Article · Wikipedia archive · Last revised Jun 29, 2026

GrapheneOS

GrapheneOS is an open-source mobile operating system focused on security and privacy, available for Google Pixel and future Motorola devices, including smartphones, tablets, and foldables. It is built on the Android Open Source Project (AOSP) and was first released in 2016.

Last revised
Jun 29, 2026
Read time
≈ 26 min
Length
6,024 w
Citations
123
Source
Wikipedia ↗
GrapheneOS
GrapheneOS home screen
GrapheneOS home screen
DeveloperGrapheneOS Foundationa and contributors
Written inJava, Kotlin (UI), C (core), C++, Rust4 and others
OS familyAndroid (Linux)
Working stateCurrent
Source modelOpen source
Initial releaseMarch 2016 (2016-03)5
Latest release20260509006 Edit this on Wikidata / 9 May 2026 (9 May 2026)
Latest preview20260509006 Edit this on Wikidata / 9 May 2026 (9 May 2026)
Repositorygithub.com/GrapheneOS
Marketing targetPrivacy- and security-focused operating system
Update methodOver-the-air (OTA) or via USB (ADB sideloading)
Package managerAPK-based
Instruction setsARMv8 or later (ARMv8.5-A or newer is recommended because of hardware memory tagging support), x86-64 (emulator)
Kernel typeMonolithic (Linux/Android kernel)
InfluencedDivestOS, secureblue
Influenced byOpenBSD, PaX
LicenseMIT, Apache License, various permissive open-source licenses
Official websitegrapheneos.org
TaglinePrivacy and security, crafted for your mobile device, usable by everyone.
GrapheneOS Foundation
FormationMarch 17, 2023 (2023-03-17)
Registration no.1485757-72
Legal statusNonprofit corporation
FocusMobile security, Defense in depth, Hardening, Attack surface reduction
HeadquartersToronto, Ontario, Canada
Directors
  • Khalykbek Yelshibekov
  • Daniel Micay
  • Dmytro Mukhomor
2
Websitegrapheneos.org Edit this at Wikidata
ASN40806

GrapheneOSb (/ˈɡræfiːn.oʊˈɛs/) is an open-source mobile operating system focused on security and privacy, available for Google Pixel and future Motorola devices, including smartphones, tablets, and foldables. It is built on the Android Open Source Project (AOSP) and was first released in 2016.

The project focuses on researching and improving the privacy and security of Android, primarily through defense in depth improvements and attack surface reduction. The hardening includes low-level system components, as well as improvements to application sandboxing and the permission model.

GrapheneOS is free and open-source. The system components are mostly published under permissive licenses, such as the MIT License or Apache License 2.0, with some components using the GNU GPL-2.0 license. GrapheneOS can be installed using an intuitive web installer or a traditional command-line-based installation environment.

The nonprofit GrapheneOS Foundation was founded in Toronto, Ontario, Canada, by Daniel Micay, Dmytro Mukhomor, and Khalykbek Yelshibekov in March 2023. It received large contributions from donors such as Ethereum developer Vitalik Buterin and Twitter founder Jack Dorsey. As of April 2026, the operating system had approximately 400K active users.

History

The main developer, Daniel Micay, co-founded and originally worked on CopperheadOS until a schism over software licensing between the co-founders of Copperhead Limited led to Micay's dismissal from the company in 2018.7 Micay continued working on the Android Hardening project, which was renamed to GrapheneOS and announced in April 2019 as the "true successor" to CopperheadOS, with the goal of restoring the same functions.78 The project's website states that CopperheadOS was renamed to GrapheneOS.9

In March 2022, two GrapheneOS apps, "Secure Camera" and "Secure PDF Viewer", were released on the Google Play Store,10 along with Android 12L for Google Pixel devices.11

In July 2025, the GrapheneOS Foundation stated it was pursuing a partnership with a "major Android OEM" with the goal of engineering devices with official GrapheneOS support that meet the project's extensive hardware and vendor support requirements.1213 In March 2026, an official announcement was made, revealing that the partner is Motorola Mobility.14

As of April 2026, GrapheneOS developers reported they had around 400K active users. The figure is an inexact estimate based on statistics generated from the access logs of the update servers. This is the only way for the GrapheneOS Foundation to approximate the number of users, since no telemetry mechanism is included in the operating system.15

Features

GrapheneOS' default "App Store" (formerly known as just "Apps") source ↗

Sandboxed Google Play

By default, Google apps and services are not present on GrapheneOS,1617 but users can install a sandboxed version of Google Play Services from the pre-installed "App Store".17 The sandboxed Google Play Services implementation allows access to the Google Play Store and apps dependent on it, along with features including push notifications (Firebase Cloud Messaging) and in-app payments.17

This differs from other custom Android distributions, such as CalyxOS, iodéOS, or /e/OS, that replace Google Play Services with microG. According to some analysts, the microG implementation is problematic because it can log users out of the Play Store and not allow them to download more apps.18

In December 2023, Android Auto support was added to GrapheneOS, allowing users to install it via the App Store.19 The Sandboxed Google Play compatibility layer settings add a new permission menu with 4 toggles for granting the minimal access required for wired Android Auto, wireless Android Auto, audio routing, and phone calls.2021

GrapheneOS provides stub implementations for multiple features of Google Play Services, including Wi-Fi positioning, geocoding, and reverse geocoding. By default, all location requests are rerouted to the regular AOSP geolocation subsystem, which uses Assisted GNSS (A-GNSS) data and performs the location calculations locally. The GrapheneOS Foundation provides proxy servers for both Secure User Plane Location (SUPL) and Predicted Satellite Data Service (PSDS).22

GrapheneOS improves the privacy of PSDS on devices using Qualcomm GNSS hardware by removing the User-Agent header containing unique hardware identifiers, such as the serial number of the chip.12324

The use of the Google Wi-Fi positioning service can optionally be enabled in the settings if Sandboxed Google Play is installed.25 Alternatively, the Apple Wi-Fi positioning system can be used, either directly or through a proxy hosted by the GrapheneOS Foundation. The GrapheneOS Foundation also hosts an instance of the Nominatim geocoder, which uses OpenStreetMap data.2622

Security and privacy features

GrapheneOS introduces revocable network access and sensor permission toggles for each installed app.1627 It also adds a PIN scrambling option for the lock screen as well as a duress PIN/password, which will wipe all data and installed eSIMs on the device when entered on the lock screen instead of a regular PIN/password. The duress wipe is performed instantly and cannot be interrupted.2829

GrapheneOS randomly generates a new MAC address every time a Wi-Fi connection is established, instead of the default Android behavior of randomizing the address per Wi-Fi network.730

GrapheneOS includes a feature that automatically initiates a reboot of the device when at rest for a set time period in order to revert from the after first unlock (AFU) state to before first unlock (BFU), wiping the cryptographic keys used for disk encryption from RAM. It aims to make brute-force attacks significantly more difficult by enforcing the throttling of unlock attempts through the secure element. The automatic reboot feature is enabled by default and configured to activate after 18 hours. The time period can be set to values between 10 minutes and 72 hours in the settings.3132 iOS 18 implemented a similar feature called Inactivity Reboot with a fixed time of 7 days. The time period was shortened to 72 hours in version 18.1.333435 It is not clear whether Apple was inspired by GrapheneOS.36

It also includes automatic Wi-Fi and Bluetooth disabling, along with software and hardware-level disabling of the USB-C port and pogo pins (as found on the Pixel Tablet). The USB interfaces can be operated in 5 modes, which can be configured in the settings:22

  • Off (disables charging to prevent the exploitation of possible USB-PD vulnerabilities; charging is still possible when the device is powered off)
  • Charging-only (disables all data connectivity)
  • Charging-only when locked
  • Charging-only when locked, except before first unlock
  • On (standard Android behavior)

By default, the Charging-only when locked setting is used.22

GrapheneOS can also disable the microphone, camera, and sensors for apps. Additionally, it offers the Contact and Storage Scopes feature, which allows users to select which specific contacts or files/folders an app can access.22

A hardened Chromium-based web browser and WebView implementation known as Vanadium is developed by GrapheneOS and included as the default web browser and system WebView.27 It includes automatic updates, process and site-level sandboxing, disabling the V8 JavaScript just-in-time (JIT) compiler by default for attack surface reduction, and built-in ad and tracker blocking.37 Vanadium enables JIT-less WebAssembly support through the DrumBrake interpreter originally developed by Microsoft and upstreamed into the Chromium project.38

Auditor, a hardware-based attestation app developed by GrapheneOS, which "provide strong hardware-based verification of the authenticity and integrity of the firmware/software on the device" is also included.22 The app also includes an optional, scheduled remote verification feature, which runs in the background and performs regular verifications against the GrapheneOS attestation service. It can alert users via email if the device fails to provide valid attestations in time. The remote attestation interval and permitted time before an alert can be configured by the user using the web portal.39 Both the Auditor app and the AttestationServer backend are open source and permissively licensed under the MIT license.40

Apps like Secure Camera and Secure PDF Viewer offer features such as automatic removal of Exif metadata and protection against malicious code in PDF files by opening them within a sandboxed PDF.js environment in the hardened Vanadium WebView.41

GrapheneOS also includes a hardened memory allocator (hardened_malloc) intended to provide substantial defenses against common classes of vulnerabilities such as heap memory corruption.42 In addition, its Chromium-based browser/WebView (Vanadium) enables further exploit mitigations beyond upstream defaults (e.g., type-based control-flow integrity (CFI), stronger stack-smashing protection (SSP), or zero-initialization of variables).2225

Unlike AOSP, the stock Pixel operating system, and other Android-based systems, GrapheneOS heavily makes use of the memory tagging extension (MTE) found in the processor cores of ARM chips using the ARMv8.5-A architecture or newer.4344 The first devices on the market featuring MTE-enabled processors were Google's Pixel 8 and Pixel 8 Pro models, released in October 2023.45 GrapheneOS added support for the feature in November of the same year.46 GrapheneOS developers noted that the feature could especially be of importance for instant messaging applications, such as WhatsApp or Signal, which use large amounts of memory-unsafe code for features like WebRTC and are common targets of attackers.47

In March 2024, the team reported that the use of hardware memory tagging helped it uncover a high-severity memory corruption vulnerability in an Android Bluetooth Low Energy system component.48 The bug was acknowledged by Google and became known as CVE-2024-23694.49 It was fixed in the May 2024 Pixel Update Bulletin.50

The underlying Linux kernel is covered by the hardware tag-based KernelAddressSanitizer (KASan).51

Hardware compatibility

GrapheneOS maintains an extensive list of hardware and OEM support requirements. These include bootloader requirements, such as Android Verified Boot with rollback protection, the ability to unlock the bootloader, and relock it with a custom signing key.52

A high-quality secure element is required in order to facilitate full disk encryption and storage of sensitive cryptographic secrets. The secure element must provide support for the Android StrongBox key storage mechanism, Weaver API, which handles the throttling of unlock attempts, insider attack resistance, i.e., requiring authentication before firmware updates can be applied to the secure element, and hardware-based key attestation (for example used by the built-in Auditor app).53

The USB controller must be configurable by the operating system via device drivers and must allow completely disabling USB at a hardware level in order to minimize the attack surface.1

The wireless hardware must fully support Wi-Fi anonymity, including MAC address and probe sequence number randomization, and shall not leak unique identifiers in other ways.53

JTAG or other debugging interfaces must be disabled when the device is locked to further reduce the attack surface.1

GrapheneOS mandates a minimum OEM support period of 5 years for smartphones and 7 years for tablets. This includes regular updates to firmware, drivers, hardware abstraction layers, and other device-specific code without delays longer than a week.541

As of March 2026, GrapheneOS is only compatible with Google Pixel devices,55 due to the specific requirements listed above.5613 In October 2025, GrapheneOS said that it was working with a "major" Android OEM on future devices that would support the OS on Qualcomm Snapdragon platforms, and that they will be the flagship devices, expected to appear in Q4 2026 or Q1 2027.57 In March 2026, it was revealed that this partner is Motorola Mobility, and a device list will be released sometime later that year.14

Installation

GrapheneOS web installer source ↗

The operating system can be installed from various platforms, including Windows, macOS, Linux, and Android devices. Two installation methods are available: a web-based installer, recommended for most users, and a command-line-based installer, intended for more experienced users.5859

The web installer makes use of the WebUSB API and is based on the fastboot.js library, a JavaScript implementation of the Fastboot utility developed by Danny Lin. It has been inspired by Google's Android Flash Tool, which uses the same API for performing the installation in the browser. It is currently only supported in Chromium-based web browsers.60 Unlike the command-line installation script, it does not require the installation of any additional software.6162

Recommended post-installation steps include disabling OEM unlocking, which is automatically performed by the setup wizard, as well as verifying the Verified Boot hash of the installed OS image. The installation can additionally be verified using the Auditor app, either with the help of a second device or by using remote attestation.62

Jack Wallen of ZDNET described the installation process as follows: "It sounds difficult, but it's really not", and that it took him roughly ten minutes to complete the installation.63

Reception

In 2019, Georg Pichler of Der Standard, and other news sources, quoted Edward Snowden saying on Twitter, "If I were configuring a smartphone today, I'd use Daniel Micay's GrapheneOS as the base operating system."656667

In discussing why services should not force users to install proprietary apps, Lennart Mühlenmeier of netzpolitik.org suggested GrapheneOS as an alternative to Apple or Google.68

Svět Mobilně and Webtekno repeated the suggestions that GrapheneOS is a good security- and privacy-oriented replacement for standard Android.6970

In a detailed review of GrapheneOS for Golem.de, Moritz Tremmel and Sebastian Grüner said they were able to use GrapheneOS similarly to other Android systems, while enjoying more freedom from Google, without noticing differences from "additional memory protection, but that's the way it should be." They concluded GrapheneOS cannot change how "Android devices become garbage after three years at the latest", but "it can better secure the devices during their remaining life while protecting privacy."7

Jack Dorsey, founder of Twitter and Bluesky, promoted GrapheneOS in January 2021.71 According to the GrapheneOS Foundation, he later donated US$1 million to the project as part of his StartSmall initiative.72

In June 2021, reviews of GrapheneOS, KaiOS, AliOS, and Tizen OS were published in Cellular News. The review of GrapheneOS called it "arguably the best mobile operating system in terms of privacy and security." However, they criticized GrapheneOS for its inconvenience to users, saying "GrapheneOS is completely de-Googled and will stay that way forever—at least according to the developers." They also noticed a "slight performance decrease" and said, "it might take two full seconds for an app—even if it's just the Settings app—to fully load."73

In March 2022, writing for How-To Geek, Joe Fedewa said that Google apps were not included due to concerns over privacy, and GrapheneOS also did not include a default app store. Instead, Fedewa suggested, F-Droid could be used.16

In 2022, Jonathan Lamont of MobileSyrup reviewed GrapheneOS installed on a Pixel 3 after one week of use. He called the GrapheneOS install process "straightforward" and concluded that he liked GrapheneOS overall, but criticized the post-install as "often not a seamless experience like using an unmodified Pixel or an iPhone", attributing his experience to his "over-reliance on Google apps" and the absence of some "smart" features in GrapheneOS default keyboard and camera apps, in comparison to software from Google.17

In his initial impressions post a week prior, Lamont said that after an easy install, there were issues with permissions for Google's Messages app, and difficulty importing contacts; Lamont then concluded, "Anyone looking for a straightforward experience may want to avoid GrapheneOS or other privacy-oriented Android experiences since the privacy gains often come at the expense of convenience and ease of use."74

In July 2022, Charlie Osborne of ZDNET suggested that individuals who suspect a Pegasus infection use a secondary device with GrapheneOS for secure communication.75

In January 2023, a Swiss startup company, Apostrophy AG, announced AphyOS, which is a subscription fee-based Android operating system and services "built atop" GrapheneOS.7677 The GrapheneOS team dismissed the project being based on GrapheneOS as misleading marketing due to AphyOS being based on an earlier version of Android, using the LineageOS update client and other inconsistencies.78

Avatar of vitalik.eth
Avatar of vitalik.eth source ↗
 vitalik.eth Twitter
@VitalikButerin

Use @GrapheneOS.

Jul 7, 202579

Avatar of GrapheneOS
Avatar of GrapheneOS source ↗
 GrapheneOS Twitter
@GrapheneOS

European authoritarians and their enablers in the media are misrepresenting GrapheneOS and even Pixel phones as if they're something for criminals. GrapheneOS is opposed to the mass surveillance police state these people want to impose on everyone.

https://www.xatakandroid.com/sociedad/cada-vez-que-vemos-google-pixel-pensamos-que-puede-ser-narcotraficante-movil-perfecto-para-crimen-sencilla-razon

Jul 2, 202580

Vitalik Buterin, developer of the Ethereum cryptocurrency, made two large donations to the GrapheneOS Foundation in July and December 2023. He donated 55 ETH, at the time worth around $110,000 USD, and 150 ETH, worth around $300,000, respectively. 8182 Buterin recommended GrapheneOS on multiple occasions, including a tweet in July 2025.83

GrapheneOS is a popular choice within the DeGoogle movement.848532

The operating system was reviewed by Jesse Smith of DistroWatch and by Jonathan Corbet of LWN.net in March and July 2025 respectively.8687

Jack Wallen of ZDNET reviewed GrapheneOS in November 2025 in an article titled "I finally tried GrapheneOS on my Pixel, and it's the secure Android alternative I've been waiting for". He described that the development team "takes usability seriously", and that the operating system looks and feels like Android.63

In late 2025, GrapheneOS moved its infrastructure away from servers hosted by French provider OVHcloud over privacy and security concerns.8889 This not only applies to servers located inside France but also to servers in Canada and abroad owned by the company. The project stated, "France isn't a safe country for open source privacy projects. They expect backdoors in encryption and for device access too. Secure devices and services are not going to be allowed (in France)."
France voted in favor of a proposed, controversial EU measure commonly referred to as Chat Control, which could require providers to create and open a backdoor to their services to enable authorities to scan user content.9091

GrapheneOS gained attention in the media in March 2026 after stating the project would not comply with planned and heavily criticized age verification laws such as the California Digital Age Assurance Act (Assembly Bill 1043) or Brazil's Digital Statute for Children and Adolescents (Law No. 15,211/2025), even if it meant that future Motorola devices that will come with the OS preinstalled couldn't be sold in these regions.92

See also

See also

References and notes

  1. "Frequently Asked Questions – GrapheneOS". grapheneos.org. Archived from the original on 17 September 2024. Retrieved 18 September 2024.
  2. "Federal Corporation Information – 1485757-7". Government of Canada. 9 December 2025.
  3. "History – GrapheneOS". grapheneos.org. Retrieved 18 September 2024.{{cite web}}: CS1 maint: deprecated archival service (link)
  4. "Memory Safe Languages in Android 13". Archived from the original on 30 March 2024. Retrieved 5 April 2024.
  5. "Legacy changelog - History - GrapheneOS". grapheneos.org. Retrieved 23 May 2026.
  6. "GrapheneOS Releases". 9 May 2026.
  7. Tremmel, Moritz; Grüner, Sebastian (11 December 2019). "GrapheneOS: Ein gehärtetes Android ohne Google, bitte" [GrapheneOS: A hardened Android without Google, please]. Golem.de (in German). pp. 1–3. Archived from the original on 15 November 2021. Retrieved 20 July 2022.
  8. Baader, Hans-Joachim (9 April 2019). "Android Hardening wird zu GrapheneOS" [Android Hardening becomes GrapheneOS]. Pro-Linux (in German). Archived from the original on 21 September 2019. Retrieved 17 September 2019.
  9. De Rentiis, Katharina; Geus, Julian; Freiling, Felix (1 March 2026). "The investigator's friend and foe: A forensic analysis of GrapheneOS". Forensic Science International: Digital Investigation. DFRWS EU 2026 – Selected Papers from the 13th Annual Digital Forensics Research Conference Europe. 56 302048. doi:10.1016/j.fsidi.2026.302048. ISSN 2666-2817.
  10. Hazarika, Skanda (4 March 2022). "GrapheneOS brings its camera and PDF viewer apps to the Play Store". XDA. Archived from the original on 22 June 2022. Retrieved 22 June 2022.
  11. Wilde, Damien (11 March 2022). "Privacy-focused GrapheneOS based upon Android 12L comes to Pixel 6 in latest beta". 9to5Google. Archived from the original on 28 June 2022. Retrieved 28 June 2022.
  12. "GrapheneOS (@GrapheneOS@grapheneos.social)". GrapheneOS Mastodon. 19 July 2025. Retrieved 10 April 2026. We're working with a major OEM towards a subset of their future devices meeting our hardware security and update requirements. The goal is for those to have official GrapheneOS support. Initially, these will only be flagship devices because SoC security features we care about are only on flagship SoC chips for now.
  13. "Which devices will be supported in the future? – Frequently Asked Questions". grapheneos.org. Archived from the original on 7 February 2025. Retrieved 12 February 2025.
  14. "Motorola's new partnership with GrapheneOS". Motorola News. 2 March 2026. Archived from the original on 9 April 2026. Retrieved 2 March 2026.
  15. @GrapheneOS (23 April 2026). "We know we have at least around 400k users based on update downloads" (Tweet). Retrieved 28 April 2026 – via X (formerly Twitter).
  16. Fedewa, Joe (23 March 2022). "What Is GrapheneOS, and How Does It Make Android More Private?". How-To Geek. Archived from the original on 10 June 2022. Retrieved 4 July 2022.
  17. Lamont, Jonathan (20 March 2022). "A week with GrapheneOS exposed my over-reliance on Google". MobileSyrup. Blue Ant Media. Archived from the original on 6 July 2022. Retrieved 6 July 2022.
  18. Name; Milano, Matt (28 February 2025). "GrapheneOS Review: The Most Private and Secure Android OS". WebProNews. Archived from the original on 9 January 2026. Retrieved 9 January 2026.
  19. Schoon, Ben (3 January 2024). "GrapheneOS, a privacy-focused version of Android, is adding Android Auto support". 9to5Google. Archived from the original on 3 January 2024. Retrieved 3 January 2024.
  20. "2023123000 – Releases". grapheneos.org. Archived from the original on 20 December 2023. Retrieved 3 January 2024.
  21. Popa, Bogdan (4 January 2024). "Goodbye, Android? Android Auto Launching on Alternative Operating System". autoevolution. Retrieved 22 May 2026.
  22. "Features overview". GrapheneOS. Archived from the original on 28 January 2023. Retrieved 5 February 2023.
  23. "Smartphones With Popular Qualcomm Chip Secretly Share Private Information With US Chip-Maker | Nitrokey". Nitrokey. Retrieved 28 April 2026.
  24. Okunytė, Paulina (2 May 2023). "Android phone chip provider was secretly collecting user data". Cybernews. Retrieved 28 April 2026.
  25. "Usage guide". GrapheneOS. Archived from the original on 3 February 2023. Retrieved 3 November 2025.
  26. "GrapheneOS servers". grapheneos.org. Archived from the original on 7 April 2026. Retrieved 12 April 2026.
  27. Mascellino, Alessandro (16 June 2022). "What is GrapheneOS and how does it improve privacy and security?". Android Police. Archived from the original on 22 July 2022. Retrieved 17 August 2022.
  28. Speight, Adam (29 September 2021). "This is why James Bond doesn't use an iPhone". Wired UK. ISSN 1357-0978. Archived from the original on 17 August 2022. Retrieved 17 August 2022.
  29. Wankhede, Calvin (10 August 2025). "I use a duress PIN to protect my data — here's how it works and why everyone needs one". Android Authority. Retrieved 7 March 2026.
  30. Valeri, Vitor (17 June 2022). "O que é o GrapheneOS? Como ele aumenta a segurança e a privacidade do celular?". Oficina da Net (in Brazilian Portuguese). Archived from the original on 22 June 2022. Retrieved 5 August 2022.
  31. Toulas, Bill (14 January 2024). "GrapheneOS: Frequent Android auto-reboots block firmware exploits". BleepingComputer. Archived from the original on 5 December 2025. Retrieved 5 April 2026.
  32. Wankhede, Calvin (26 March 2023). "I ditched Google and installed the privacy-focused GrapheneOS on my Pixel". Android Authority. Retrieved 31 May 2026.
  33. Cox, Joseph (7 November 2024). "Police Freak Out at iPhones Mysteriously Rebooting Themselves, Locking Cops Out". 404 Media. Retrieved 5 April 2026.
  34. Clover, Juli (14 November 2024). "iOS 18 Security Feature Causes iPhone to Reboot After Three Days of Inactivity". MacRumors. Retrieved 5 April 2026.
  35. Franceschi-Bicchierai, Lorenzo (14 November 2024). "New Apple security feature reboots iPhones after 3 days, researchers confirm". TechCrunch. Retrieved 5 April 2026.
  36. "No credit given to others who deployed it and innovated with it much earlier but rather downplaying it and making misleading claims about it. It lowers our opinion of Apple's security team quite a lot. We got no credit for our July 2021 locked device auto-reboot when they did it in October 2024". GrapheneOS Mastodon. 9 September 2025. Retrieved 8 May 2026.
  37. Goodwin, Richard (4 April 2024). "GrapheneOS 101: What You Need To Know". KnowYourMobile. Retrieved 17 April 2025.
  38. Norman, Johnathan (16 February 2022). "Introducing Enhanced Security for Microsoft Edge". Microsoft Browser Vulnerability Research. Retrieved 25 April 2026.
  39. "Tutorial | attestation.app". attestation.app. Retrieved 11 March 2026.
  40. "Source | attestation.app". attestation.app. Retrieved 11 March 2026.
  41. Wilde, Damien (16 April 2024). "GrapheneOS review: De-Googled goodness [Video]". 9to5Google. Retrieved 30 January 2025.
  42. Stefanski, Nicolas (22 September 2025). "Exploring GrapheneOS secure allocator: Hardened Malloc". Synacktiv. Archived from the original on 10 January 2026. Retrieved 11 April 2026.
  43. Bannister, Steve (5 August 2019). "Memory Tagging Extension: Enhancing memory safety through architecture". developer.arm.com. Archived from the original on 8 February 2026. Retrieved 12 April 2026.
  44. "GrapheneOS (@GrapheneOS@grapheneos.social)". GrapheneOS Mastodon. 10 November 2023. Retrieved 12 April 2026. GrapheneOS on the Pixel 8 is the first platform using ARM MTE in production and it's such a massive improvement for exploit protection that it has to be considered a hard requirement going forward.
  45. Brand, Mark (3 November 2023). "First handset with MTE on the market". Project Zero. Retrieved 12 April 2026.
  46. "GrapheneOS now has hardware memory tagging support in our Stable channel. Memory tagging greatly improves protection against targeted attacks. Thanks to hardware support on the Pixel 8 and Pixel 8 Pro, it's extremely low overhead despite the massive benefits it's able to provide". GrapheneOS Mastodon. 2 November 2023. Retrieved 12 April 2026.
  47. "We mentioned Signal/WhatsApp because despite having end-to-end encryption, they both have a massive amount of remote attack surface, use tons of memory unsafe code for handling media, voice/video calls, etc. along with not using sandboxing. E2EE does no good if app is exploited". GrapheneOS Mastodon. 26 November 2023. Retrieved 25 April 2026.
  48. "Our hardware memory tagging support for Pixel 8 and Pixel 8 Pro has uncovered a memory corruption bug introduced in Android 14 QPR2 for Bluetooth LE. We're currently investigating it to determine how to fix or temporarily disable the newly introduced feature as a workaround". GrapheneOS Mastodon. 9 March 2024. Archived from the original on 13 April 2026. Retrieved 12 April 2026.
  49. "Android security acknowledgements". source.android.com. Retrieved 12 April 2026. Daniel Micay at the GrapheneOS Foundation CVE-2024-23694
  50. "Pixel Update Bulletin—May 2024". source.android.com. 13 June 2024. Retrieved 12 April 2026.
  51. "Kernel Address Sanitizer (KASAN) — The Linux Kernel documentation". www.kernel.org. Retrieved 12 April 2026.
  52. "GrapheneOS-Supported Devices: A Complete List". Cape. 26 July 2025. Archived from the original on 22 April 2026. Retrieved 28 April 2026.
  53. Kuketz, Mike (11 December 2023). "Weshalb GrapheneOS aktuell nur Google Pixel-Geräte unterstützt" [Why GrapheneOS currently only supports Google Pixel devices] (in German). Retrieved 28 April 2026.
  54. Kuketz, Mike (19 December 2023). "GrapheneOS: Der Goldstandard unter den Android-ROMs" [GrapheneOS: The gold standard among Android ROMs] (in German).
  55. "Which devices are supported? – Frequently Asked Questions". grapheneos.org. Archived from the original on 7 February 2025. Retrieved 12 February 2025.
  56. Perkins, Stephen (16 June 2022). "GrapheneOS: Everything you need to know about the privacy-focused Android fork". Android Police. Retrieved 17 April 2025.
  57. Multiple sources:
  58. "Install | GrapheneOS". grapheneos.org. Retrieved 12 April 2026.
  59. Perkins, Stephen (16 June 2022). "How to install GrapheneOS". Android Police. Retrieved 16 April 2025.
  60. "WebUSB | Can I use... Support tables for HTML5, CSS3, etc". caniuse.com. Retrieved 28 April 2026.
  61. "How To Install GrapheneOS: A Step-by-Step Guide". Cape. 20 July 2025. Archived from the original on 29 April 2026. Retrieved 8 May 2026.
  62. "Web installer | Install | GrapheneOS". grapheneos.org. Retrieved 8 May 2026.
  63. Wallen, Jack (21 November 2025). Picaro, Elyse Betters (ed.). "I finally tried GrapheneOS on my Pixel, and it's the secure Android alternative I've been waiting for". ZDNET. Archived from the original on 4 April 2026. Retrieved 11 April 2026.
  64. Edward Snowden [@Snowden] (21 September 2019). "If I were configuring a smartphone today, I'd use @DanielMicay's @GrapheneOS as the base operating system. I'd desolder the microphones and keep the radios (cellular, wifi, and bluetooth) turned off when I didn't need them. I would route traffic through the @torproject network" (Tweet) – via Twitter.
  65. Pichler, Georg (24 September 2019). "Wie Edward Snowden sein Smartphone einrichten würde" [How Edward Snowden would set up his smartphone]. Der Standard (in Austrian German). Archived from the original on 29 October 2019. Retrieved 29 October 2019.
  66. "Edward Snowden da a conocer las condiciones de seguridad para usar su smartphone" [Edward Snowden reveals the security conditions to use his smartphone]. La República (in Spanish). 2 October 2019. Archived from the original on 29 October 2019. Retrieved 29 October 2019.
  67. Rall, Philipp (23 June 2022). ""Ich würde zu Hause kein WiFi benutzen": Edward Snowden empfiehlt Alternativen" ["I wouldn't use WiFi at home": Edward Snowden recommends alternatives]. Futurezone (in German). Archived from the original on 11 August 2022. Retrieved 3 August 2022.
  68. Mühlenmeier, Lennart (19 July 2019). "Warum Post, Bank und Co. ihre Kunden nicht zwingen sollten, Apps zu benutzen" [Why Post, Bank and Co. shouldn't force their customers to use apps]. netzpolitik.org (in German). Archived from the original on 18 September 2019. Retrieved 18 November 2019.
  69. Šlik, Jáchym (6 April 2019). "GrapheneOS chce napravit bezpečnostní prohřešky Androidu" [GrapheneOS wants to fix Android security violations]. Svět Mobilně (in Czech). Archived from the original on 8 April 2019. Retrieved 17 September 2019.
  70. Kalelioğlu, Eray (3 April 2019). "Android Tabanlı İşletim Sistemi 'GrapheneOS' ile Tanışın" [Meet the GrapheneOS Android-Based Operating System]. Webtekno (in Turkish). Archived from the original on 3 April 2019. Retrieved 17 September 2019.
  71. Lee, Derrek (30 January 2021). "Twitter CEO Jack Dorsey tweets cryptic link to a custom Android ROM". Android Central. Archived from the original on 12 March 2026. Retrieved 4 May 2026.
  72. @GrapheneOS (12 March 2026). "Jack Dorsey donated $1m to GrapheneOS as part of his StartSmall initiative providing no strings attached funding to non-profit organizations" (Tweet). Retrieved 4 May 2026 – via X (formerly Twitter).
  73. Diane (28 June 2021). "GrapheneOS: A Hardened Android Alternative (Review)". CellularNews. Archived from the original on 14 July 2022. Retrieved 4 July 2022.
  74. Lamont, Jonathan (13 March 2022). "I replaced Android on a Pixel 3 with an Android-based privacy OS". MobileSyrup. Blue Ant Media. Archived from the original on 6 July 2022. Retrieved 6 July 2022.
  75. Osborne, Charlie (30 May 2024). Windsor, Alyson (ed.). "How to find and remove spyware from your phone". ZDNET. Archived from the original on 20 August 2022. Retrieved 20 August 2022.
  76. Savov, Vlad (16 January 2023). "Swiss Startup Takes On Apple and Google With Privacy-First OS". Bloomberg News. Archived from the original on 23 May 2023. Retrieved 25 May 2023.
  77. Savov, Vlad (17 January 2023). "Swiss startup takes on Apple and Google with privacy-first OS". The Star. Archived from the original on 25 May 2023. Retrieved 25 May 2023.
  78. "Apostrophy mobile system, Punkt MC02".
  79. vitalik.eth [@VitalikButerin] (7 July 2025). "Use @GrapheneOS" (Tweet) – via X (formerly Twitter).
  80. GrapheneOS [@GrapheneOS] (2 July 2025). "European authoritarians and their enablers in the media are misrepresenting GrapheneOS and even Pixel phones as if they're something for criminals. GrapheneOS is opposed to the mass surveillance police state these people want to impose on everyone. https://www.xatakandroid.com/sociedad/cada-vez-que-vemos-google-pixel-pensamos-que-puede-ser-narcotraficante-movil-perfecto-para-crimen-sencilla-razon" (Tweet) – via X (formerly Twitter).
  81. "Transaction Details - Ethereum Transaction Hash: 0xc41c351975e1a3f8018fa5d461b396bbb6a34895d7946af81750918ff4bda7a7". Etherscan. Retrieved 28 May 2026.
  82. etherscan.io. "Transaction Details - Ethereum Transaction Hash: 0xd7bf89a1b308021563479eec619d0286bd8af492fe01386e6e365accdba0223e". Etherscan. Retrieved 28 May 2026.
  83. Solanky, Gopal (8 July 2025). "Vitalik Buterin Embraces GrapheneOS: What Is It and Why It's Trending?". The Crypto Times. Retrieved 28 May 2026.
  84. Palmer, Jordan (13 August 2022). "I tried completely de-Googled Android — here's what happened". Tom's Guide. Retrieved 24 April 2026.
  85. Hadlee, Simons (16 April 2026). "This Google user data scandal shows why more people are using GrapheneOS". Android Authority. Retrieved 24 April 2026.
  86. Smith, Jesse (31 March 2025). "DistroWatch Weekly, Issue 1115". DistroWatch. Archived from the original on 16 March 2026. Retrieved 4 April 2026.
  87. Corbet, Jonathan (24 July 2025). "Graphene OS: a security-enhanced Android build". LWN.net. Archived from the original on 2 March 2026. Retrieved 4 April 2026.
  88. Stöckel, Marc (25 November 2025). "GrapheneOS verlässt OVH: "Frankreich ist kein sicheres Land für Privacy-Projekte"" [GrapheneOS is leaving OVH: "France is not a safe country for privacy projects"]. Golem.de. Archived from the original on 6 March 2026. Retrieved 13 April 2026.
  89. Butler, Georgia (12 December 2025). "GrapheneOS migrates workloads off of OVH, cites issues with France's digital privacy policy". www.datacenterdynamics.com. Archived from the original on 31 December 2025. Retrieved 23 March 2026.
  90. Speed, Richard (28 November 2025). "GrapheneOS bails on OVHcloud over France's privacy stance". The Register. Archived from the original on 17 December 2025.
  91. Thierry, Gabriel (26 November 2025). ""Pays de plus en plus autoritaire", GrapheneOS coupe les ponts avec la France après une polémique explosive" ["An increasingly authoritarian country": GrapheneOS cuts ties with France following an explosive controversy]. ZDNET (in French). Archived from the original on 16 February 2026. Retrieved 23 March 2026.
  92. "GrapheneOS will remain usable by anyone around the world without requiring personal information, identification or an account. GrapheneOS and our services will remain available internationally. If GrapheneOS devices can't be sold in a region due to their regulations, so be it". GrapheneOS Mastodon. 20 March 2026. Archived from the original on 24 March 2026. Retrieved 23 March 2026.
  1. The developers have been referred to as the "GrapheneOS developers" or the "GrapheneOS project" on GrapheneOS' frequently asked questions page.1 The Canadian nonprofit organization "GrapheneOS Foundation"2 was created "in March 2023 to handle the intake and distribution of donations".3
  2. Briefly known by the working title Android Hardening or AndroidHardening during development
External links