Push-to-Talk Radio, Built for a World That Demands Trust
Cryptographically authenticated servers. Hardware-bound device identity. End-to-end encrypted private calls. Install the app and start talking — no account, no sign-up, free.
Three Ways to Use FREEPTT
Connect to the Public Network
For anyone — no setup, no account, free
Download the app, open it, and connect to the FREEPTT public network — operated by us, accessible from anywhere. No server to manage. No registration. Just download and talk.
- No account required
- Free within the monthly usage allowance
- Private calls always end-to-end encrypted
Licensed Operator Network (PaaS)
For organizations that need their own network
Get your own licensed operator system — your Certificate Authority, your talkgroup configuration, your enrolled devices — hosted and managed on vendor infrastructure. All the control of self-hosting without the operational burden.
- Your own cryptographic identity
- Managed infrastructure
- Usage-based billing
Self-Hosted Deployment
For organizations that own their infrastructure
Deploy ptt-server and ptt-backend on your own hardware or cloud. Your servers.
Your certificates. Your data never leaves your infrastructure. Devices on your system can also roam to the
public network and any other licensed system.
- Full infrastructure control
- Air-gapped capable
- Technical documentation available
What Sets FREEPTT Apart
Encryption
Private calls are sealed from device to device. Open channels are there when you need them.
Every private and individual call uses AES-256-GCM encryption from the moment you press PTT — a fresh session key per transmission, wrapped with the recipient's public key using RSA-OAEP, routed by a server that sees only sealed packets it cannot read. Group talkgroups support both open and encrypted modes.
Security
Two layers of proof before a single byte is trusted.
A TLS connection alone isn't enough. FREEPTT adds a second authentication layer: the server proves its identity using a certificate issued by your operator's Certificate Authority. Your device proves itself using a hardware-backed key.
Privacy
No account. No tracking. On encrypted channels, we cannot hear you.
The public network requires no email, no password, and no registration. Your device's identity is a cryptographic key hash — not a name or account. For private calls and encrypted group channels, session keys are generated on your device.
Decentralization
No single server. No single company. No single point of failure.
The architecture spans the vendor-operated public network and independently operated licensed systems. Devices connect to any combination of these. Users can switch between networks with a tap.
How the Security Works
Encrypted call: Your voice is Opus-encoded, sealed with AES-256-GCM on the device, and routed as a packet the server cannot decrypt.
Open group channel: Voice is authenticated and routed; content is not encrypted — suited for broad coordination where that is the intent.
In both modes, the connection itself is authenticated. Learn exactly how it works or read the Security & Privacy deep dive.
Run Your Own Secure PTT Network — Hosted or Self-Deployed
FREEPTT is built for organizations that need to own their communications identity. Whether you want hosted infrastructure or you run everything yourself, you get your own Certificate Authority, your own enrolled devices, and your own talkgroup configuration.
- Full PKI control — your CA, your signed servers, your enrolled devices
- Operator-hosted (PaaS) or fully self-deployed
- QR-code onboarding, multi-system support, roaming between networks
Built for the Technically Demanding
The security model is documented, auditable, and based on standard cryptographic primitives — not proprietary obscurity. The architecture uses a four-tier PKI hierarchy, bidirectional nonce exchange at the application layer, RSA keypairs anchored to Android hardware secure enclaves, and per-build supply chain attestation via signed JWTs.
Built for Real Operations
Public Safety
Cryptographic server verification means no attacker can impersonate a legitimate dispatch node. Private communications between command and field units are always encrypted.
Enterprise Ops
Open group channels for coordination and encrypted private calls for sensitive discussions — one app, one network, one hardware identity.
Private Networks
Build an invitation-only network. Optional device enrollment means only pre-approved hardware can connect.
Free to Start. No Sign-Up.
Free
Download and use the public network.
$0
No account. No credit card. Subject to monthly usage allowance.
Standard (Coming Soon)
Unlimited usage on the public network.
Requires a billing account.