Note (September 2026): An earlier version of this article said GrapheneOS provides no real encryption and scans phones for viruses. Both claims were wrong: GrapheneOS encrypts all user data and is a full operating system, not an antivirus app.
GrapheneOS is a free, open-source, security- and privacy-focused mobile operating system based on the Android Open Source Project. As of September 2026 it officially runs only on supported Google Pixel phones (Pixel 6 through Pixel 10a, plus the Pixel Fold and Pixel Tablet). It hardens Android, encrypts all user data, and ships without Google apps, which you can add in a sandbox.
Key Takeaways
- GrapheneOS is a full replacement operating system for Google Pixel phones, not an antivirus app or paid service.
- It is free and open source, first released in 2016, and run by the nonprofit GrapheneOS Foundation.
- All user data is encrypted, and the project adds features such as per-app network and sensor toggles, a duress PIN, and automatic reboot.
- Google Play can be installed as an ordinary, sandboxed app, so apps that depend on it can still work.
- Installation needs a computer, a USB cable and a supported Pixel that is not carrier-locked; unlocking the bootloader wipes the phone.
If you have an Android device, you will have probably heard of GrapheneOS and are unsure of what it is, or you may not use Android at all and are simply curious. This article explains what GrapheneOS is, which phones it runs on, what it actually protects against, and who is likely to benefit from it.
GrapheneOS is still little known outside privacy and security circles, although its developers estimated about 400,000 active users as of April 2026, according to Wikipedia.
What is GrapheneOS
GrapheneOS is a free, open-source mobile operating system built on the Android Open Source Project (AOSP). It replaces the stock software on supported Google Pixel devices to add stronger privacy and security over your data.
GrapheneOS is not an app or a subscription service. It is a complete replacement operating system that is installed in place of the stock Android software and receives regular updates from the project.
GrapheneOS is free to download and use; the nonprofit GrapheneOS Foundation, founded in Toronto in March 2023, is funded by donations. Reviewers at outlets including ZDNET, Wired and PCMag have praised its security and privacy features.
GrapheneOS protects data mainly by making the phone harder to attack in the first place: it hardens the operating system, tightens app sandboxing, and gives users extra permission controls. It is not an antivirus program and does not scan the phone for viruses.
GrapheneOS does have real trade-offs, but a lack of encryption is not one of them. According to the official GrapheneOS FAQ, all data on the phone’s data partition, including file names and other metadata, is always stored encrypted, using an enhanced version of Android’s filesystem-based encryption with hardware-based support on the officially supported devices.
The real downsides are practical: GrapheneOS runs only on specific Pixel phones, Google apps are not installed by default, and some reviewers found it less convenient than stock Android. Like any operating system, it cannot stop a user from falling for a phishing email or other cyber attacks that rely on tricking the person rather than breaking the software, so safe habits still matter.
Should you get GrapheneOS
If you have an Android device or are considering buying one, first check whether it is on the official GrapheneOS supported-device list. Only certain Google Pixel models are supported, so most other Android phones cannot run it.
The official GrapheneOS FAQ and the project’s official chat channels are the most reliable places to ask questions before installing. People sometimes search for Graphene OS as two words, but the project’s official name is GrapheneOS.
There are also many security and privacy apps you can buy or download for free, but price alone does not show how well a product protects you. GrapheneOS itself is free and open source, so its code can be inspected by anyone.
Whether you choose a free or paid tool, judge it by what it actually does: how often it is updated, whether its claims can be checked, and what data it collects about you.
At the end of the day, it is completely up to you what you get to download and what kind of protection you want. If you want the most security from a phone, keeping it updated, using a strong screen lock, and installing apps only from trusted sources matter more than any single app.
Some paid security products bundle extra services, but a free, well-maintained option such as GrapheneOS can provide strong protection without a subscription.
What Is GrapheneOS? A Short History
GrapheneOS is an open-source operating system that focuses on researching and improving Android privacy and security, mainly through defense-in-depth hardening and attack surface reduction, according to its Wikipedia entry. It was first released in 2016 and is built on the Android Open Source Project (AOSP).
The lead developer, Daniel Micay, previously worked on CopperheadOS. After his dismissal from Copperhead in 2018, he continued the Android Hardening project, which was renamed GrapheneOS and announced in April 2019. The nonprofit GrapheneOS Foundation was founded in Toronto, Canada, in March 2023.
The operating system has no telemetry, so user numbers are rough estimates. As of April 2026, the developers estimated about 400,000 active users, based on update-server access logs.
Which Phones Can Run GrapheneOS?
GrapheneOS officially supports only Google Pixel devices, because it requires specific hardware security features such as a high-quality secure element, verified boot that can be relocked with a custom key, and long manufacturer update support. As of September 2026, the official GrapheneOS FAQ lists these devices with official production support:
| Pixel generation | Supported models |
|---|---|
| Pixel 10 series | Pixel 10, Pixel 10 Pro, Pixel 10 Pro XL, Pixel 10 Pro Fold, Pixel 10a |
| Pixel 9 series | Pixel 9, Pixel 9 Pro, Pixel 9 Pro XL, Pixel 9 Pro Fold, Pixel 9a |
| Pixel 8 series | Pixel 8, Pixel 8 Pro, Pixel 8a |
| Pixel 7 series and others | Pixel 7, Pixel 7 Pro, Pixel 7a, Pixel Fold, Pixel Tablet |
| Pixel 6 series | Pixel 6, Pixel 6 Pro, Pixel 6a |
For new purchases, the GrapheneOS FAQ recommends the Pixel 8 and later models. It notes that 8th-generation and later Pixels come with a minimum guarantee of 7 years of support from launch, up from the previous 5-year minimum, and support hardware memory tagging, a security feature GrapheneOS uses by default.
In March 2026 the project named Motorola Mobility as a hardware partner, and in August 2026 it said it plans to support the Motorola Razr Fold and Razr Ultra plus an unnamed regular device, according to Wikipedia. As of September 2026, these Motorola devices are planned but not yet officially supported.
Carrier variants of Pixels may be locked so the bootloader cannot be unlocked, which prevents installation; the FAQ says this is primarily an issue with US carriers. Buy an unlocked, carrier-agnostic model if you plan to use GrapheneOS.
Key Security and Privacy Features
- Full data encryption: filesystem-based encryption with metadata encryption, with hardware-based support on the officially supported devices, per the official FAQ.
- Network and sensor permissions: per-app toggles to revoke internet access and sensor access.
- Storage and Contact Scopes: let an app see only the specific files, folders or contacts you choose.
- Duress PIN or password: entering it at the lock screen instantly wipes all data and installed eSIMs.
- Automatic reboot: on by default after 18 hours without unlocking (adjustable from 10 minutes to 72 hours), which clears disk encryption keys from memory.
- USB-C port controls: by default, the port is set to charging-only while the phone is locked.
- Wi-Fi privacy: a new random MAC address every time a Wi-Fi connection is established.
- Hardened components: a hardened memory allocator (hardened_malloc) and Vanadium, a hardened Chromium-based browser and WebView.
- Auditor app: hardware-based verification of the authenticity and integrity of the device’s firmware and software.
Can You Use Google Apps on GrapheneOS?
Yes. Google apps and services are not installed by default, but GrapheneOS lets users install a sandboxed version of Google Play Services from its built-in App Store. This gives access to the Play Store and apps that depend on it, including push notifications and in-app payments. Since December 2023, Android Auto can also be installed this way.
This sandboxed approach differs from other custom Android systems such as CalyxOS and /e/OS, which replace Google Play Services with microG.
GrapheneOS vs. Stock Pixel Android
| Aspect | GrapheneOS | Stock Pixel Android |
|---|---|---|
| Cost | Free, open source | Included with the phone |
| Google apps | Optional, installed as sandboxed apps | Preinstalled |
| Data encryption | Yes, enhanced filesystem-based encryption | Yes, AOSP filesystem-based encryption |
| Per-app network toggle | Yes, added by GrapheneOS | Not included |
| Duress PIN | Yes, added by GrapheneOS | Not included |
| Supported phones | Selected Pixel models only | Every Pixel |
| Setup | Installed via a computer; wipes the phone | Ready out of the box |
How to Install GrapheneOS
GrapheneOS offers two official installation methods: a WebUSB-based web installer recommended for most users, and a command-line guide aimed at more technical users. The project warns that third-party guides tend to be out of date. The web installer process works like this:
- Check that your phone is an officially supported Pixel and not a carrier-locked variant, and back up your data.
- Use a computer (or another Android phone or tablet) with at least 2GB of free memory and 32GB of free storage, a supported browser such as Chrome, Edge or Chromium, and a good-quality USB-C cable.
- Enable OEM unlocking on the phone, then boot it into the bootloader interface.
- Connect the phone and unlock the bootloader from the installer. This wipes all data on the phone.
- Download and flash the GrapheneOS factory images through the web installer.
- Lock the bootloader again, which enables full verified boot (this also wipes data).
- After setup, disable OEM unlocking and optionally verify the installation with the verified boot key hash or the Auditor app.
ZDNET’s Jack Wallen reported that the installation took him roughly ten minutes. The official guide also explains how to replace GrapheneOS with the stock OS. For general Pixel troubleshooting, see our guide on what to do when a Google Pixel keeps restarting.
Pros and Cons of GrapheneOS
Advantages
- Free and open source, with no telemetry in the operating system.
- Extra exploit protections and privacy controls beyond stock Android, such as hardened_malloc and hardware memory tagging.
- Apps that depend on Google Play can run through the sandboxed Google Play layer.
Disadvantages
- Runs only on selected Google Pixel phones as of September 2026.
- Installation needs a computer and wipes the phone.
- Some reviewers found it less convenient than stock Android; in 2022, MobileSyrup reported issues with Google’s Messages app permissions and missing “smart” features in the default keyboard and camera apps.
- It does not stop phishing, scams or weak passwords, so good habits still matter.
Who Should Use GrapheneOS?
GrapheneOS suits people who own or are willing to buy a supported Pixel and want stronger protection against exploits and data collection, including people who prefer to keep Google services sandboxed or off their phone entirely. It has been suggested on multiple occasions as a defense against spyware such as NSO Group’s Pegasus.
It is less suited to people who do not have a supported Pixel or are not comfortable with an installation that wipes the phone. For them, keeping a stock phone updated and following basic security steps is the practical alternative. Our guides on how safe your data is online, checking whether your passwords have been compromised, and what to do if you have been hacked cover those habits, and our guide to using free VPNs safely explains another common privacy tool.
Frequently Asked Questions
Is GrapheneOS free?
Yes. GrapheneOS is free and open source, with most system components under permissive licenses such as the MIT License and Apache License 2.0. The nonprofit GrapheneOS Foundation receives donations to fund the work.
Does GrapheneOS work on Samsung or other Android phones?
No. As of September 2026, GrapheneOS officially supports only selected Google Pixel phones, from the Pixel 6 to the Pixel 10a, plus the Pixel Fold and Pixel Tablet. Support for some Motorola devices has been announced but is not yet available.
Is GrapheneOS an antivirus?
No. GrapheneOS is a full operating system, not a scanning app. It protects the phone by hardening Android, strengthening app sandboxing and giving users tighter permission controls, rather than by scanning for viruses.
Does GrapheneOS encrypt my data?
Yes. According to the official GrapheneOS FAQ, all data, file names and other metadata on the data partition are always stored encrypted, using filesystem-based encryption with hardware-based support on the officially supported devices.
Can I use Google Play apps on GrapheneOS?
Yes. Google Play Services and the Play Store can be installed as sandboxed apps from the GrapheneOS App Store, which lets apps that depend on them run, including push notifications and in-app payments.
Can I go back to stock Android after installing GrapheneOS?
Yes. The official GrapheneOS web installer guide includes a section on replacing GrapheneOS with the stock OS.
