WYRM

Wyrm MirageReleased

Be somewhere else.

Set your phone's location to wherever you like and it stays there. Every app that has been quietly noting where you sleep, where you work and how long you spend at each gets a different answer from now on.

How to get MirageRead the source
Platform
Android 8.0 and up
Price
Free, always
Licence
GNU AGPLv3
Account required
None
Servers it talks to
None
Signing certificate
Published, checkable

What it does

  • Sets your phone's reported location to anywhere you pick.
  • Holds it there, so apps see a consistent place rather than a jump.
  • Works against apps that read the system location.
  • Runs entirely on the phone. It talks to no server, including ours.

What it does not do

Every one of these is a real boundary, not a caveat. We would rather draw the line here than sell you a feeling of safety you would lean on later.

It moves location only
It will not hide your IP address, and an app can still guess roughly where you are from that.
Not every app is fooled
An app that cross-checks Wi-Fi networks, cell towers or your photos can notice the disagreement.
Android only
There is no iOS version, and there will not be one soon: iOS does not allow this.
Not anonymity
Your accounts still know who you are. This changes where they think you are, nothing more.

Getting Mirage

Download the signed APK from the releases page and install it. Two minutes, no account, no store.

  1. 1

    Download the APK

    From the releases page on GitHub. Take the newest one unless you have a reason not to.

  2. 2

    Check it is really ours

    Worth the thirty seconds. An APK from anywhere else can claim to be Mirage; the signature is the part that cannot be faked.

  3. 3

    Allow the install

    Android will ask whether to trust installs from wherever you downloaded it. That warning is doing its job, which is exactly why step two matters.

  4. 4

    Set your location

    Open it, pick a place, and it holds there until you change it.

Open the repositoryHelp build it

Check it is genuine

Every release we publish is signed with the same key. Compare the fingerprint on your download against the one below; if they differ, the file did not come from us.

Run this

apksigner verify --print-certs app-release.apk

It must match our SHA-256 fingerprint

4F401FCE63972DE2F2EA604EB2F5A802A60AE2255D379FF2DA6AD2D6200075BA

If the two do not match, stop. Delete the file and download it again from the releases page. Do not install it.