# What is GrapheneOS?
GrapheneOS is an open source (
https://github.com/GrapheneOS) android based operating system for Google Pixel phones and Pixel Tablet that significantly improves security and privacy.
Available devices:
https://grapheneos.org/releases
The GrapheneOS team is working with an android OEM to bring GrapheneOS to their devices.
https://xcancel.com/GrapheneOS/status/1964717186725110101
https://xcancel.com/GrapheneOS/status/1965167250081796394
https://xcancel.com/GrapheneOS/status/1949843128724103658
https://xcancel.com/GrapheneOS/status/1949842203079053592
The core features of GrapheneOS include:
- the Network Permission toggle
https://grapheneos.org/features#network-permission-toggle
- the Sensors Permission toggle
https://grapheneos.org/features#sensors-permission-toggle
- Up to 32 user profiles (4 on AOSP)
https://grapheneos.org/features#improved-user-profiles
- Auto rebooting of the device
https://grapheneos.org/features#auto-reboot
- Improved prevention of VPN leaks
https://grapheneos.org/features#improved-vpn-leak-blocking
- Duress PIN/Password for uninterruptible device wiping
https://grapheneos.org/features#duress
- Optional Google Play and Play Services as regular apps
https://grapheneos.org/features#sandboxed-google-play
- Optional Android Auto support
https://grapheneos.org/features#android-auto
- Ability to disable the USB C port and pogo pins or only allow charging
https://grapheneos.org/features#usb-c-port-and-pogo-pins-control
- Lots of memory protections such as MTE, hardened memory allocator and others with ability to toggle force for all apps
https://grapheneos.org/features#exploit-mitigations
- Allow apps to think they can access all storage while giving it none or only specific files/folders
https://grapheneos.org/features#storage-scopes
- Allow apps to think they can access all contacts while giving it none or only specific contacts
https://grapheneos.org/features#storage-scopes
- LTE/4G only mode
https://grapheneos.org/features#lte-only-mode
- Per connection MAC address randomization for Wifi
https://grapheneos.org/features#wifi-privacy
- Night light color filter is able to have a warmer color temperature
- "unhackable" by Cellebrite even with a GrapheneOS patch level from Mid 2022
https://xcancel.com/GrapheneOS/status/1966909676768882744
- Ability to turn off clipboard sharing between owner and private space
https://xcancel.com/GrapheneOS/status/1952124238028042242
Please check these links for more information.
Full list of features
https://grapheneos.org/features
GrapheneOS FAQ
https://grapheneos.org/faq
GrapheneOS usage page
https://grapheneos.org/usage
Before Android stopped publishing device trees (having them isn't essential), not releasing AOSP source code often and the lead GrapheneOS developer being conscripted, updates were very often and new versions of android were released usually within 2 weeks of release.
https://xcancel.com/GrapheneOS/status/1969435091198685562
https://xcancel.com/GrapheneOS/status/1967320693131145453
# Why GrapheneOS?
GrapheneOS is much more secure than other mobile (iOS is close) and any desktop operating systems
https://xcancel.com/GrapheneOS/status/1947754162000666693
https://xcancel.com/GrapheneOS/status/1924513008149053446
https://xcancel.com/GrapheneOS/status/1923760808082678191
https://xcancel.com/GrapheneOS/status/1923761462129967247
This makes GrapheneOS the best mobile OS for people for anyone including regular people and those who want or need security and a private phone. GrapheneOS is also the best mobile OS for your Monero wallet, Signal/Molly/Simplex or as a NAS.
GrapheneOS provides users with a better day to day experience by adding a network permission toggle, sensors permission toggle, scoped storage and contacts, more and better user profiles.
https://grapheneos.org/features#network-permission-toggle
https://grapheneos.org/features#sensors-permission-toggle
https://grapheneos.org/features#storage-scopes
https://grapheneos.org/features#contact-scopes
https://grapheneos.org/features#improved-user-profiles
# How to install GrapheneOS
There are two officially supported ways to install GrapheneOS, the CLI and the Web installer.
https://grapheneos.org/install/
For most users, you should use the web installer that can be ran from another GrapheneOS device or regular Android device as well as Desktop.
Remember to follow the post installation instructions to make sure the bootloader is locked and OEM unlocking is disabled.
When booted into the device, open settings > security & privacy > more security & privacy > turn off allow sensors permission to apps by default.
# Notes
Google apps such as Google Camera, Google Photos, Google Dialer and other pixel exclusive apps will work on GrapheneOS, some apps might need to connect to the internet for initial feature flag fetching and feature downloading but can be turned off afterwards.
https://xcancel.com/GrapheneOS/status/1966633079654486262
https://xcancel.com/GrapheneOS/status/1969884920727171509
Google Pay doesn't work due to Google but you can use Google Pay on Pixel Watch instead. UK and EEA users can use bank tap to pay or Curve/PayPal.
https://xcancel.com/GrapheneOS/status/1969883603635994831
https://xcancel.com/GrapheneOS/status/1969883014240117244
https://xcancel.com/GrapheneOS/status/1950007496510206405
Google Play Store/Google Play Services is optional. To install, open the App Store to install Google Play.
To activate Firebase based app notifications, install the Google Play bundle and open Play Store and click log in to initialize it. Make sure Google Play Services has a battery optimization exception. This is user profile specific.
You can install Cake Wallet, Cupcake and Molly from Accrescent
https://accrescent.app that is in the GrapheneOS app store.
Install apps from Accrescent where possible for security purposes. Google Play with a throwaway account is another good option. Both have full unattended app update support. Obtainium is an app that lets you download from Github, F-Droid (prefer non F-Droid where possible) and other sources.
https://github.com/ImranR98/Obtainium
My app is crashing! GrapheneOS will usually tell you why the app is breaking and how to fix it. If you click more details and the error log mentions SIGSEGV or SIG something, its usually memory hardening related. Hold down on the app icon in the app draw or in recents and click app info then scroll down. You can turn off protections one by one until it works or turn on the compatibility mode toggle to disable everything.
I got a "App tried to perform DCL via storage/memory" when trying to open my app. You can click the notification and click allow and the error will stop.
I got a "App tried to access sensors". You can ignore this or expand the notification and click don't show again. If the app does need sensors such as a compass, step counter, map application or camera/video application, you should generally keep the sensors permission enabled for those apps. Most apps will say try and access them but probably won't need them.
# GrapheneOS community
GrapheneOS has official Matrix, Discord, Telegram, IRC support channels and a forum. They are on Twitter/X, Mastodon and Bluesky.
https://grapheneos.org/contact
# Donating to GrapheneOS
GrapheneOS accepts BTC, XMR, ZCash, ETH, Cardano, LTC and fiat through Github, Bank Transfer via Wise, PayPal and Interac e-Transfer for Canadians.
Use Monero where possible.
https://grapheneos.org/donate
Reply with any questions or comment with anything I should change or add.