Operating system
GrapheneOS
GrapheneOS · CA · since 2019-04
Hardened Android build for Pixel devices. Removes Google Play Services by default, sandboxes them when re-enabled per-profile. Best mobile privacy you can run without giving up modern apps. Pixel-only.
Open sourceAuditedE2EEApache-2.0Free
Pros
- + Modern apps still work via sandboxed Play
- + Excellent security baseline
- + Active development
Cons
- − Only on Pixel devices
- − Banking apps occasionally hostile
- − Verified boot prevents root
Highlights
- ▸Sandboxed Google Play (no system privilege)
- ▸Hardware-backed verified boot
- ▸Per-app network and sensor permissions
Specs at a glance
- License
- Apache-2.0
- Open source
- Yes
- E2EE
- Yes
- Audited
- Yes
- Self-host
- No
- HQ
- CA
- Pricing
- free
- Platforms
- 1 platforms