X47 desktop pairing

X47 is your own hardened Linux desktop. WraithLink pairs to it the way some phones pair to a Kali box - one phone, one desktop, over an exclusive encrypted link - so the heavy tools (and your WraithVault backups) live on the desktop while the phone stays locked down.

Why keep the tools off the phone

Running wireless auditing and other offensive tooling on the phone would mean an unlocked bootloader, root, and a custom kernel with injection drivers - throwing away verified boot and most of WraithLink's security in the process. Instead, the phone is a hardened remote: it connects to X47 and drives the tools there. The desktop does the work; the phone keeps its guarantees.

The exclusive link

Pairing is mutual and deliberately narrow, so only your phone can reach your desktop:

• Onion service with client authorization. X47 exposes its services as a Tor v3 onion service that only presents itself to clients holding the authorized key - your phone. There is no open port to scan, from anywhere in the world.
• QR mutual pairing. The two devices exchange their public keys by scanning a QR code, so keys are never typed or sent over the wire in the clear.
• Authenticated key exchange with a verification code. Pairing runs a password-authenticated exchange and then shows a short authentication string on both screens. You confirm they match, which rules out a man-in-the-middle even if the QR channel were observed.

What you can do once paired

• Open a shell or remote session to X47 to run desktop tools.
• Push encrypted WraithVault backups to X47 automatically whenever the link is up - the recommended backup path.
• Move files across the link without exposing either device to the wider network.

If you don't run X47

X47 is optional. Without it, WraithVault backs up to an encrypted USB-C drive you plug in manually. The phone works fully on its own; X47 just adds a private desktop companion and an automatic backup target.