Back to Blog

Ultimate Data Privacy: Ghost Mode + TEE Combined

Achieve maximum privacy by combining Ghost Mode and TEE. Learn best practices, VPN usage, and tips for securing your data with Liberty.

Tanvir A

Tanvir A

Co-Founder & Senior AI Engineer

9 min read
Ultimate Data Privacy: Ghost Mode + TEE Combined

When you combine Ghost Mode (zero storage) with TEE (hardware-isolated processing), you achieve what we call Ultimate Privacy aka "Privacy Final Boss" - a state where your data is both processed securely and never permanently recorded. This guide shows you how.

The Privacy Pyramid: Layers of Protection

Ultimate privacy isn't a single setting - it's multiple overlapping layers working together. Here's the full stack:

Privacy Protection Layers

LAYER 1 (Top): Ghost Mode - No storage on Liberty servers
LAYER 2: TEE Processing - Hardware-isolated computation
LAYER 3: TLS Encryption - End-to-end transport encryption
LAYER 4: VPN Tunnel - ISP-level anonymization
LAYER 5: Browser Controls - Cookies/tracking prevention
LAYER 6 (Base): Your Device - OS-level security
All layers combined = Maximum privacy posture

Step-by-Step Setup Guide

Here's how to enable Ultimate Privacy mode:

Step 1: Start Liberty in a normal or private/incognito browser window (disables cookies by default, so you will have to log in each time)
Step 2: Connect to a reputable VPN (see VPN selection guide below)
Step 3: In Liberty chat input, enable Ghost Mode (look for the ghost icon on the right side of the mode selector)
Step 4: Click on settings icon on the sidebar, and select "TEE & Data Control" tab, then enable "Decentralized Mode (TEE)"
Step 5: Begin chatting - nothing is stored, everything is isolated

Choosing a VPN: Critical Considerations

Using a VPN with Ghost Mode + TEE adds ISP-level privacy. But not all VPNs are created equal. Here's what to look for:

No-Log Guarantee: Choose VPNs with independently audited no-log policies
Avoid Free VPNs: Free VPN services often sell user data to advertisers - defeating the purpose
Jurisdiction Matters: VPNs based in 5-Eyes countries may be subject to government demands
Kill Switch Feature: Essential - disconnects Internet if VPN drops, preventing IP leaks
DNS/IPv6 Leak Protection: Misconfigured VPNs can leak your real IP through DNS or IPv6
Warrant Canary: Some VPNs publish warrant canaries - if they stop, it signals government pressure

VPN Limitation

A VPN protects you from your ISP but NOT from the VPN provider itself. If you don't trust the VPN company, they become the new chokepoint. Liberty recommends VPNs with strict no-log audits and transparent jurisdictions.

Additional Security Best Practices

Beyond Ghost Mode + TEE + VPN, these practices further harden your privacy:

Use Private Browser Windows: Open each session in a separate incognito or private window
Disable Tracking Features: Turn off browser telemetry and disable third-party cookies
Use Privacy-Respecting Browser: Firefox with uBlock Origin or Brave Browser (blocks trackers by default)
Check for Leaks: Visit haveibeenpwned.com to monitor if your email appears in breaches
Update Regularly: Keep your OS, browser, and VPN client updated for security patches
Avoid Fingerprinting: Use consistent browser settings to avoid unique device identification

For Journalists & Activists

If you're in a high-risk scenario (authoritarian country, targeted harassment, etc.), consider these additional steps:

Use Tor Browser: Routes traffic through multiple nodes, defeating traffic analysis
Physical Separation: Use a dedicated device for sensitive work, never shared
Persistent VPN + Tor: Run Tor over a VPN for maximum anonymity (or VPN over Tor in some cases)
Use Tails OS: Amnesic OS that leaves zero traces, runs entirely from RAM
Signal Desktop: Use Signal for encrypted communication outside Liberty
Hardware Security Key: 2FA hardware keys resist phishing and account takeover

Know Your Threat Model

Not everyone needs maximum paranoia. Ask: Who might want to spy on me? If the answer is my ISP or local government, VPN + Ghost Mode suffices. If it's well-resourced nation-state, you need Tor + Tails + Signal. Calibrate your security to your actual threat.

What Ultimate Privacy Does NOT Protect Against

Be realistic about limitations:

Endpoint Threats: Malware on your computer can log everything you type
Physical Observation: Shoulder surfers or cameras pointing at your screen
Correlation Attacks: Someone watching your network activity (not content) might infer timing patterns
Your Own Device Compromise: If your phone/computer is hacked, Ghost Mode + TEE can't help

Testing Your Privacy Setup

After configuration, verify your setup is working:

Check Your IP: Visit whatismyipaddress.com - should show VPN provider's IP, not your real IP
DNS Leak Test: Go to dnsleaktest.com - should show VPN provider's DNS servers
Verify TEE: In Liberty settings, check that TEE mode is active and a decentralized text is shown in the chat input area
Ghost Mode Indicator: Chat input area should display the ghost icon in pure purple in active state
Browse Privacy Test: Use EFF's Panopticlick to measure browser fingerprinting

Did you find this helpful?

Share with others exploring privacy and decentralized AI.