10

Can an encrypted device protect my data if it is lost or stolen?

Accepted Answer

Yes — this is precisely what encryption is designed for. If your encrypted phone or laptop is lost or stolen, the data is inaccessible without your passphrase or PIN. On a Norypt Phone, the hardware-backed Titan M2 chip rate-limits PIN attempts, making brute-force attacks impractical. On a Norypt Laptop, LUKS full-disk encryption with TPM 2.0 means the drive can be removed and connected to another machine with no result. No cloud backup of any key exists that a third party could be compelled to hand over.

Question 11

Why not just install GrapheneOS or encrypt a laptop myself?

Accepted Answer

You can — but privacy configuration is unforgiving. A single missed step leaves a gap that looks like protection but isn't: a swap partition left unencrypted, a bootloader not re-locked after OS installation, a TPM misconfigured, a DNS leak in the VPN setup. These are common mistakes made by people who knew what they were doing. Norypt handles the configuration correctly, tests it before dispatch, and documents what was done and why.

Question 12

What exactly does Norypt configure on a phone?

Accepted Answer

GrapheneOS installed on a compatible Pixel, bootloader re-locked, privacy defaults set across all system settings, keyboard and browser configured to minimise data exposure, Duress password and auto reboot configured, Signal and Telegram set up with virtual numbers (no personal number required), pre-installed FOSS apps, and 6 months of Mullvad VPN pre-configured. The device is ready from the moment you switch it on.

Question 13

What does Norypt configure on a laptop?

Accepted Answer

Full-disk LUKS encryption with no unencrypted partitions and no cloud key backup, TPM 2.0 enrolled for hardware-backed key management, BIOS password and Secure Boot set at firmware level, hardened Linux OS with minimal telemetry and no vendor cloud services, hardware webcam cover and physical microphone disable, and pre-installed FOSS apps for productivity and security.

Question 14

How do I know the device hasn't been tampered with before I receive it?

Accepted Answer

Every device ships with tamper-evident seals applied. You can verify on arrival that the device has not been opened or interfered with since it left us. On phones, the re-locked verified bootloader provides cryptographic assurance that the OS is exactly what it should be. If a seal is broken on arrival, contact us immediately and do not use the device.

Question 15

Do I need technical knowledge to use a Norypt device?

Accepted Answer

No. Every device arrives fully configured and ready to use. You don't need to install anything, run any commands, or have any technical background. Documentation included with each device explains what was configured and how to maintain it — in plain language, not technical jargon. Support is available after purchase if you have questions.

Question 16

Are encrypted devices only for technical users?

Accepted Answer

No. Norypt devices are specifically designed for professionals who need privacy without wanting to become sysadmins. The configuration is handled before delivery. The devices work like normal phones and laptops. The privacy is built in, not something you have to maintain yourself.

Question 17

What types of professionals use encrypted devices?

Accepted Answer

Journalists protecting sources. Lawyers handling privileged client communications. Healthcare professionals managing patient records. Business executives travelling with confidential data. Activists and civil society workers operating in sensitive environments. Frequent international travellers who need their devices to hold up at border crossings. Security researchers. Anyone who handles information valuable enough to protect correctly.

Question 18

Do I need to be doing something sensitive to justify an encrypted device?

Accepted Answer

No. The most common reasons people use encrypted devices are practical, not dramatic: a stolen laptop that exposed client data, a border crossing where a device was copied, a business trip to a country with different data laws. You don't need to be a journalist or a whistleblower. If the data on your device has value — professional, personal, or commercial — it warrants appropriate protection.

Question 19

Are encrypted devices legal?

Accepted Answer

Yes, in all jurisdictions where Norypt ships. Encryption is used by every bank, every hospital, every government department, and every major corporation in the world. Using an encrypted phone or laptop is not illegal, suspicious, or unusual. It is standard professional practice in most industries that handle sensitive data.

Question 20

What about businesses issuing devices to employees?

Accepted Answer

Businesses issuing phones or laptops to employees have both a practical and often a legal interest in encrypted, managed devices. Norypt's Custom Devices service covers custom MDM deployment, remote wipe capability, and fully configured fleet builds. If a device is lost or stolen, it can be wiped remotely. If an employee leaves, access is revoked. Contact us to discuss fleet requirements.

Question 21

How long does delivery take?

Accepted Answer

Europe orders typically arrive in 3–5 business days. International orders are 5–10 business days depending on location. All orders are shipped with full tracking — you'll receive a tracking link once your order is dispatched.

Question 22

Do you ship worldwide?

Accepted Answer

Yes. We ship to most countries worldwide. All international orders are fully tracked and shipped in discreet packaging.

Question 23

What packaging do you use?

Accepted Answer

All orders are shipped in plain, unmarked packaging. There is no reference to Norypt, privacy, or security on the outside of the box. The packaging looks like any standard parcel.

Question 24

Are the devices tamper-evident?

Accepted Answer

Yes. Every device ships with tamper-evident seals applied. You can verify on arrival that the device has not been opened or interfered with since it left us.

Question 25

How much does shipping cost?

Accepted Answer

Shipping costs are calculated at checkout based on your location and order. We ship all orders worldwide via DHL Express with full tracking.

Question 26

What payment methods do you accept?

Accepted Answer

We accept cryptocurrency payments only. This is a deliberate choice — crypto payments do not require you to share card details or billing addresses. Contact us when you're ready to order and we'll confirm the current accepted currencies and wallet address.

Question 27

What do I need to do when my device arrives?

Accepted Answer

Very little. Every device arrives fully configured. On a phone, the three things you do yourself are: set your personal passphrase, set your duress password, and connect to Wi-Fi or insert your SIM. Everything else — OS, apps, encryption, VPN — is already done. Our setup guide walks you through each step in plain language.

Question 28

What software is installed before shipping?

Accepted Answer

Phones ship with the latest stable release of GrapheneOS, fully configured with sensible privacy defaults. Laptops ship with a hardened Linux OS and full-disk LUKS encryption enabled. Routers ship with NextDNS pre-configured, ad and tracker blocking active, and WireGuard VPN support ready. Live USBs ship with Tails OS pre-installed and the encrypted persistent storage partition already set up.

Question 29

Are the devices updated before shipping?

Accepted Answer

Yes. Every device is updated to the latest stable OS and security patch before it's dispatched. We also include update instructions so you can keep the device current yourself.

Question 30

Can I use the device as my main daily driver?

Accepted Answer

Yes — that's the intention. Our devices are designed for everyday use, not just sensitive tasks. Norypt Phones handle calls, messaging, navigation, social media, and banking like any smartphone. Laptops run a full Linux desktop environment suitable for work, browsing, and productivity.

Question 31

What if I want to customise the device after receiving it?

Accepted Answer

You're free to configure the device however you like after delivery. The documentation we include explains the key settings and how to adjust them. If you need guidance on a specific configuration, our support team is happy to help.

Question 32

Why do you use Google Pixel hardware for privacy phones?

Accepted Answer

GrapheneOS — the OS that powers Norypt Phones — has strict hardware requirements: a dedicated security chip (Titan M2), a re-lockable bootloader, and a long-term security update commitment. Google Pixel is currently the only hardware that meets all of these simultaneously. Once GrapheneOS is installed and the bootloader is re-locked, the phone has no connection to Google's services, servers, or data collection infrastructure. It's Google hardware running a privacy OS — the same logic as running Linux on a Dell laptop.

Question 33

Can I still use normal apps on a GrapheneOS phone?

Accepted Answer

Yes. GrapheneOS includes a sandboxed compatibility layer that runs most Android apps normally. Messaging apps, browsers, banking apps, navigation, and most social media all work. Apps that require deep Google Play Services integration (such as Google Pay or certain DRM-protected content) may not work or may need workarounds.

Question 34

Will my banking app work?

Accepted Answer

Most banking apps work on GrapheneOS via the sandboxed Google Play compatibility layer. A small number of banks use Google's SafetyNet or Play Integrity API in ways that can cause issues — the GrapheneOS community maintains a compatibility list. Contact us before ordering if you're unsure about a specific bank.

Question 35

Which Pixel model will my phone be?

Accepted Answer

We use currently-supported Pixel models with active security updates at time of purchase. The specific model depends on stock and what's currently supported by GrapheneOS — we'll always use a model within its active support window. Contact us if you have a preference.

Question 36

Does the phone have Google services at all?

Accepted Answer

No Google services are installed by default. Google Play Services, Google Mobile Services, and all associated tracking infrastructure are absent — not disabled, but entirely removed at the OS level. If you want to run apps that need Google Play, you can optionally install the sandboxed Google Play compatibility layer, which runs Google's services as an unprivileged app with no system-level access.

Question 37

Is GrapheneOS legal?

Accepted Answer

Yes, completely. GrapheneOS is open-source software and is legal in all jurisdictions where Android devices are sold. Using privacy tools is not illegal.

Question 38

Do encrypted phones work with normal apps like WhatsApp, Signal, and Telegram?

Accepted Answer

Yes. Signal and Telegram work natively on GrapheneOS without any Google services required — they're recommended apps on the platform. WhatsApp requires sandboxed Google Play to function, which can be installed as an optional, unprivileged compatibility layer. In practice, the vast majority of messaging, social media, navigation, and productivity apps work normally. Each Norypt Phone comes with Signal and Telegram pre-configured, with accounts already set up using virtual numbers — so you don't need to use a personal phone number.

Question 39

What's the difference between GrapheneOS, CalyxOS, and standard Android or iOS?

Accepted Answer

Standard Android ships with deep Google integration — Play Services runs with broad system privileges and collects extensive data. iOS replaces Google with Apple, which collects similarly broad data by default. CalyxOS is a privacy-focused Android fork that removes Google services and adds privacy improvements, but still includes microG — a partial Google services replacement that maintains some compatibility at the cost of a reduced security model. GrapheneOS takes a stricter approach: no Google services at all, stronger sandboxing, hardened memory allocation, and optional sandboxed Google Play that runs as an unprivileged app with no system access. For security and privacy combined, GrapheneOS is the stronger choice. Norypt uses GrapheneOS for this reason.

Question 40

What OS do the laptops run?

Accepted Answer

Our laptops run a hardened Linux distribution configured for minimal data exposure — no Microsoft telemetry, no cloud key backup, no vendor tracking. Full-disk LUKS encryption is enabled by default, hardware-backed by TPM 2.0.

Question 41

What happens if my laptop is lost or stolen?

Accepted Answer

Without your passphrase, the contents of the drive are completely inaccessible. Full-disk LUKS encryption means the data is unreadable even if the drive is removed and connected to another computer. There is no cloud backup of your encryption key.

Question 42

Can I use standard software on the laptop?

Accepted Answer

Yes. The laptop runs a full Linux desktop environment. Common software — browsers, office tools, email, video conferencing, development tools — all work normally. The privacy hardening affects what data leaves the device, not what software you can run on it.

Question 43

Does the laptop have a webcam cover and microphone disable?

Accepted Answer

Yes. Our laptops include hardware webcam covers and a physical microphone disable switch — hardware controls, not software toggles. When the switch is off, the microphone is physically disconnected at the hardware level.

Question 44

How does the privacy router connect to the internet?

Accepted Answer

The Norypt Privacy Router is a 4G SIM-based device — it connects via a SIM card, not a fixed broadband line. You do not need an existing modem or ISP router. Insert a SIM card (or a Norypt eSIM) and it creates a secure Wi-Fi network that every device on your network is automatically protected through from first boot.

Question 45

Does the router protect all devices on my network?

Accepted Answer

Yes — that's the main advantage of network-level privacy. Every device you connect over Wi-Fi is automatically protected: phones, laptops, smart TVs, tablets, IoT devices. You don't need to install anything on individual devices.

Question 46

What does the privacy router block?

Accepted Answer

The router blocks known tracking domains, ad networks, telemetry endpoints, and malware command-and-control domains at the DNS level using regularly-updated blocklists. It also encrypts your DNS queries so your ISP cannot see which domains you're visiting.

Question 47

What is IMEI randomization and why does the router have it?

Accepted Answer

The Norypt Privacy Router includes a built-in IMEI changer that lets you randomize the SIM modem's IMEI — toggled via a physical button, the web UI, or CLI. This prevents cellular carriers from building a persistent profile of the router's SIM usage based on a fixed hardware identifier. MAC randomization is also applied to the WAN and Wi-Fi interfaces on every boot, for the same reason.

Question 48

What is an encrypted eSIM and how is it more private than a regular SIM?

Accepted Answer

A traditional SIM card is tied to your registered identity — your carrier logs your location, calls, and data sessions against your name. The Norypt eSIM can be activated with minimal personal data and no government ID, functions as a prepaid product with no ongoing account, and covers 160+ countries. It significantly reduces the identity trail left by your phone's cellular connection.

Question 49

Can I use the eSIM on any phone?

Accepted Answer

The eSIM works on any device that supports eSIM profiles, including iPhones, standard Android phones, and GrapheneOS devices. On a Norypt Phone (GrapheneOS), eSIM activation is handled directly without routing through Google's infrastructure, which provides an additional privacy benefit.

Question 50

Is my order information kept private?

Accepted Answer

Yes. We collect only the information needed to fulfil your order. We do not maintain marketing databases, share customer data with advertisers, or use third-party analytics on customer information. Contact us if you have specific requirements around order privacy.

Question 51

Do you keep purchase records?

Accepted Answer

We keep records only as required by law (financial and tax obligations). We do not keep records beyond what is legally required, and we do not share customer data with third parties.

Question 52

Can I trust that my device hasn't been compromised before delivery?

Accepted Answer

Yes. Every device is configured in-house, shipped with tamper-evident seals, and uses a verified boot chain (on phones) or TPM-backed secure boot (on laptops). If a seal is broken on arrival, contact us immediately and do not use the device.

Question 53

Do your devices protect against government surveillance?

Accepted Answer

Our devices significantly reduce the data footprint available to any third party, including governments. However, no device provides absolute protection in all situations — operational security (how you use the device) matters as much as the hardware. Our Privacy Academy has guides on building a realistic privacy setup.

Question 54

Are encrypted phones and devices legal in the EU?

Accepted Answer

Yes. Encrypted devices are completely legal throughout the European Union. The EU's GDPR regulation actively requires organisations to protect personal data using appropriate technical measures — full-disk encryption is one of the measures explicitly recommended by the European Data Protection Board. Using an encrypted phone or laptop is not just legal in the EU, it is best practice for anyone handling personal or professional data under GDPR. GrapheneOS is open-source software with no legal restrictions in any EU member state.

Question 55

Can I use encrypted devices while travelling in the EU or worldwide?

Accepted Answer

Yes. Encrypted phones and laptops are fully functional anywhere in the world. They make and receive calls, connect to mobile data and Wi-Fi, and run apps normally. The encryption operates in the background and has no effect on how you use the device day-to-day. When crossing borders — including EU internal and external borders — an encrypted device with a strong passphrase provides meaningful protection against device inspection, since the data is inaccessible without your key. Norypt devices ship worldwide via DHL Express.

Question 56

What support do you offer after purchase?

Accepted Answer

We provide ongoing support via Telegram, Signal, Threema, or Proton Mail (norypt@proton.me). If you have questions about using your device, need help with a specific configuration, or run into any issues, our team is happy to help. We typically respond within one business day.

Question 57

What if my device arrives damaged?

Accepted Answer

Contact us via Telegram, Signal, or Proton Mail (norypt@proton.me) with your order details and photos of the damage within 48 hours of delivery. We'll resolve the issue promptly.

Question 58

Can I get help setting up specific apps or workflows?

Accepted Answer

Yes. Post-purchase support includes help with setup questions. If you're configuring Signal, ProtonMail, a VPN provider, or any other privacy tool on your Norypt device, we're happy to walk you through it.

Frequently Asked Questions

Browse by topic.

About Norypt

About Norypt

What Are Encrypted Devices?

What Are Encrypted Devices?

Why Choose Norypt?

Why Choose Norypt?

Who Uses Encrypted Devices?

Who Uses Encrypted Devices?

Orders & Shipping

Orders & Shipping

Products & Setup

Products & Setup

Norypt Phones & GrapheneOS

Norypt Phones & GrapheneOS

Encrypted Laptops

Encrypted Laptops

Privacy Routers & eSIMs

Privacy Routers & eSIMs

Privacy & Security

Privacy & Security

Support & After Purchase

Support & After Purchase

Still have questions?