StealthOS: A sandboxed privacy desktop for iOS with iPhone Duo foldable support, embedded Tor, and self-hosted Rust relay

Wait 5 sec.

Hi everyone, I wanted to share StealthOS, a project I have been developing that puts a private desktop operating environment inside a single iOS app. We just shipped version 1.5.0 with support for the new foldable iPhone Duo. What is StealthOS? Instead of relying on multiple disconnected apps and VPN extensions that often leak DNS requests or metadata when dropped, StealthOS runs a sandboxed multi-window desktop locked behind your password and the device's Secure Enclave. Everything inside the app operates locally on the device with no account creation, no analytics SDKs, and no ads. New in v1.5.0: Foldable iPhone Duo Support Hinge Detection: The desktop automatically tracks the hinge boundary on both the cover screen and the inner unfolded display. Window Management: Windows can span across the full display or snap cleanly to either half of the screen. Folding Continuity: Folding or unfolding preserves all open windows, workspaces, and running tasks without restarting them. Key Architecture Details Stealth Browser & Embedded Tor: Includes an embedded, reproducible Tor client with .onion support, anti-fingerprinting device profiles (Canvas, WebGL, Audio, Screen, Fonts), and link tracker stripping (utm, fbclid). Single Route & Kill Switch: Every outbound request made by any tool in the app (browser, downloads, domain checks, on-device AI) routes strictly through one chosen path: Tor, a custom proxy, or a self-hosted relay. If that route drops, network traffic halts immediately instead of leaking unencrypted over the direct interface. Emergency / Duress Password: A secondary password configured alongside your main password. Entering it at the lock screen immediately purges all encrypted local data and opens a clean desktop. Biometrics stay permanently disabled while a duress password exists. Password Vault & OpenPGP: AES-256-GCM encrypted vault with built-in TOTP authenticator and browser autofill. Full OpenPGP key management for Ed25519, Curve25519, and RSA keys. Connection Pool: End-to-end encrypted messaging, voice calls, and peer-to-peer utilities. Works off-grid locally over Wi-Fi/Bluetooth without internet access, or remotely via your own self-hosted relay. On-Device AI: Runs locally via Apple Intelligence (iOS 26+) for writing and research tasks without sending prompts to cloud servers. Open Source Components We open-sourced the underlying networking components where data moves: StealthRelay: Self-hosted relay written in Rust with a web client: https://github.com/Olib-AI/StealthRelay ConnectionPool: Peer-to-peer library behind nearby and relay networking: https://github.com/Olib-AI/ConnectionPool TorClient: Reproducible Tor build packaged for iOS: https://github.com/Olib-AI/TorClient PoolChat: End-to-end encrypted messaging engine: https://github.com/Olib-AI/PoolChat Pricing All core functionality (desktop, browser with Tor, vault, OpenPGP, connection pool, duress lock) is completely free. Premium adds power-user utilities such as an SSH Terminal, an in-app Arch Linux shell, a live request inspector (NetMap), and up to 10 fingerprint profiles. App Store: https://apps.apple.com/us/app/stealthos/id6756983634 Website: https://www.stealthos.app Feedback and questions on the window manager implementation, Tor iOS packaging, or the Rust relay are welcome.   submitted by   /u/ahstanin [link]   [comments]