 | |
 GrapheneOS home screen | |
| Developer | GrapheneOS[a] |
|---|---|
| OS family | Android (Linux) |
| Working state | Current |
| Source model | Open source |
| Initial release | April 2019; 5 years ago (2019-04) |
| Latest release | 2025032500[4] / March 25, 2025; 1 day ago (2025-03-25) |
| Repository | github |
| Marketing target | Privacy/security-focused operating system |
| Update method | Over-the-air (OTA) or locally |
| Package manager | APK-based |
| Kernel type | Monolithic (Linux) |
| License | MIT,Apache License, various permissive open-source |
| Official website | grapheneos |
GrapheneOS[b] is anopen source, privacy and security-focusedAndroidoperating system that runs on selectedGoogle Pixel devices, includingsmartphones,tablets andfoldables.[5]
The maindeveloper, Daniel Micay, originally worked onCopperheadOS, until a schism over software licensing between the co-founders of Copperhead Limited led to Micay's dismissal from the company in 2018.[6] After the incident, Micay continued working on the Android Hardening project,[6][7] which was renamed as GrapheneOS[7] and announced in April 2019.[6]
In March 2022, two GrapheneOS apps, "Secure Camera" and "Secure PDF Viewer", were released on theGoogle Play Store.[8]
Also in March 2022, GrapheneOS reportedly releasedAndroid 12L forGoogle Pixel devices beforeGoogle did, second to ProtonAOSP.[9]
In May 2023, Micay announced he would step down aslead developer of GrapheneOS and as a GrapheneOS Foundation director.[10] As of September 2024, the GrapheneOS Foundation's Federal Corporation Information lists Micay as one of its directors.[2]
By defaultGoogle apps are not installed with GrapheneOS,[5][12] but users can install asandboxed version ofGoogle Play Services from the pre-installed "App Store".[12] The sandboxed Google Play Services allows access to the Google Play Store and apps dependent on it, along with features includingpush notifications and in-app payments.[12]
Around January 2024,Android Auto support was added to GrapheneOS, allowing users to install it via the App Store.[13] The Sandboxed Google Play compatibility layer settings adds a new permission menu with 4 toggles for granting the minimal access required for wired Android Auto, wireless Android Auto, audio routing and phone calls.[14]
GrapheneOS introduces revocable network access and sensors permission toggles for each installed app.[5][15] GrapheneOS also introduces a PIN scrambling option for thelock screen.[16]
GrapheneOS randomizesWi-FiMAC addresses per connection (to a Wi-Fi network) by default, instead of the Android per-network default.[6][17]
GrapheneOS includes automatic phone reboot when not in use, automatic WiFi and Bluetooth disabling, and system-level disabling of USB-C port, microphone, camera, and sensors for apps. Additionally, it offers the "Contact Scopes" feature, which allows users to select which contacts an app can access.[18]
A hardenedChromium-based web browser andWebView implementation known as Vanadium, is developed by GrapheneOS and included as the default web browser/WebView.[15]
Auditor, a hardware-based attestation app, developed by GrapheneOS, which"provide strong hardware-based verification of the authenticity and integrity of thefirmware/software on the device" is also included.[18]
Apps like Secure Camera and Secure PDF Viewer offer advanced privacy features such as automatic removal ofExif metadata and protection against malicious code in PDF files.[19]
GrapheneOS currently is only compatible withGoogle Pixel devices,[20] due to specific requirements that GrapheneOS has for adding support for a new device.[21]
The operating system can be installed from various platforms, including Windows, macOS, Linux, and Android devices. Two installation methods are available: aWebUSB-based installer, recommended for most users, and acommand-line based installer, intended for more experienced users.[22][better source needed]
In 2019, Georg Pichler ofDer Standard, and other news sources, quotedEdward Snowden saying onTwitter, "If I were configuring a smartphone today, I'd use Daniel Micay's GrapheneOS as the base operating system."[23]
In discussing why services should not force users to installproprietary apps, Lennart Mühlenmeier ofnetzpolitik.org suggested GrapheneOS as an alternative to Apple or Google.[24]
Svět Mobilně andWebtekno repeated the suggestions that GrapheneOS is a good security- and privacy-oriented replacement for standard Android.[25][26]
In a detailed review of GrapheneOS forGolem.de, Moritz Tremmel and Sebastian Grüner said they were able to use GrapheneOS similarly to other Android systems, while enjoying more freedom from Google, without noticing differences from "additional memory protection, but that's the way it should be." They concluded GrapheneOS cannot change how "Android devices become garbage after three years at the latest", but "it can better secure the devices during their remaining life while protecting privacy."[6]
In June 2021, reviews of GrapheneOS,KaiOS,AliOS, andTizen OS, were published in Cellular News. The review of GrapheneOS called it "arguably the best mobile operating system in terms of privacy and security." However, they criticized GrapheneOS for its inconvenience to users, saying "GrapheneOS is completely de-Googled and will stay that way forever—at least according to the developers." They also noticed a "slight performance decrease" and said "it might take two full seconds for an app—even if it’s just the Settings app—to fully load."[27]
In March 2022, writing forHow-To Geek Joe Fedewa said that Google apps were not included due to concerns over privacy, and GrapheneOS also did not include a defaultapp store. Instead, Fedewa suggested,F-Droid could be used.[5]
In 2022, Jonathan Lamont ofMobileSyrup reviewed GrapheneOS installed on aPixel 3, after one week of use. He called GrapheneOS install process "straightforward" and concluded that he liked GrapheneOS overall, but criticized the post-install as "often not a seamless experience like using an unmodified Pixel or aniPhone", attributing his experience to his "over-reliance on Google apps" and the absence of some "smart" features in GrapheneOS default keyboard and camera apps, in comparison to software from Google.[12]
In his initial impressions post a week prior, Lamont said that after an easy install there were issues with permissions for Google'sMessages app, and difficulty importing contacts; Lamont then concluded, "Anyone looking for a straightforward experience may want to avoid GrapheneOS or other privacy-oriented Android experiences since the privacy gains often come at the expense of convenience and ease of use."[28]
In July 2022, Charlie Osborne ofZDNET suggested that individuals who suspect aPegasus infection use a secondary device with GrapheneOS for secure communication.[29]
In January 2023, a Swiss startup company, Apostrophy AG, announced AphyOS, which is a subscription fee-based Android operating system and services "built atop" GrapheneOS.[30][31]
I've stepped down as lead developer of GrapheneOS and will be replaced as a GrapheneOS Foundation director. I'll be ending my use of public social media. I'm unable to handle the escalating level of harassment including recent swatting attacks. There will be a smooth migration.
| Android |
| ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Arch | |||||||||||||||||
| Debian |
| ||||||||||||||||
| Fedora |
| ||||||||||||||||
| Gentoo | |||||||||||||||||
| Mandrake | |||||||||||||||||
| Mandriva | |||||||||||||||||
| Slackware | |||||||||||||||||
| SUSE | |||||||||||||||||
| Other | |||||||||||||||||
| Discontinued |
| ||||||||||||||||
| Linux |
| ||||
|---|---|---|---|---|---|
| XNU | |||||
| QNX | |||||
| Microsoft Windows | |||||
| Zircon | |||||
| FreeBSD/NetBSD | |||||
| OpenHarmony/HarmonyOS NEXT | |||||
| FreeRTOS |
| ||||
| Nintendo system software | |||||
| Minix 3 | |||||
| Symbian | |||||
| Others | |||||
