GrapheneOS has been ported to Android 17

Posted by Cider9986 12 hours ago

Comments

Comment by jordand 11 hours ago

I've been running GrapheneOS for 7 months now and I'm not going back. When I bought my Pixel 10 last year, I wasn't actually planning on trying Graphene for a while....until I noticed Google had force bundled a 'Wicked For Good' movie promo theme with the latest security update.

Comment by sivers 11 hours ago

Ha! Me too! Exact same. Bought a Pixel 10. Intended to do the default Android for a while. But it was filled with ads for “Wicked” which had me looking at my phone with a sneer on my face I couldn't erase - as if someone had smeared feces all over it and threw it on my bed.

So I jumped straight to GrapheneOS, which was way easier and less extreme than I had been warned. So beautifully minimal, with no crap. Now my phone feels like a simple Linux (Void/Arch) PC. So wonderful.

Comment by edwcross 5 hours ago

Does it affect the photo quality? It used to require letting go of the default photo app and thus a downgrade in photo processing.

Comment by Cider9986 4 hours ago

No, if you install the Google camera there is no difference in quality and by revoking network you don't lose privacy.

Comment by dns_snek 2 hours ago

> by revoking network you don't lose privacy

Be careful, apps can still communicate with other apps, e.g. revoking the network permission doesn't stop apps from fetching and displaying ads over the network. I don't know enough about Android internals to understand the mechanisms behind it, but clearly there are ways for apps to exfiltrate data.

> Trying to use Network as a complete data exfiltration toggle isn't the intended purpose, and you should always consider apps within the profile being able to communicate for ALL data and access including permissions. It is not something only relevant to Network.

https://discuss.grapheneos.org/d/4024-in-what-extent-can-app...

https://github.com/GrapheneOS/os-issue-tracker/issues/2197

Comment by samplifier 1 hour ago

Eye opener. Thanks for the warning! GrapheneOS sandboxes all apps including GSF as far as I understand. It would be nice if full capabilities could be exposed or at least shown in the app settings. There is the "All permissions" view which has a "have full network access" item with the following details: `Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.` Does this mean the app has this permission and even without it can fully access the internet? If so the primary "network" permission is very misleading. I wish for a smartphone-like device which installs apps with `cap_drop: ALL` by default. I wish for a government which would support such a standpoint and "assist" companies not able to provide a service which require intrusive data gathering. Either that or we're all just one big happy family with no secrets and no jealousy and no drama. sigh

Comment by J-Kuhn 22 minutes ago

To my knowledge, any app can just instruct the installed browser (Google Chrome, Vanadium, Firefox...) to open http[s]://tracker.evil-ad-network.example/?installedId=012345.

Comment by Cider9986 2 hours ago

I don't have any Google or closed source apps with network permission, but thank you for sharing that quote I haven't seen that before.

Comment by theodric 5 hours ago

Install a 3rd party GCam and then the answer is no https://www.celsoazevedo.com/files/android/google-camera/

Comment by cwillu 4 hours ago

That sounds like the answer is actually yes: we're not talking about the lack of a camera app, but the lack of a camera app that knows the details of the usually-proprietary camera firmware

Comment by oynqr 4 hours ago

You can install both the regular GCam as well as third party mods. Actual GCam feels worse to me.

Comment by t0bia_s 3 hours ago

Problem with stock Google camera app is that it made horrible HDRlike images even with HDR turned off. You cannot adjust amount of reduced highlights and increased shadows which makes images unrealistic with lack of depth.

Comment by jordand 11 hours ago

We took control, we're keeping control

Comment by joe_mamba 10 hours ago

[flagged]

Comment by jitix 9 hours ago

What you are describing is not Google’s alturism but keeping competition in check. If Google didn’t “allow” GrapheneOS it opens up a new market segment for other smartphone manufacturers. Apple really cashed in on privacy for a few years so it’s not unfathomable that Xiaomi or someone else goes all in on “privacy focused android” in absence of pixel+graphene combo.

Edit: Apparently Motorola is doing just that.

Comment by wolvoleo 7 hours ago

I don't think any Chinese company can pull the privacy card. They're bound by their government to spy on their customers just like American ones are.

Otherwise Huawei would have already jumped into that gap. They have their own Google-independent OS now so they could have marketed it to privacy enthusiasts where the lack of Google services would have been a positive not a negative.

Comment by ethbr1 7 hours ago

> Xiaomi or someone else goes all in on “privacy focused android” in absence of pixel+graphene combo

Xiaomi? Privacy?

Comment by ignoramous 9 hours ago

> Apple really cashed in on privacy for a few years

Apple didn't "cash in", their marketing dept made sure privacy/security engineering got just enough budget to pull off miracles & then spend even more to successfully make the public forget about the very nasty Celebgate.

Comment by thewebguyd 6 hours ago

> Celebgate

That was a phishing campaign, not a breach.

Comment by ignoramous 13 minutes ago

My point isn't about engineering.

Comment by 3 hours ago

Comment by singpolyma3 9 hours ago

TBF if Google locked down the devices like that it would be a GPL violation. Not their first or whatever but still, there's a reason for them not to do that beside "being nice"

Comment by yjftsjthsd-h 9 hours ago

Would it? IANAL, but AIUI the only GPL component is Linux on GPLv2 which requires providing code but not giving the ability to install it

Comment by fluidcruft 8 hours ago

Not really. Tivo did that eons ago. Whether you view this as a "flaw" or "feature" of GPLv2 it's ultimately why GPLv3 now exists.

The Linux kernel developers see what Tivo did as a "feature" rather than a "flaw" and refuse GPLv3.

Comment by wolvoleo 7 hours ago

It's also because so many Linux developers are on the payroll of big tech. Look at all the submissions. 95% are just big tech. And look at the key people in the Linux Foundation. All a bunch of business suits with compromised motives. Serving their company above the community. There's only a few unencumbered people in there now.

Linux is no longer the community-driven choice. It's big business with billions hanging on the line. The grassroots origins are long over.

Comment by StrLght 9 hours ago

And how many options are there exactly? How many of them are capable of at least making and receiving a phone call without any issues 99% of the time?

While I agree with your general sentiment, I feel necessary to acknowledge that it's just not there (yet?). GrapheneOS is a great option if you want to have a fully working and secure device.

Comment by ajdude 8 hours ago

Years ago I looked into GrapheneOS, and I ultimately didn't go with it because, at least at the time, they only supported pixel phones (specifically pixel phones that Google actively had security updates for). I realized that if I got that OS, I would be at the mercy of Google supporting the device in order to continue using GrapheneOS.

In the end I just opted out of the android ecosystem altogether and went with a flip phone that I used as a hotspot for an iPod touch (we only used over VPN with locked down DNS and nothing google related).

My privacy lasted about two weeks, because unfortunately Spotify was able to fingerprint that device to Facebook.

Comment by opan 1 hour ago

I would highly recommend LineageOS. Supports non-Pixel phones, some of them many years old (although now that I double check, the Galaxy S3 and OnePlus One aren't on the devices list anymore, I guess they do stop supporting old stuff eventually...). The OnePlus 5 is still supported and was released in 2017. For anything older than that, I guess I'd recommend looking into postmarketOS.

Comment by matheusmoreira 9 hours ago

You're not wrong, but we gotta do what we can and take every advantage we can get.

Comment by cluckindan 9 hours ago

There is no FOSS modem. The baseband is a separate computer operating on a lower level than the OS.

Your provider can run arbitrary code there.

Comment by opan 1 hour ago

I thought the PinePhone community had succeeded in making custom firmware for the modem in the PinePhone, though I'm not sure of the legality of actually using it. Plus both PinePhone and Librem 5 had a killswitch to disconnect the modem at least.

Comment by jordand 9 hours ago

Your point is valid and yeah, it's a never-ending fight just to keep the control we have. Things like the Play Protect API and loads of Android apps being coupled to Play Services is it's own big challenge we're stuck with just to stay within the Android ecosystem

Comment by genxy 9 hours ago

Let them eat steak!

Comment by Cub3 4 hours ago

> it was filled with ads

You bought a phone from an advertising company?

Comment by harvey9 32 minutes ago

Don't recall my old nexus devices having ads in the OS. Disappointing where Google has taken this.

Comment by dackdel 4 hours ago

for some reason i read that in archer(animated) voice.

Comment by teekert 2 hours ago

iOS is also going into this direction, just open the AppStore, it’s all the cheapest most horrible apps. Temu (shop like you don't give a s* about the planet), addictive AI Waifu’s (who needs human interaction anyway), clean your stuff but fake-time-wasting style (it's free dopamine!), search option’s first hit is often scammy (ie search for MS Authenticator). I feel that Steve ("If you want pr0n get an Android") would turn around in his grave from the sight of this.

Its just a matter of time before this cesspool will leak into the rest of the OS, AppStore shows us the temptation is too big for Apple. When my iPhone 12 mini dies it’s /e/OS or GrapheneOS for me. My devices should serve me and my thoughts are my own.

Comment by OtomotO 3 hours ago

What about banking Apps? No problem there?

Some of them have ridiculous secur... compliance rules.

Comment by goerg 3 hours ago

There is a list of compatible banking apps: https://privsec.dev/posts/android/banking-applications-compa...

Comment by Scrounger 1 hour ago

> What about banking Apps? No problem there?

Most banking apps work, but Google Pay/NFC payments won't work.

Comment by Semaphor 3 hours ago

The vast majority work, check this list for details: https://privsec.dev/posts/android/banking-applications-compa...

Comment by theandrewbailey 10 hours ago

When I got a new phone last year, I purposely got a Pixel (open box 9a) to put GrapheneOS on it immediately. Been happy living the de-Googled Android life since.

I was sad that I had to go through the OOBE setup on the stock image to unlock the bootloader. At least it doesn't force an internet connection and login, unlike Windows.

Comment by sowbug 10 hours ago

If it's any consolation, the wipe* requirement before unlocking the bootloader is generally a good thing, even if it's inconvenient. Someone who is targeting your personal data gets access to your encrypted phone, either by stealing it or in an evil maid situation. They unlock the bootloader and install privileged code that helps them recover the symmetric encryption key or intercept your PIN. Then they either have your data or wait for you to enter the PIN. In theory recovery shouldn't be possible (access to the key depends on a secure element that rate limits brute-force attacks), but security bugs do happen. Wiping* your data before removing the bootloader's signing requirement is an extra layer of protection.

*It doesn't actually wipe your data; it just destroys the symmetric key, making the data permanently unreadable.

Comment by Markoff 4 hours ago

AFAIK you can't unlock bootloader without wiping the data, that's my experience from last 15 years unlocking bootloaders on various phones

so it's kinda pointless to wipe data prior wiping them again during the bootloader unlocking process

Comment by sowbug 3 hours ago

We're saying the same thing. The bootloader unlocking process includes a step that destroys the FDE key.

Comment by Sophira 6 hours ago

While the OOBE of the stock image doesn't force an Internet connection, the ability to unlock the bootloader does - whether you can do it or not depends on the phone manufacturer's desire, and Android for some reason uses an Internet connection to check that.

My understanding is that it is impossible to unlock the bootloader on a new recent (Android 7+ at least; possiblt earlier) Android phone until it has connected to the Internet. After that, the ability to unlock the bootloader is permanent.

Comment by dlenski 3 hours ago

Yep, on older phones it was certainly possible without an Internet connection.

On the Nexus 5, you could just `fastboot oem unlock` right out of the box, install TWRP (custom "recovery") and install CyanogenMod/LienageOS, without ever booting the stock ROM.

On my Moto G4 Play and Moto X4, you had to get an unlock code from the Motorola website (based on the phone serial number I think) and waive some warranty terms, but once retrieved at least the phone didn't need to be online to unlock the bootloader.

The process on the newer Pixels is disappointingly intrusive, like basically everything Google has done for the last decade.

Comment by Sophira 41 minutes ago

I misspoke when I said Android 7+, my apologies; I was thinking of my Pixel 7, which runs Android 13.

Comment by Markoff 2 hours ago

If it is any consolation it became intrusive on pretty much every single brand nowadays, if they at least offer bootloader unlocking option.

Comment by Sophira 42 minutes ago

...I feel a bit silly. When I said "Android 7+", I was thinking of my Pixel 7, which runs Android 13, so "Android 13+" is what I actually meant to say. Oops.

Comment by Markoff 4 hours ago

it should be possible on Sony and OnePlus phones and maybe other brands, though it can require obtaining code from internet on other device, but the device being unlocked itself doesn't need to have internet connection

Comment by qurren 10 hours ago

Is it possible to install basic Google apps like Gmail, Calendar, Maps, Drive without googlifying the whole phone?

I'm not looking to fully de-Google but I want Google as apps and not my OS.

Comment by strcat 50 minutes ago

Yes, those are all compatible and the only way to use them is as regular sandboxed apps without any special access. Sandboxed Google Play can be installed in the profiles of your choice. Installing it in the main Owner user is a valid choice and doesn't at all ruin what GrapheneOS provides but you can make a dedicated work profile or Private Space for it to keep it separate. Only apps in the same profile can see it and use it, so you can control which apps will use their functionality depending on it that way.

Comment by handedness 8 hours ago

I run a litany of Google (and other corporate/business apps) apps in Private Space under the owner's profile, which is only unlocked when I need it for something. That space's connection can go out over a WireGuard tunnel if I need those apps to be on any specific networks, while the rest of the phone's traffic is unaffected. The file systems stay functionally separate (although that's not a major concern given how file encryption is handled, plus the dream that is Storage Scopes), and that space has its own camera app and such.

The Owner profile itself doesn't run Google Play Services, so when that Private Space is locked and dormant it's effectively a degoogled stack.

Some will invariably argue that an old pocket-sized Linux PC with a cellular modem is a superior experience, and for some specific things it may well be, but GrapheneOS is the only viable option for someone looking for a user-respecting modern phone with very few limitations.

Comment by hxorr 10 hours ago

I believe one of Graphene OS's main features is that they allow you to run google play services in a sandboxed environment, so you can run your standard google apps but without the standard android deal where google play services has unfetteted access to all your phone's location/data/etc info

Comment by hiitsmyaccount 10 hours ago

Yes, you install the Google Play store via the GrapheneOS App Store. The OS comes with like 5 apps out of the box. The rest is up to you.

Biggest caveats that I've encountered: tap to pay via Google Wallet is a no go, Android Auto can be flaky, MDM managed work profiles don't work at the moment, and some apps that use the Google Play integrity API fail to validate and refuse to work (I've only encountered one app that fails, and plenty others that work.)

In general, I'm moving towards a de-Googled life and GrapheneOS is a great entrypoint towards that.

Comment by strcat 45 minutes ago

Android Auto is fully supported and shouldn't be any more flaky than it is on the stock OS. It's often flaky due to a bad USB connection or problematic implementation in the car. That's just how it is everywhere.

Google Wallet bans using anything other than an unmodified Google Mobile Services stock OS but there are alternatives in certain regions. In Europe, there are a lot of banking apps with tap-to-pay compatible with GrapheneOS and also Curve Pay. PayPal also has a limited tap-to-pay launch in Germany.

Comment by handedness 8 hours ago

My end-run around Google's absurd unwillingness to certify GOS for Google Pay has been Garmin Pay, which has worked virtually everywhere I've ever tried it.

I'm hopeful that an OEM Motorola device will get certified for Google Pay.

Comment by microtonal 4 hours ago

Depends as bit on the country and bank. I also use Garmin Pay, but my bank only supports adding their credit card (not debit card) and a substantial portion of shops here only supports contactless payment through debit cards (credit cards have historically not been popular here).

So I get to use contactless payment at maybe 50% of the stores, which is annoying, because it's sometimes hard tot tell ahead of time.

Comment by qurren 4 hours ago

> MDM managed work profiles

Do you mean actual employer-spyware MDM work profiles? I suppose I never expected those to work.

Or do you mean things like Shelter, which uses work profiles and which I use to quarantine certain less-trusted apps?

Comment by hiitsmyaccount 1 hour ago

Yes, I mean MDM work profiles. I play an IT guy at work and am a Google Workspace admin. We have it running in BYOD mode and it's actually not intrusive at all. The most sensitive data you can see as an admin is what apps are installed in the work profile, the phone's make + model, and the version of Android. Nothing like location, charge level, or anything outside of the work profile. I'm fine with running it on my personal device (I actually really like the way it functions), but it's borked on current versions of GOS.

Comment by y2244 10 hours ago

Tap to pay is mostly NFC? So is there an alternative app?

Comment by dgrabla 8 minutes ago

Paypay works as well (at least in Germany)

Comment by jordand 9 hours ago

Curve Pay has worked well for me. Only good alternative as it doesn't depend on Google Play Services too

Comment by cyberax 3 hours ago

I extracted a chip (by dissolving the plastic in acetone) from my card and glued it to the wriststrap of my Pebble watch :)

Comment by pezgrande 14 minutes ago

Nice hack but sounds quite unsafe, I like having to unblock de phone in order to use it.

Comment by distances 2 hours ago

When using contactless payment with my card, about 10% of the time the payment terminal tells me to insert the card to the reader slot instead and enter my PIN. I assumed this is a general security feature, but I guess it depends on the issuing bank then. This in Europe.

Comment by cyberax 2 hours ago

Well, I still have a backup physical card. It just is annoying to get it out of my wallet.

Comment by wolvoleo 10 hours ago

Yes you can use Curve pay.

Edit: Apparently that's Europe only? I'm in Europe so yeah. I didn't know that.

Comment by vrganj 10 hours ago

There's Curve Pay in Europe. In the US, I'm not sure.

Comment by drnick1 9 hours ago

> I'm not looking to fully de-Google but I want Google as apps and not my OS.

This is entirely possible as other posters have explained. But I think it kind of defeats the point of Graphene, at least somewhat. Google is already profiling every aspect of your life by reading your emails, files, calendar, location, etc? In that case, OS access becomes moot.

I think that GrapheneOS makes most sense as part of a broader move towards privacy-respecting alternatives. I see the sandboxed Play Services as something useful perhaps in a secondary user profile, for the odd commercial app required and only available from the Play Store.

Comment by strcat 48 minutes ago

Using Sandboxed Google Play doesn't defeat the purpose of using GrapheneOS and neither does using Google apps. It does not exist specifically to avoid Google apps or services. It exists to provide a highly private and secure OS retaining high usability and app compatibility. Being able to use sandboxed Google Play is an important part of what it provides. Many GrapheneOS users don't use it and many who do use it are only using it in a dedicated profile for a small subset of apps but that's not at all required to heavily benefit from GrapheneOS. Moving to more private apps/services over time does make sense but it isn't mandatory and users can choose what kind of compromises they wan to make.

Comment by qurren 4 hours ago

> In that case, OS access becomes moot.

Not really.

1. A non-Google OS can shut off background running access to Google apps, as well as supply Google apps with mock location data and other data

2. Google does other things to the OS that drive me nuts. Like allowing apps to restrict screenshots. I own the phone. If I want a screenshot, it should screenshot. This is not something for apps or Google to determine, and if the OS listens to me (not the app) it should allow screenshotting the display 100% of the time regardless of what the app cries about.

Comment by Scrounger 1 hour ago

> Like allowing apps to restrict screenshots. I own the phone. If I want a screenshot, it should screenshot. This is not something for apps or Google to determine, and if the OS listens to me (not the app) it should allow screenshotting the display 100% of the time regardless of what the app cries about.

PREACH!

I hate this.

Comment by fooqux 9 hours ago

I agree and have moved mostly away from everything Google. But it's hard to replace maps. I know open street maps exists but it's hard to beat Google's data gathering.

Comment by wolvoleo 7 hours ago

I think OSM is way way better. It has every little path in the hills I walk. On Google Maps I'm just walking in a featureless green blob. OSM even has unofficial trails that are no more than a worn-down line in the brush.

Maybe for cars Google is better but I don't use those. But even there I see really detailed stats.

OSMAnd is a really great full featured mapping app. A real tool that you can configure in detail. And Organic maps is more simple and quick like Google maps.

There's just two things I still need Google for: most businesses don't bother keeping their opening hours etc updated on other mapping services, and in my city they have live data on the public transport network. This should really be mandated to be offered to open street map too.

Comment by flaburgan 2 hours ago

Don't forget to update the business hours in OSM when you see they are missing / wrong

Comment by fph 19 minutes ago

I recommend Magic Earth. Free with traffic and navigation, and strong privacy promises (unlike Here Maps).

Comment by donalhunt 8 hours ago

There are players in the OpenStreetMap ecosystem attempting to change that. I know the team behind Organic Maps are actively working to make their app as viable as possible by sourcing appropriate data for example.

Comment by DarkUranium 7 hours ago

Organic Maps is amazing.

I actually find that it blows Google Maps out of the water for cycling (which is why/how I discovered it). I haven't really used it for driving much because my own car has a builtin nav, so can't really comment on that.

YMMV of course.

Comment by flaburgan 2 hours ago

Organic Maps has been forked to CoMaps as a community managed project btw

Comment by Markoff 2 hours ago

TIL there has been some drama about Organic Maps, what is the difference between OM and CoMaps?

Left from Maps.me to OM because of drama and intrusive features, do I need to leave OM for CM?

edit: seems CM shouldnt have that annoying gift icon

edit 2: CoMaps doesn't display (colored) hiking trails, so completely useless compared to Organic Maps, also can't even display tram lines after tapping on tram stop in Prague

Comment by eblanshey 8 hours ago

I use Google Maps on Graphene. It works perfectly. You still get the benefits of the rest of the phone being degoogled. Just allow it to access your location only when you're actively using the app. When it's closed, it's closed.

Comment by theandrewbailey 8 hours ago

I've been using HERE WeGo for almost a year. I had to install a text to speech engine in order to get voice directions. (I installed the GlaDOS one, now the evil computer tells me where to go.)

https://www.here.com/products/wego

https://here-wego.en.aptoide.com/app

https://k2-fsa.github.io/sherpa/onnx/tts/all/index.html

Comment by handedness 8 hours ago

I've settled on running CoMaps in the Owner profile, with Google Maps/Waze/etc. in the Owner profile's Private Space for when they're necessary.

Comment by fooqux 8 hours ago

Can that setup work with android auto? If so, I'll need to try that.

Comment by thefz 1 hour ago

Different scopes and purposes. Google Maps is made to find commercial activities and addresses, OSM is there to map the territory around.

Comment by jzer0cool 5 hours ago

What are some good alternatives

Comment by notRobot 10 hours ago

Yes, you can have sandboxed Google apps: https://grapheneos.org/usage#sandboxed-google-play

Comment by upboundspiral 7 hours ago

Yes absolutely.

You can install nonprivileged google stuff on the main account.

Alternatively you can setup a private space (accessible to the main user but mostly separate from the main system) with a few clicks in the settings.

If you prefer more friction / isolation you can setup a separate user where you can install the google stuff.

Comment by bigiain 3 hours ago

Memories of Apple force pushing a U2 album to everyone's iPod (or maybe iPhone) back in the day.

Comment by IdiotSavage 2 hours ago

Or the more recent memory of the F1 ad pushed via the wallet app.

Comment by LeoPanthera 2 hours ago

That was a hilariously tone-deaf incident, but it's hardly comparable. Google pushed ads. Apple gave you a free album.

Comment by davidwritesbugs 2 hours ago

Yes, but a _U2_ album. An ad is 30 seconds of irritation, but a U2 album is like having broken glass sown under your skin.

Comment by samplatt 5 hours ago

How's the P10 camera on graphene? Literally 90% of the reason I'm on a pixel is because I love the low-light smarts that the camera software has, but I don't know if I'll lose that with Graphene.

Comment by Aissen 4 hours ago

You can install the Google Camera, if you use sandboxed Google Play. It has all the same features AFAIK.

Comment by genpfault 9 hours ago

What's the app data backup/restore story on GrapheneOS?

My understanding is that even with pseudo-D2D (device-to-device) transfers Seedvault doesn't backup everything[1].

Are there more-functional, non-root, local (non-cloud) alternatives?

[1]: https://github.com/seedvault-app/seedvault/wiki/FAQ#why-do-s...

Comment by handedness 8 hours ago

Seedvault is still woefully insufficient, but it sounds like there's work being done to replace it. I can't imagine the enterprise crowd will overlook that and I'm hoping the Motorola partnership enables faster development.

Comment by lucb1e 9 hours ago

Not without root, no

Comment by Randomno 9 hours ago

> Wicked For Good

Is this an antithesis to Don't Be Evil?

Comment by RachelF 10 hours ago

I too, liked it.

However, some apps that I need for work, like Microsoft Authenticator, no longer work under GrapheneOS.

https://www.theregister.com/on-prem/2026/03/10/microsoft-tig...

Comment by eszed 10 hours ago

Yeah, I'm hanging on with GrapheneOS (on a Pixel) until their native-hardware (Motorola) phones come out, which hopefully will solve this. As I understand it, third-party (banks and so forth) app vendors have to accept their security attestation, which they don't right now, but (I hope) will with Motorola behind them.

Comment by cybertim 4 hours ago

Graphene is NOT a jailbroken/rooted OS, its a real secure unrooted, bootloader locked OS, and MS Authenticotor works just fine. If anything does not work its related to dependency of the App maker on a certain attestation google play services grapheneos.org/articles/attestation-compatibility-guide

Comment by MIL-STD 3 hours ago

Root =/= insecure. You probably have administrator access on your home computer operating system, and can very likely do online banking via the web browser with no issues. A secure API is possible regardless of the host metal, operating system, or user permissions.

Comment by fph 17 minutes ago

Root on computers is insecure. Malware can steal secrets from other applications. We're just used to it, but the Android security model is much better.

Comment by OtomotO 3 hours ago

Bingo!

Compliance =!= Security

Comment by idiotsecant 10 hours ago

Sounds like your work has been using your personal phone for free

Comment by Gigachad 8 hours ago

I hate how common it's become for companies to force you to install things on your personal phone. Even worse is some of them demand you install a MDM profile on your personal phone which feels 1000% over the line of reasonable.

Comment by dlenski 3 hours ago

I've just refused to install such things on my phone.

You want me to have email and teams/slack on my phone? Sorry, I won't install the spyware. Want to pay for me to have a second phone with it? Okay. No? Well then, I just won't have email on my phone.

Comment by Gigachad 3 hours ago

Sure if you are in a strong stable position in life you can do that. The average person doesn’t want to rock the boat and cause troubles in their life so they install the invasive mdm profile.

It needs to be made illegal imo. The company should provide you a device if you need one for the job.

Comment by binarin 2 hours ago

My company MDM doesn't consider GrapheneOS good enough to give me access to email/calendar - impasse?

Comment by palata 9 hours ago

Microsoft Authenticator works on my GrapheneOS (not rooted).

Comment by _carbyau_ 8 hours ago

From the linked article it seems this is related to Entra accounts which are Azure cloud related.

Comment by Sarkie 10 hours ago

Google Authenticator works?

Comment by gonzalohm 10 hours ago

I think Google authenticator implements the standard OTP which lots of apps (including keepass) should support. Microsoft uses their own propietary crap

Comment by kuerbel 6 hours ago

You can try to add the standard OTP even for Microsoft crap. If it asks you to register for mfa and opens the screen that says something about downloading the Microsoft authenticator app there is a small link at the bottom, letting you use another app. Then you get a qr code that you can scan with any other auth app.

Comment by saintfire 9 hours ago

I use a basic OTP password instead of Microsoft's ironically less secure (see SMS as 2FA) with my work MS account. Perhaps your org disabled it but it is definitely something a Microsoft account can do.

Comment by sieabahlpark 4 hours ago

[dead]

Comment by FloatArtifact 9 hours ago

Any issues with banking insurance or healthcare applications?

Comment by t0bia_s 3 hours ago

Why would you use app for actual insuranceb or even healthcare?

Comment by FloatArtifact 2 hours ago

This is not really about me, but understanding if these apps have issues running under the OS. These type of apps typically have extra "security" features.

Comment by allthetime 5 hours ago

I want to run graphene but I make android apps and need to test on device with a somewhat standard setup… login with google, etc. is this reasonable to do with graphene?

Comment by toxicunderGroov 5 hours ago

I'd get a 2nd phone for that and it never leaves the house/location - living inside a bag with conductive material

Comment by 4 hours ago

Comment by nicce 5 hours ago

Hmm, you should have cheaper and separate phone for work anyway?

Comment by allthetime 4 hours ago

It is my cheaper separate phone. Main phone is iPhone which I can test iOS on. Android is mostly for testing, and backup/utility on long trips.

Comment by nicman23 2 hours ago

yeah the pixel 10 pro - which i have - only saving grace is graphene..

Comment by sharts 7 hours ago

Makes you wonder who are clown employees coming up with these nonsense decisions

Comment by yogthos 8 hours ago

Same, I've got a Pixel 9 and GrapheneOS works perfectly on it. I really love having full control over the OS on my phone and being able to decide what actually runs on it.

Comment by nsonha 6 hours ago

would it have the desktop mode and linux terminal? That's the only reason I'm eyeing a Pixel

Comment by a022311 15 minutes ago

Yep, I've used both. Desktop mode isn't exactly there yet, but hopefully with the general availability it will get with Android 17, it'll smoothen out. As for the Linux terminal I ended up sticking with a fork which provides a few extra features (https://github.com/outlawsanzhang/koiTerminal)

Comment by gck1 8 minutes ago

I was using GrapheneOS for years, until the battery died while I was on an important call, trying to get someplace. Plugged it in, but little did I remember that I had installed OS update that was pending app optimization phase that happens during next boot.

GrapheneOS has some hardening in this phase, which as I understand, essentially has to rebuild all apps without cache.

And as I have a ton of apps, I was parked for 30 minutes waiting my phone to boot up.

And because of this app optimization thing, I always delayed OS update finalizations, which probably isn't the best thing.

Unfortunately, GrapheneOS recommendation to this was to have fewer apps. Had to let it go after that.

Comment by Milpotel 1 minute ago

> GrapheneOS recommendation to this was to have fewer apps

Sounds reasonable. People tend to install way too many apps on their phones and than blame the phone about short battery life or too many notifications.

Comment by phreack 10 hours ago

That Motorola phone that lets you install Graphene can not come soon enough. Pixel phones are not sold worldwide so it feels like they're gatekeeping security. I know that's not the case really, but there's very few ways to successfully degoogle otherwise.

Comment by matheusmoreira 9 hours ago

> Pixel phones are not sold worldwide

Still boggles my mind the fact Google doesn't sell their phones worldwide. Obtaining a Pixel has proven to be quite difficult for me.

Comment by wraptile 4 hours ago

Not only obtaining but if you ever need warranty you're done. Just last week I went to a Samsung center and had my fold 6 fixed in 30 minutes, and these centers are everywhere around the world. Same thing with Apple, yet a 4.5 trillion dollar company can't ship and maintain a phone globally. It's so unserious.

Comment by JBiserkov 50 minutes ago

As the old joke goes: Microsoft is a software company, Apple is a hardware company, Google is an ads company.

Comment by colordrops 25 minutes ago

Isn't that just the truth based on revenue streams?

Comment by elAhmo 1 hour ago

They definitely can, they just don't want to.

Comment by whizzter 28 minutes ago

And that's the unserious part, they really don't want anything to do with consumers despite making consumer products (gmail, Android, etc.) so you're always at the mercy of their automatic systems.

Comment by matheusmoreira 3 hours ago

Yeah. Could be difficult even if one is willing to forgo the warranty. My city has local repair services, they easily repaired my old Samsung phone. Servicing Pixels could be difficult even for them.

Comment by d3Xt3r 3 hours ago

Out of curiosity, what was wrong with your Fold 6?

Comment by wraptile 1 hour ago

The inner screen built-in protector was peeling in the middle. It was out of warranty, but Samsung charged me 15$ which is very reasonable. The inner screen looks brand-new now, and I guess that's the benefit of these soft foldable screens - you can refresh the entire thing very easily.

Comment by dakolli 8 hours ago

It still boggles my mind that the most popular privacy OS requires Google manufactured hardware, that fact alone makes me not trust it at all.

Comment by flexagoon 5 hours ago

They list their exact criteria for supporting a device. So far, only Pixels fit all of them (and I guess the Motorolas will soon)

https://grapheneos.org/faq#future-devices

Comment by WD-42 8 hours ago

Phone hardware is a hellscape it doesn’t surprise me at all that they need to keep the number of supported devices small in order to deliver a decent product.

Comment by 7 hours ago

Comment by lern_too_spel 8 hours ago

Despite Google's other failings, it was the OG supporter of data portability, and that spirit extends to its phones. No other phone manufacturer with wide distribution comes close. It's unfortunate that the people who design the hardware do such a poor job with the resources at their disposal.

Comment by sharts 7 hours ago

Is it still the case that Android backups leave much to be desired when compared to iphone? Pretty much the only reason I use Apple is that I can switch to a replacement phone and it’s exactly the same state as the last backup.

Comment by mvdtnz 7 hours ago

It's ridiculous is what it is. It makes me deeply distrustful of the organisation behind Graphene that they would make such a crazy choice.

Comment by digitalPhonix 7 hours ago

The intersection of phones that have unlockable bootloaders, public-ish driver blobs and decent hardware is tiny.

What other phone would you pick?

Comment by kevin_thibedeau 4 hours ago

Everything Lineage supports.

Comment by 7 hours ago

Comment by xvedejas 7 hours ago

I just moved away from GrapheneOS to Motorola because I decided I needed an audio jack again. There's definitely some annoying things about leaving, but at least now I can use again the three apps that didn't work for me on GrapheneOS...

Comment by ccppurcell 3 hours ago

Which phone and is it android then? Maybe I'm out of the loop on Motorola. I just bought a pixel, thinking of trying graphene. I was a bit miffed about the lack of jack until my partner pointed out I hadn't used the one on my old phone for over a year. I'd like to in the future though.

Comment by okanat 10 hours ago

AFAIK Motorola only lets certain geographical regions to unlock bootloader, not everywhere.

Comment by tom_alexander 9 hours ago

They're referring to the partnership between GrapheneOS and Motorola: https://motorolanews.com/motorola-three-new-b2b-solutions-at...

Comment by NamlchakKhandro 9 hours ago

This is a thing now

https://volla.online/en/operating-systems/volla-os/

Comment by microtonal 2 hours ago

Posting about Volla in a GrapheneOS thread is... I guess courageous?

They are kind of the opposite of GrapheneOS. Ancient kernel trees, ancient firmware bundles, etc. And since downstreams like /e/OS just take their kernels/firmware, they are ancient as well. Using Volla phones opens you up to a lot of known vulnerabilities.

Besides that, Volla is basically a marketing company (with some external contractors) that does Eurowashing. E.g. one of their phones (Quintus) is a phone designed by an Emirates company, produced by a Chinese ODM, marked up by 500 Euro by Volla (they probably turn some screws and flash the firmware to be able to call it 'from Germany'. You can get the same 719 Euro phone here for ~160 Euro:

https://www.amazon.ae/Android-Smartphone-Storage-Octa-Core-M...

I don't understand why people do free promotion for Volla, given that they are mostly snake oil salesmen.

Comment by strcat 39 minutes ago

Those are much less private and secure than the Android Open Source Project on Pixels without the major privacy and security improvements of GrapheneOS. Those aren't privacy or security hardened devices.

Comment by lucb1e 9 hours ago

I don't see anything they offer for security that's not also in AOSP/LineageOS/eOS/stock/etc.

Which is not to say that's not enough for most people, but why highlight them? It doesn't seem comparable to the laser-focus GrapheneOS has on security

Comment by goodpoint 5 minutes ago

They look way more trustworthy.

Comment by d3Xt3r 3 hours ago

Not GP, but Volla phones are cool in that they officially support running proper Linux[1], so you could just use Linux instead of Android if that's enough for your needs. And you can still boot into their de-Googled Android if you need to run Android apps.

[1] https://volla.online/en/operating-systems/ubuntu-touch/

Comment by microtonal 2 hours ago

Volla just Eurowashes/rebadges other low to midrange phones at a huge markup. E.g., the Volla Phone Quintus is:

https://www.amazon.ae/Android-Smartphone-Storage-Octa-Core-M...

(If you don't believe it from the identical specs and design, you can look at the committers in their kernel trees and it is basically maintained by Daria people.)

Their new Plinius model is just the Gigaset GS6 with a 250 Euro markup:

https://www.gigaset.com/gigaset-gs6/

At least this is made by a German company, though Gigset is Chinese-owned now.

At any rate, these are just rebadged phones and IIRC, but don't hold me to it, in both cases the original phones also support bootloader unlocking.

Comment by d3Xt3r 1 hour ago

It takes more than an unlocked bootloader to make Linux boot on random phones and work properly (and ensuring all the radios, camera, audio, phone calls etc work), and Volla have achieved that with their phones. I could be wrong, but I don't think it was possible to get a fully functional Linux distro going on any of these rebadged phones before Volla got to them.

Comment by microtonal 1 hour ago

Volla is just forwarding the trees made available by their upstream ODMs. E.g. Gigaset publishes them:

https://github.com/Gigaset-dev

I am not sure about the Daria Bond, but in Ubuntu Touch (which seems one of the very few Linux systems that supports the Daria Bond, ahem, Quintus), most of it seems to be the work of LineageOS developers (probably for generic Mediatek support, since it's a run-off-the-mill Mediatek phone), with some changes from Daria people on top of it.

So, I think you are giving credit to Volla that should go to the upstream ODMs and Lineage.

Or just go to the Volla about page:

https://volla.online/en/about/

It's just sales, marketing, and customer support people.

Comment by strcat 40 minutes ago

Ubuntu Touch is drastically less private and secure than AOSP let alone GrapheneOS. Volla's devices don't come anywhere close to meeting the update and security requirements for GrapheneOS. GrapheneOS is a Linux distribution much closely following along with the Linux kernel LTS releases, unlike those devices. It also regularly moves to new Linux kernel LTS branches. Pixels are in the process of moving to the 6.12 LTS branch with Android 17 QPR2. 6.18 is currently in the early stage of stabilization.

Comment by tasty_freeze 11 hours ago

I've been using Graphene on my Pixel 7a for about a year and I'm happy I made the switch. For sure it is a bit rougher than using Google's OS, but not enough to make me regret it.

The main things I miss are (1) when I'm entering text I can't swipe left and right on the space bar to scroll the cursor left and right, and (2) the texting app doesn't just attach reaction emojis to a message -- it quotes the whole message and prefixes it with something like "Marty like blahblahblah". When there is a whole family text chain it isn't uncommon to see the same message 7 times as various people react to the original message.

Anyway, I looked at Google's Android 17 blog and yikes:

"With deep integration between hardware, software and AI, we’re transforming Android from an operating system to an intelligence system. It's about delivering new helpful experiences that anticipate user needs, and it brings more opportunities for engagement with your apps."

https://android-developers.googleblog.com/2026/06/Android-17...

Comment by Cider9986 11 hours ago

> The main things I miss are (1) when I'm entering text I can't swipe left and right on the space bar to scroll the cursor left and right,

GrapheneOS is compatible with the vast, vast majority of Android apps, so you can use GBoard or FUTO keyboard (which I recently switched to from GBoard), to get the ideal experience.

FUTO recently revamped their swipe to type model and it's now more accurate than GBoard in their testing. I am a huge swipe type person, so this is what held me in GBoard's clutches, but now I'm free.

The dataset is open source and anyone can add to it if you're on a mobile device here: https://swipe.futo.org

And you can learn about it here: https://swipe.futo.tech

> the texting app doesn't just attach reaction emojis to a message -- it quotes the whole message and prefixes it with something like "Marty like blahblahblah". When there is a whole family text chain it isn't uncommon to see the same message 7 times as various people react to the original message.

Google messages, the experience you get on PixelOS, is also compatible with GrapheneOS, but you will have to afford network access to sandboxed google play, among other things. I couldn't tell you specifically, but it will work out of the box before you restrict anything. Many people choose to use this setup because it opportunistically adds e2ee for chats between iPhones and other Androids using Google messages.

There's also other SMS apps, but I focused on switching people to Signal so I barely ever use SMS.

Once I replaced the default apps, GrapheneOS became a premium phone experience.

Comment by sivers 11 hours ago

Yes! FUTO keyboard, then go into VOICE INPUT → MODELS → Explore Voice Input Models → English-244: “Best for the most accurate results, but more demanding.”

The voice recognition is built on Whisper, and is amazing. You can speak conversationally for a long time and it gets everything right, with smart decisions based on context.

My stupid thumbs text no more.

Comment by tasty_freeze 10 hours ago

I just did. I had been using FUTO voice, but I see that FUTO keyboard also supports voice input, so I'm not sure if I should delete FUTO voice as being redundant now.

Comment by Groxx 9 hours ago

I don't believe it's necessary, it's move of an "if you want a dedicated voice keyboard, the UX is a little better" option. I don't have both installed though, as anecdotal evidence.

Comment by arcanemachiner 11 hours ago

There's also Heliboard, which has a swipe-type option

Comment by tasty_freeze 10 hours ago

Thanks for your thoughts. I use FUTO voice usually, but there are situations where typing out a short message is better -- eg, in a restaurant or doctor's office or someplace where voice input might bother other people.

I've found graphene's keyboard far more error-prone than the stock android keyboard, but I also don't care to learn swipe to type.

The feature I'm missing is simply that rubbing my finger left or right on the spacebar in text mode causes the cursor insertion point to move left or right on in the text I'm entering. It makes it sooo much easier to correct typos.

Comment by flexagoon 5 hours ago

> I've found graphene's keyboard far more error-prone than the stock android keyboard, but I also don't care to learn swipe to type.

Graphene's keyboard is the stock AOSP keyboard. Most Android systems ship with their own one instead of it, but that's the one that is built into the system by default.

Comment by Cider9986 10 hours ago

FUTO and GBoard has the feature you're describing and I use it all the time. Pretty much anything you miss from Pixel UI can be attained by simply installing Google's app from the playstore.

Comment by wolvoleo 7 hours ago

The problem I still have with the futo one is that it can't swipe type in multiple languages without switching every time. Gboard can do that. I use 3 languages intertwined constantly so I need that.

So I still use gboard but block its internet access.

Comment by danielspace23 11 hours ago

Problem (1) is a keyboard problem, not a GrapheneOS problem. Graphene comes with the stock AOSP keyboard which is very basic, but you can absolutely replace it. Personally I'm using the FUTO Keyboard and it does have that feature, as well as swiping, speech to text and much more.

Maybe you can try installing another SMS app for problem (2)? Much like the stock keyboard, the stock Messaging app is just the AOSP app. Honestly it works fine for me so I don't have a recommendation.

Comment by Groxx 11 hours ago

Regarding 2: that is literally how SMS reactions work. Apps that recognize it just interpret it as "put that emoji on that message". It is unfortunate that it doesn't do that tho.

RCS is different, which you can sometimes get working by installing Google Messages¹, which is essentially the only app that supports RCS any more. Google runs essentially all the servers too.

---

1: There are no third-party RCS apps² because, unlike SMS which has an API and a shared database on the device, RCS is extremely locked down and it's literally impossible to create one in stock Android. This is also why it's only "sometimes" on GOS, the details are very complicated and rather enraging.

2: Samsung had one, but they're shutting it down in favor of Google Messages. A tiny number of other devices / telecoms have their own too, but they're rapidly shutting down as well. RCS is very nearly fully controlled and implemented by Google now, except for iMessage as a client only, for now, and there's no encryption between iMessage<->Google Messages last I checked (but there apparently is between Google Messages... but no normal person can really verify that because it's Just Google Everywhere).

Comment by rookderby 7 hours ago

I agree with this post and add one anecdotal data point.

I had installed graphene os on a pixel but after a couple months and a couple loops between lineage, stock, and graphene, I eventually settled on stock android. I have group messages with family and some of the family are on apple, some on android, and RCS only works with google messages and google services installed.

It's infuriating that I can't send RCS messages unless google allows me to. I want to go back to email or MMS. Supposedly after a month (!!) RCS group chats will fall back to MMS, but that was not my experience. Also, if you turn RCS on/off you may get kicked out of group messages [0].

[0] https://support.google.com/messages/answer/7189714?hl=en

Comment by Groxx 7 hours ago

Yeah, it's pretty awful tbh. I generally recommend disabling RCS, after learning a lot more about it - it feels like a hostile grab at global messaging at this point, heavily entrenched by telecom agreements. Use Signal or something instead.

Initially there were some promising details planned, but much of it hasn't panned out, and plus now it's Just Google™. Like, roughly everyone has heard that RCS brings E2EE privacy, right? Would it surprise you to learn that it was only added to the spec around a year ago, and nobody has it implemented yet? Google has their own thing between Google users, Apple has their own iMessage-only thing, and they both drop crypto when you cross the streams because it isn't in the spec. And neither is practically auditable (allowing auditing is part of the spec btw - have you seen that UI?).

And that's before even touching on the utterly massive amount of the spec that's clearly designed for businesses only, to send you highly customizable interactive UI. Which you can't use as a person. Or build your own app for. https://developers.google.com/business-communications/rcs-bu... / https://rcsforbusiness.google/

It just does not smell good. It's not in our best interests to let it win.

Comment by wolvoleo 6 hours ago

Yeah RCS always has been an embrace extend extinguish thing. The carriers were super pissed to lose their SMS revenue to WhatsApp and iMessage so they came up with this shit to be an active partner in the loop again, and they can bill for it again. Consumers didn't fall for that and it died off.

Unfortunately Google revived it but it's a very poor standard for interoperability. Not only because the lack of true E2EE in the open spec but also because you need to be a blessed party to run an RCS server and communicate with others. You can't run your own or choose a party you trust. It's either your carrier if they bother to run one, or Google.

It's just another power grab. Don't fall for its 'open' guise. They want you to use it so they can make you dependent and lock you in again. There's nothing open about it. If you want privacy, use signal. If you also want an open and federated network, use matrix or xmpp with OMEMO.

Comment by cubefox 11 minutes ago

> Yeah RCS always has been an embrace extend extinguish thing. The carriers were super pissed to lose their SMS revenue to WhatsApp and iMessage so they came up with this shit to be an active partner in the loop again, and they can bill for it again. Consumers didn't fall for that and it died off.

No. RCS was a replacement protocol for the extremely outdated SMS and MMS protocols. Apple only supported SMS/MMS chat with Android users in iMessage, which meant that chats were strongly limited in many ways (e.g. the mentioned emoji reacts), which caused many US American kids to be socially punished for having an Android phone, which is likely why Apple is so dominant in the US. (Other countries mostly don't use iMessage/SMS, but something like WhatsApp, so they never had this problem.)

RCS was the solution to these iMessage/SMS/MMS problems. It took years for Google to convince Apple to adopt it, and Apple only announced doing so after EU regulations were on the horizon. There were even internal emails which revealed that Apple used their iMessage dominance and the poor Android compatibility via SMS/MMS to boost their market share in the US.

Comment by garciansmith 10 hours ago

Other people have noted that you can switch out the keyboard and SMS app (which I did).

My single (minor) issue with GrapheneOS is the adaptive screen brightness. On the stock Android OS on a Pixel I'd mess around with the sliders for a week or two on a new phone and then it learned what I liked. Now it has a few set values, one of which is always too dim for me in darker conditions so I have to mess with the slider each and every time. I don't believe there's a way of fixing that.

Other than that I'm glad I switched, especially when I read about new "features" they add that I know I'd hate.

Comment by hiitsmyaccount 10 hours ago

I use GBoard on GrapheneOS. I just deny it network permission so it can't phone home.

Comment by Walf 3 hours ago

I used to do this but I found it downloads needed language files in the background. So every time it updated, I would clear all the app data, open it again on something innocuous, like a text file, toggle each language I used. Not knowing how long it would take, I'd wait until each seemed to be behaving, then disable network permission. I still don't trust that it doesn't send data off via Play Services.

Now I use Heliboard with the swiping library added. It's not perfect, but has improved, and at least it can give more than three correction options (long–press centre suggestion with ellipsis below).

I really miss Keymonk — two–finger swiping, accurate, and no crap.

Comment by Markoff 4 hours ago

I do usually this, but recently on older phone (using it temporarily while I buy new) I had to reinstall it and found out, it didn't provide any word suggestions for ant language other than English and even gesture input for other languages didn't work, so at least during initial setup it must have (now?) internet connection most likely to download dictionaries (I thought they used to be included in past, never noticed this before), after allowing the connection, setting up and then disabling the connection, it works fine

Comment by dopidopHN2 7 hours ago

You should consider using signal as texting app?

Comment by teekert 4 hours ago

You shall engage more with your apps, user!

Comment by andrepd 11 hours ago

Regarding (1), that's on your keyboard, which you can choose. Maybe you can give Futo a try? https://keyboard.futo.org/

Comment by jstanley 11 hours ago

Why does it need its own F-droid repo?

Comment by ssddanbrown 11 hours ago

Because the code is not provided under a free/open-source license, and therefore does not meet the requirements for the main F-droid repo.

Comment by aorth 3 hours ago

Ah interesting. They use the "FUTO source first" license. https://github.com/futo-org/android-keyboard/blob/master/LIC...

Open source with limitations on commercial use.

Comment by fph 11 minutes ago

Technically it's "source-available", not "open-source".

Comment by scns 11 hours ago

Simple Keyboard is on F-Droid too. Supports moving cursor via space bar.

Comment by cURLSagan 6 hours ago

Same for HeliBoard

Comment by idle_zealot 11 hours ago

I used to dread the promised deep system integration of AI, but honestly after setting Claude up on a server box and having it do sysadmin stuff for me that I've been putting off for ages I see the vision. I don't really want to mess with the details of working through system orchestration tasks, I want to say "spin up this service" and start using it, "change my config so X happens" and it does, and knows what needs restarting to pick up changes and all the fiddly knobs and configs that need syncing and their bespoke formats. I think Nix tried to unify this for people, but it arrived too close to LLMs so a lot of value (in this dimension) has been delivered by other means.

The point is, I'd like to be able to set up services, configuration, and run tasks on my phone this way too, ideally offline. If this system integration is what gives me programmatic control of my most personal computer and the ability to finally set up decent automated tasks and workflows then so be it.

Comment by ptx 11 hours ago

The vendors are never going to give you control over your computer no matter what vision they try to sell you on. The whole point, from their perspective, is to use their control of your computer to gain more control over you, which they hope to then exploit for profit.

Comment by Terr_ 11 hours ago

Right: Look at the ways Google has persistently taken away user-control and autonomy on the OS level.

Why would we expect the same company to exhibit a completely opposite philosophy as they add LLM features?

Comment by TheRoque 11 hours ago

The thing is they don't setup their "intelligence system" for the type of task you wanna do. They are integrating it for tasks like "buy me a plane ticket for my next holidays", "order diner for me, the usual"...

Comment by idiotsecant 10 hours ago

Yes, Google famously uses their most advanced technology to make your life easier and not to look up your nose with a scanning electron microscope

Comment by netfortius 49 minutes ago

Been toying with the idea for a long time, but I'm concerned about US financial institution apps and multiple countries specific apps (local transport, finance, medical and governmental), whose apks do no exist, as well as (crucial for me, as a heavy international traveler) google voice. For a lot such I now need to use a combo of Google playstore, for US account tied apps, and Aurora for non US apps.

Comment by darkteflon 10 hours ago

~Happy iPhone user for almost 20 (!) years. This has got me seriously thinking about picking up a Pixel.

Comment by Cub3 4 hours ago

I feel like you'd be taking on a lot of pain for no real benefits though?

Comment by portly 3 hours ago

I did this half a year ago and it was fine for me. One of the benefits is of course privacy. For instance, I noticed that ads get completely out of touch which proved to me that I'm being tracked less.

Also never have that feeling anymore that my phone is spying on me.

Comment by 8fingerlouie 2 hours ago

Any iPhone user with a measure of privacy knowledge will experience the same.

I'm using NextDNS for DNS level ad blocking as well as iOS built in tools, and I get ads for women's hygiene products (I'm male), travel, dining, server parts, cars, and everything in between.

The main difference between Android and iOS is (or used to be?) that Android typically phones home with everything, frequently visited locations, calendar appointments, voice commands. On iOS most of that runs on-device. Siri voice to text/text to voice runs on device, various "ai" things in photos runs on-device, frequently visited locations are device local.

Comment by hellcow 1 hour ago

Apple still pushes ads to you. I can't recall how many times I saw ads in the App Store, and how many times they tried to push me into subscribing to whatever nonsense their executives' KPIs demanded (Apple Arcade+? News+? Music+?). No matter how many times I told Apple "No," they just kept pushing it. And now ads are coming to Apple Maps as well.

GrapheneOS has zero ads in the OS and main services.

Comment by anonymousiam 6 hours ago

I took the plunge into GrapheneOS a week ago. I picked up a new Pixel10 Pro and never even tried the stock OS (except to unlock the boot loader).

I've got almost everything working the way I want. There were a few non-essential banking apps that won't install. The most annoying problem I had is when I tried to install Strava, which I cannot get working. The app installs, but it will not let me sign in. I guess I need a replacement, because I use that app a lot.

Comment by binarin 2 hours ago

The most hilarious is McDonald's app - it refuses to work without Play Integrity check. I wonder what braindamaged reasoning is behind this. Do they want to position themselves as a bank or something?

Comment by domh 2 hours ago

Huh, it works just fine in the UK. Wonder if they have different builds (or completely different apps) for different regions. Or maybe it's the GrapheneOS compatibility layer that makes it work? Not sure.

Comment by bigiain 3 hours ago

I have two questions, if anyone has any advice.

1) What's a reasonable Pixel phone to buy to try out GrapheneOS? Is a 128GB Pixel 7 "good enough" or will I get a significantly better experience with a newer phone and/or more storage?

2) Is there a Graphene alternative that would let me de-google an Samsung A12? Back in the day I had some Galaxy S3 and S4 phones that I installed Lineage on, I have no idea if that's compatible to Graphene and/or still a going thing?

Comment by throawayonthe 2 hours ago

1) any currently-supported device is good, but i'd say go for minimum pixel 8a if you can

it ships with Memory Tagging Extensions (armv9 security feature) and two more years of support than previous generations; pixel 7 might be eol in oct 2027 https://grapheneos.org/faq#device-lifetime

official recommendation page: https://grapheneos.org/faq#recommended-devices

2) there is no real graphene alternative for other devices. I would say DivestOS at least made sane compromises to support less secure devices, but it's unfortunately defunct now. Yes lineage is still around and still the go-to clean 'ROM' but far from security focused. just avoid stuff like /e/ os

Comment by bigiain 1 hour ago

Thanks! (And thanks to the others responding here too.)

Comment by floreen 3 hours ago

I would suggest Pixel 8 series or later, since they get 7 years (instead of 5) of updates, which is also decisive for Graphene support duration.

Comment by pomian 2 hours ago

We Have been successfully using graphene on a pixel 4 plus, 5 plus and a 6pro. They all work. Very well. They were cheap to buy. Super easy to install graphene (remember they have a very easy stepu by step process, takes about 10 minutes) It's a good way to test and see if you like it. Truly amazing operating system. Simple and beautiful control of your apps and their behaviors.

Comment by atollk 3 hours ago

Any phone that is good enough with stock Android for your case is good enough with Graphene. If you really just want to try it out, it's the cheapest old Pixel *a you can find.

Checking which phones are supported by Lineage and Graphene can be done by everyone in a matter of minutes.

Comment by silasdavis 3 hours ago

1) I'm typing this in a pixel 7 pro running grapheneos. I'd say these are plenty good enough. Device support is pretty solid compared to cyanogenmod of previous times. App installation is a bit slow using sandboxed play store. Not sure why that is.

Comment by 4gotunameagain 2 hours ago

If you want to try it out, you can easily buy an 8a for like 250 euros used. 128GB is certainly good enough, unless you plan on migrating your mp3 library to it or you take a lot of videos. My only qualms is the lack of SD card, for the aforementioned mp3s.

And trust me you'll like it ;)

Comment by dopidopHN2 7 hours ago

Graphene made me like using a phone. It behave like a computer. Really lovely

Comment by preisschild 52 minutes ago

I can say the same. Been using LineageOS and GrapheneOS for most of my life. Some things are not super convenient (I generally dont install non-free-software applications and don't have Google Play services enabled), but the rest of the experience is great. No crashes, no bugs, no unexpected behavior. Currently I'm using the Pixel 9 Pro XL.

I can also recommend Gadgetbridge for BLE smartwatch integration.

Comment by lifeisgood99 11 hours ago

What are North American people doing for replacing contactless payment? Last time I checked, the solution was to use Curve but it only works for Europe.

Comment by mrbluecoat 11 hours ago

I don't. GrapheneOS is worth the effort of pulling a card out of my wallet.

Comment by gvurrdon 19 minutes ago

In general I'd agree.

Curve demand a "video selfie" and I've never been comfortable with sending companies such biometric data.

Comment by hparadiz 9 hours ago

It's infuriating that they won't do this for non Google Android. It's in the best interest of both the bank and the card owner. Credential theft risk goes down to basically zero when backed by a fingerprint authenticated virtual card.

Comment by tombh 3 hours ago

What do you mean by credential theft? Stealing the numbers on the card or a malicious person triggering the contactless payment?

Comment by hparadiz 2 hours ago

Stealing the numbers. Could've been someone taking a photo of the card out of sight. I honestly don't track my card that well when I'm out cause it's easy to have a transaction voided if it's legit not me. Then again cameras are everywhere now.

Comment by 627467 8 hours ago

I'm sure contrats between Google and banks provide the financial guarantees that not open-source project would be able to. Unless governments mandate there's zero interest from banks to put extra effort into building for unpopular solutions

Comment by jojobas 8 hours ago

Banks don't want the headache of supporting multiple weird phone OSes and it's understandable. As long as they don't require running an apple/google-certified device and OS I don't care.

Comment by _carbyau_ 8 hours ago

> Banks don't want the headache of supporting multiple weird phone OSes and it's understandable.

Commercially, this makes sense.

I am surprised that most nations of the whole world are fine with every citizen relying on one of two american companies for their lifestyle interactions though. I would have thought more nations would legislate their banks must support other options for sheer sovereign resilience.

Comment by hparadiz 7 hours ago

> Commercially, this makes sense.

Does it though? The people in this thread are like "just use a card". Well I've done that for years and had my card skimmed, lost, and stolen over the years. The cost wasn't trivial either. The credit card company knocked it off my balance but also lost on sales when I didn't have my card while they issued me a new one. It cost the credit card company actual money in both lost sales and in dealing with the fraudulent transactions.

Now if I was allowed to use my rooted Android phone during those years? It would have been locked down tighter than the vast majority of Windows boxes.

People forget that one of the value-adds of credit cards in the first place is that suddenly you didn't have to walk around with a big wad of cash. Credit cards gave you that extra level of security. Even if someone stole it, it's useless to them as soon as you make a phone call to the CC company. We can verify a transaction with a yubikey-like secret store on your device that never shares the private key with the operating system and which generates a virtual credit card on the fly. That's literally how Apple Pay and Google Pay already work. So whether a device is rooted or whatever literally doesn't matter.

Comment by 7 hours ago

Comment by microtonal 3 hours ago

Does skimming still happen a lot? At least in Europe we have switched from magnetic strip to chip-based cards, which are protected against replay attacks.

Comment by hparadiz 2 hours ago

We have chips but magnetic strips are still on most credit cards and payments are still accepted that way in many older payments gateways. From what I read on the topic the cost of lost business if this was disabled is greater than eating the cost of skimmer attacks. There is a several year plan to phase it out entirely. It's mostly because initially when chips came out a lot of business owners were angry that they had to buy new payment machines and good luck explaining this to a none tech person.

Comment by throawayonthe 2 hours ago

whether a device is rooted kinda does matter from this pov as it undoes a lot of the security assumptions on android...

however grapheneos isn't rooted anyway

Comment by hparadiz 2 hours ago

We're talking about just in time tokens that disappear after use. There's nothing you can do to defeat that on a rooted device. That's the whole point of the entire tech. That's why yubikeys are even a thing.

Comment by jcul 11 hours ago

I'm in Europe, but I had accepted that I had to do without. I hadn't heard of curve, going to check that out.

Comment by 400thecat 23 minutes ago

the Play store reviews for Curve are attrocious, especially the most recent ones. Looks like Curve is absolutely unusable, for many reasons

Comment by orthoxerox 1 hour ago

I am not North American, but instead of Google Pay I use my bank's app for contactless payments.

Comment by carlmr 11 hours ago

Garmin pay if you're ok with Garmin is one possibility.

Comment by lucb1e 9 hours ago

It's even available in my country! Never heard of it, would have assumed it's not being sold here. Let's see what that costs when I click the "shop now" button that's front and center

> Attention required!

> Sorry, you have been blocked

> The action you just performed triggered the security solution. There are several actions that could trigger this block including submitting a certain word or phrase, a SQL command or malformed data.

Thanks cloudflare *handshake* garmin. I suppose I'll stay with chip and pin for now

Comment by mendelmaleh 4 hours ago

They don't support amex or capital one, the two I use the most...

Comment by wolvoleo 10 hours ago

They have an app for Android that can do NFC? I thought it was only for their watches. Thanks!

Comment by drnick1 10 hours ago

There is no replacement. Strap a credit card to the back of your phone or pay cash.

Comment by fc417fc802 9 hours ago

Use a solvent to dissolve the plastic from the card then epoxy the extracted antenna and chip innards to the back of your phone case. Problem solved. (I'm only 50% joking, you can actually do this but maybe epoxy isn't the best option.)

Comment by microtonal 3 hours ago

Somewhat similar, Polar sells a band with an NFC payment chip in it (no experience, just saw it the other day):

https://support.polar.com/en/payment-wristband

Comment by llarsson 44 minutes ago

Other solutions that use the same underlying technology:

https://fidesmo.com/consumer/wearables/

Comment by mendelmaleh 4 hours ago

I'd like to do this, but epoxy it to a dress watch

Comment by kQq9oHeAz6wLLS 10 hours ago

I have these cards I keep in my (RFID-blocking) wallet, one for each credit account. Then I just pull them out and tap to pay. It's super convenient - no app required!

Comment by Cider9986 10 hours ago

What does RFID-blocking wallet do?

Comment by ArmadilloGang 9 hours ago

People cannot steal your card info via proximity to your wallet over NFC if the wallet’s physical barrier blocks the RF signal.

Comment by sneak 8 hours ago

People can't steal your card info via proximity to your wallet over NFC even without an RF blocking wallet. This is tinfoil hat security cargo culting, like putting tape over your webcam while leaving the laptop's microphone connected (audio from your room is much more useful than 2834823428 frames of your greasy face).

Comment by wolvoleo 6 hours ago

No but they can steal up to the pin-free amount of money your card allows. They can just hold a sumup to your pocket. Here in Europe most people use debit cards with non-reversible transactions and that limit is often 70-100€ which is quite a lot of money where I live. And they can steal a lot more if they follow you and shouldersurf your pincode.

I definitely use one of those wallets. They're quite convenient too.

Comment by mcsniff 10 hours ago

[flagged]

Comment by dang 9 hours ago

Can you please not post aggressively like this? It's against the site guidelines because it destroys what HN is supposed to be for.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.

Comment by thrownthatway 8 hours ago

[dead]

Comment by Cider9986 10 hours ago

The person mentioned it like it's a feature for them, but I haven't heard of it being anything other than a marketing gimmick, so I was curious for their perspective.

Comment by okanat 10 hours ago

It just has a Faraday cage and blocks radio signals. That's it.

Comment by OsrsNeedsf2P 11 hours ago

Putting my credit card in my phone case

Comment by Saris 10 hours ago

Cash for most things, and just use a card like normal otherwise.

I don't really see the appeal of contactless payment, pulling a card out really doesn't take much time.

Comment by mixmastamyk 7 hours ago

Cards are "contactless payment" these days.

Comment by eipi10_hn 6 hours ago

Google Pay (Google Wallet) actually also has virtual number so my real card number won't leak in many cases.

Comment by preisschild 9 hours ago

Just having to take your phone with you is quite comfortable. Your phone is probably the pocket-sized item you are unlikeliest to lose.

Comment by Saris 9 hours ago

True, but I also need my license to ride my motorcycle or drive a car, plus cash needs to go somewhere.

Comment by preisschild 1 hour ago

The perks of living in a city with good public transport

+ my country already has a mobile driver's license app

And most places take card (or nfc via google/apple pay)

Comment by oceanhaiyang 37 minutes ago

I’m always interested in installing this OS but seems the dev team seems quite insane, pursuing fights with anyone and everyone via their Mastodon account, I’m not sure I can trust them to be sane about this project…

Wish I could feel otherwise.

Comment by _def 18 minutes ago

Any examples?

Comment by strcat 10 minutes ago

Here's an example of what they're responding to with inaccurate personal attacks:

https://grapheneos.social/@GrapheneOS/116353973732143171

GrapheneOS debunks inaccurate claims from companies attacking it. Those companies often respond by claiming we're insane, delusional, schizophrenic, etc. Their supporters bring it to threads about GrapheneOS across platforms.

Most threads on Hacker News about GrapheneOS end up with several comments with baseless claims that I'm insane and links to harassment content. I've yet to see any significant moderation of it.

Comment by dmos62 58 minutes ago

Makes me sad, because I can't make the jump until I know my banking and related essential apps will work.

Comment by StrLght 12 minutes ago

In terms of apps, I fully believe it will only get worse from here: Google’s trajectory has been pretty hostile, and third‑party developers tend to follow it.

That’s why I have two phones. One runs GrapheneOS and is my daily driver; the other (considerably less private and secure) stays at home connected to my server so I can always scrcpy into it.

Comment by strcat 31 minutes ago

See https://privsec.dev/posts/android/banking-applications-compa... for banking apps. Anything that's not a banking or government app is extremely likely to work. Very few other apps ban using a non-Google-certified OS and that's the only significant reason for incompatibilities. GrapheneOS has a per-app exploit protection compatibility mode to work around memory corruption bugs caught by the features. It's in the process of overhauling the secure spawning feature to avoid tripping rare anti-tampering measures in certain banking apps. Play Integrity is increasingly the only compatibility issue. Some apps using Play Integrity have explicitly permitted GrapheneOS though.

Comment by SlickFox 51 minutes ago

[dead]

Comment by lucb1e 11 hours ago

The post doesn't say - what's new? Anything to look forward to besides the security patches for A17 being available for longer than they will be for A16?

Asking as an A11 user who will probably soon need to switch to a new device. I haven't noticed anything on other people's phones that isn't available on mine, including on my work phone that runs an up-to-date GrapheneOS (but I don't need to do much more than calling and 2FA, so I might just not be seeing it). Anything you guys are excited for, or any protips of things to check out that were released recently?

Comment by Cider9986 11 hours ago

Desktop mode is new and exciting.

This should have the full list; it's not a ton of changes, which speaks to how perfected Android has become.

https://android-developers.googleblog.com/2026/06/Android-17...

Comment by lucb1e 9 hours ago

Ah, right I forgot they are discontinuing ChromeOS. Makes sense that current Android releases are focused on getting the Android laptop experience on par

Edit: not discontinued but 'merge with Android' https://en.wikipedia.org/wiki/ChromeOS

Comment by jayd16 10 hours ago

New garbage collector could be pretty big.

Comment by microtonal 3 hours ago

But some of the garbage collector changes are also rolling out to older Android versions through a Play System Update.

https://android-developers.googleblog.com/2026/06/Android-17...

I'm not sure though if GrapheneOS gets mainline modules at all (most likely not).

Comment by em3rgent0rdr 11 hours ago

Presumably any new Android 17 features that aren't counter to GrapheneOS's mission, such as "Bubbles allows you to turn any app into a compact, floating window" https://blog.google/products-and-platforms/platforms/android...

Comment by lucb1e 9 hours ago

Does GrapheneOS run on tablets? I don't see a whole chat app (shown in the example) fitting on my phone screen alongside something like a web browser, and the screenshot is from a square screen

Comment by handedness 8 hours ago

It's complicated. The Tensor G2 Pixel tablet was a solid device, and you can still buy it new from Google (with no choice on color or size in my country), but production has been discontinued and the two direct generational successors were canceled, in sequence. First it was skipping a generation, then it was canceling it entirely. The rumored "Pro" version also appears to have been axed.

I've used mine daily since it came out, and it's a great experience. I'd recommend picking it up for anyone who wants GOS on a larger screen. An iPad it isn't, but my iPad Pros have sat almost totally dormant since I got it years ago.

It lacks horsepower compared to the latest Pixel Pros, but that hasn't been a practical concern in anything I've done with it so far.

Comment by someguyornotidk 1 hour ago

> production has been discontinued and the two direct generational successors were canceled, in sequence. First it was skipping a generation, then it was canceling it entirely. The rumored "Pro" version also appears to have been axed.

Pity. Genuine pity. Guess I'll continue using my 5 year-old out-of-support device until someone decides to make a decent GrapheneOS-compatible tablet with stylus pen support. If it breaks, I'll just go back to notebooks.

Comment by dredmorbius 6 hours ago

GrapheneOS runs on an extremely limited set of hardware, mostly Google's own Pixel phones.

There's a shot of GrapheneOS on a tablet just past the three-minute mark in this video. I suspect that's a Pixel tablet (of which thee are several), though I'm not certain and the video doesn't specify:

<https://redirect.invidious.io/watch?v=aNgupWEV13M&t=188>]

Google Pixel tablet: <https://store.google.com/us/product/pixel_tablet?hl=en-US>

Discussion on Reddit says Google Pixel and Pixel Fold are both supported (tablets): <https://old.reddit.com/r/GrapheneOS/comments/16bp6e9/anyone_...>.

Comment by mmooss 5 hours ago

There's an (un)folding Pixel that runs GOS. Not exactly a tablet, but possibly sufficient depending on your needs. Not cheap, however.

Comment by Bridgexapi 6 hours ago

I run GrapheneOS now 2 year :) always working fine

Comment by theandrewbailey 10 hours ago

> We've already tested the Android 17 port of GrapheneOS on the Pixel 6a, 7, 7a, 8, 10a, 10 and 10 Pro Fold.

No love for 9 or 9a? I guess it's still coming eventually.

- A 9a owner running GrapheneOS

Comment by Cider9986 10 hours ago

https://grapheneos.social/@GrapheneOS/116761945417419946

>Those are just the devices we initially tested it on which mainly has to do with which devices were available to the people working on the port.

>To clarify the 2nd paragraph, we've ported GrapheneOS to Android 17 for all of the supported devices. That's a list of the devices we already built and tested it. Our initial public release will be available for all the supported devices and we'll have tested it on each by then.

Comment by Cider9986 10 hours ago

I've been thinking it might be worthwhile to showcase that you can make GrapheneOS look beautiful or the same as stock Pixel UI. When I was considering switching from iPhone I had this misconception that it would look ugly or wouldn't look the same as Pixel UI, which is not the case at all. When I asked about it I wasn't given this clearcut answer that you can make GrapheneOS UI look the same or better than Pixel UI.

Comment by ebbi 10 hours ago

How much flexibility is there in changing appearance?

As an iPhone user, I really like what Oppo is doing with their ColorOS: https://www.oppo.com/nz/coloros16/

Comment by Cider9986 6 hours ago

Wow that looks nice. I don't think you can get that.

You can change any apps to different apps meaning the keyboard, homescreen/launcher, messaging app. The launcher is a primary UI thing which is different from iOS and is totally customizable by just installing a new app.

So you can change the look of anything that depends on an app, but stuff like the control center, lock screen, volume sliders, connectivity icons, notifications afaict can't be changed.

https://niagaralauncher.com is a cool looking launcher that I used to use.

It's a little confusing but I'll say there's nothing ugly like the stock GOS apps that can't be changed and tha unchangeably UI elements match the Pixel UI.

Here's a comparison which will show both the unchangable stuff like control center, but also the Pixel launcher, which you can swap out.

https://www.youtube.com/watch?v=lwNicPJk4lY

I switched from iPhone and once I installed good looking apps I really prefer the look to iOS because it's a lot faster and smoother.

Comment by ebbi 2 hours ago

Thanks! I've been contemplating trying out Graphene, but I really enjoy the user experience of iOS. But I feel like I should at least get acquainted with Graphene as the inevitable enshittification of iOS will occur.

Comment by madduci 4 hours ago

I wish they supported much more phones

Comment by flexxxxxxxxxer 33 minutes ago

Only Google Pixel’s and Fairphone’s currently provide bare minimum for 3rd-party OS support: working verified boot with user-provided signing keys. None of the other phones doing that yet

Fairphone cant be supported because it does not keep up with Android updates and in particular Linux kernel updates. Currently supported Fairphone’s have EOL (outdated, not supported) Linux kernel version. They are bad in terms of other aspects like lack of MTE, lack of USB port(s) control from software level on hardware level (Pixel 6 and newer have that), etc. You cant have privacy without security

But in 2027 this may change due to Motorola and GrapheneOS partnership

Comment by strcat 14 minutes ago

There are a lot of devices with the ability to install another OS and lock the device with verified boot, but none with the required updates and security features other than Pixels. Fairphones are near the bottom for security among the available options.

It's not one of the main issues with their devices but Fairphone has had a lot of issues with verified boot including using publicly available sample private keys for signing firmware and OS images across multiple device generations. It's not a strength of their devices.

Comment by SlickFox 44 minutes ago

[dead]

Comment by jp57 10 hours ago

What does it mean for an OS to be ported to another OS? Do they mean "ported to devices that support Android"?

Comment by strcat 18 minutes ago

It's a fork of the Android Open Source Project (AOSP) with major privacy/security improvements and alternatives to Google apps/services. The massive set of changes needs to be ported to new major versions of AOSP.

The apps also need to be updated to the Android 17 target API level but that can happen over several months following the OS itself being ported to it. The app aspect is something all Android developers need to deal with due to new target API levels bringing backwards incompatible improvements.

Comment by GranPC 10 hours ago

It means they rebased all their changes on top of the new version. This is usually time-consuming because AOSP is not developed in the open, so you can't do this incrementally as things change -- you just get a massive drop sometime after release.

Comment by okanat 10 hours ago

Android makes yearly releases. It is developed in cathedral-style. Google releases the source as a single big update. GrapheneOS is a fork. They need to port their customizations and extra software on top of the new release.

Comment by microtonal 3 hours ago

Every six months, not yearly. Google releases the major version and QPR2 as part of AOSP. QPR1 and QPR3 are Pixel-only.

Since they switched to QPRs and Pixel drops, major releases have become less important because feature roll out throughout the year. It's just that nobody outside GrapheneOS and Samsung (to my knowledge) rolls out QPR2, so for non-Pixel/Samsung, the major releases are... major.

I think another major source of work for GrapheneOS is when Google releases QPR1 and QPR3, because GrapheneOS had to rebase the driver/firmware changes on top of QPR0/QPR2.

Comment by floxy 10 hours ago

Think of GrapheneOS as being a set of patches on top of the Android Open Source Project that Google releases:

https://source.android.com/

They've ported the patches to work on top of the latest release.

Comment by 9 hours ago

Comment by tripdout 10 hours ago

Well, both, probably. GrapheneOS requires a lot of framework and device side changes.

Comment by veidr 6 hours ago

I have always wondered what this OS looks like. They have an incredibly detailed website with zero screenshots.

Comment by dredmorbius 6 hours ago

There are numerous video walkthroughs of GrapheneOS. This would be one starting point:

<https://redirect.invidious.io/watch?v=aNgupWEV13M>

Visually, it generally looks much like stock Android in terms of capabilities, though a stock install generally has far fewer apps installed.

Comment by jesterson 6 hours ago

Perhaps screenshots and sleek UI is not their selling point (and it isn't).

Comment by fylo 1 hour ago

One mans sleek ui is another's trash fire

Comment by MinimalAction 9 hours ago

What's the biggest draw of GrapheneOS apart from de-googling? Does it have a better battery life? And compliance with NFC payments?

Comment by llarsson 31 minutes ago

The ability to sandbox Google Play Services (if you need it, but realistically, you probably do) and to simply not assign it more permissions than it absolutely needs is awesome. I run it with very restricted permissions, where it by default requests every single permission it can. In stock Android, it has all those, and you can't limit it. Just that is worth it for me.

Comment by saint_yossarian 27 minutes ago

For me it's the added security features: per-app network permissions, scoped storage/contacts permissions, and a bunch of system hardening measures.

Comment by goda90 4 hours ago

If you actually degoogle, supposedly battery life is better but if you start adding back in sandboxed play services, you lose some of the gains.

Comment by mmooss 5 hours ago

Greatly improved privacy and security and end-user control of your phone and its data. In those areas, possibly the best option, though iPhones might be better in security (not necessarily the other two areas) - Apple has a slightly bigger budget and a few more engineers, and directly controls the hardware.

Comment by strcat 36 minutes ago

GrapheneOS exists to greatly improve the privacy and security of an existing open source OS project. Android Open Source Project has good privacy and security as a starting point.

Pixels provide strong hardware and firmware security. Pixels have made multiple significant hardware and firmware level improvements based on recommendations by GrapheneOS. GrapheneOS now has a hardware partnership with Motorola Mobility which includes working with Qualcomm. It isn't only a software project.

Regularly leaked data on the capabilities of Cellebrite show they have the least success with GrapheneOS by far despite specifically hiring for it based on their job postings.

Comment by eipi10_hn 6 hours ago

It will depend on your banks/services. If those apps strictly implement Play Integrity API, you won't be able to use them on Graphene OS

Comment by aussieguy1234 6 hours ago

With Google making side loading extremely difficult soon, there's never been a better time to switch to a more secure OS for your phone.

There are some apps I can't do without like ReThink DNS, NewPipe and other open source apps which I use regularly. All would get blocked under Googles new regime.

Comment by microtonal 3 hours ago

Rethink DNS is in the Play Store though:

https://play.google.com/store/apps/details?id=com.celzero.br...

Comment by arikrahman 10 hours ago

Couldn't be happier using this on an old Nord Oneplus N10. Had to look around since it was out of date but thankfully they have archived builds.

Comment by Ingon 10 hours ago

I've been running GrapheneOS for over an year now. Bought a Pixel 6a last year as a cheap way to test waters, but pretty soon I upgraded to discounted Pixel 9. It took a while to set the basics (coming from iPhone), and I'm still have a couple of stuff missing, but at this point don't intend to use anything else (for as long as possible).

The biggest hurdles for me were - should I use separate profiles and how to get apps. Initially, I started with a separate profile for google stuff (like play store/services and apps downloaded from there, like Viber), but eventually I moved everything to the owner profile (and took a bit of a privacy and battery hit in the matter of convenience). Still, being able to control many app permissions, gives me a good state of mind that apps are not doing more then I expect.

Just looked at what android 17 brings to the table and I'm mildly excited - especially improving performance and adding more permissions (like ACCESS_LOCAL_NETWORK)

Comment by Peacefulz 3 minutes ago

I started rebuilding my phone from factory tonight, and I opted for the private profile partition inside of the main profile for my play store apps. It's accomplishing everything I wanted a fully separate profile to do without the hard switch.

Comment by handedness 8 hours ago

I made the same mistake after being burned by the PinePhone, buying a heavily discounted Pixel 6 to test various Android forks, which eventually included GrapheneOS. I quickly knew I'd found home upgraded to a 9 Pro XL.

Comment by mmooss 5 hours ago

From Google's Android 17 release:

> ... Android 17 expands the capabilities of AppFunctions, a platform API with a corresponding Jetpack library. It allows you to contribute your app's unique capabilities as orchestratable "tools" for Android MCP, the on-device equivalent of the Model Context Protocol. AI agents and assistants (like Google Gemini) can discover and execute AppFunctions to perform workflows on behalf of the user with direct access to the app's local state.

Is that implemented in GOS? How is that done securely - giving LLMs power to control some apps?

Comment by MinimalAction 9 hours ago

Well, for some reason Pixel 9 series and also 10 pro is excluded?

Comment by dredmorbius 6 hours ago

<https://news.ycombinator.com/item?id=48563154>

Comment by sergiotapia 6 hours ago

I own a z fold 6.

If I try Graphene what do I lose? Similar to how if you use something like icefox or icewolf one of those very secure browser, lots of normie websites like banking just straight up don't work. What would I lose by moving away from samsung's default to this more private OS?

Comment by eipi10_hn 6 hours ago

You can't install Graphene OS on Samsung phones.

Comment by mmooss 5 hours ago

GOS won't install? It's blocked somehow? Or it's not officially supported?

Comment by microtonal 3 hours ago

It's not supported and you cannot unlock the bootloader most Samsung phones anymore (IIRC since OneUI 7).

Comment by poolnoodle 1 hour ago

It is only developed for Pixel phones

Comment by strcat 23 minutes ago

It isn't only developed for Pixels. Pixels are currently the only devices permitting an alternate OS with the required updates and security features. GrapheneOS has a partnership with Motorola Mobility and there will be official GrapheneOS support for a subset of next generation Motorola devices.

Comment by seany 5 hours ago

GrapheneOS would be so much more interesting if there was an official supported way for rooting it. That's the only reason I haven't switched to it on my several devices (all rooted)

Comment by flexxxxxxxxxer 42 minutes ago

But in that case why you would need to use GrapheneOS at all? Without security you cant have privacy and OS with security as priority cant just add hole in the system because it would allow to bypass all security features added on top of AOSP and AOSP features too. Most features people use root for can be achieved without root by modifying Android Framework itself with SystemUI/Settings app

If you wish so you can gain root privileges on your own in your own build or with modifying GrapheneOS existing builds. It wont be compatible with GrapheneOS provided updates because of signature mismatch

Comment by drewfax 5 hours ago

That completely goes against what they're working towards. I understand why you would want to root your own phone, but GOS is targeting highest security standards and root ain't one of them (for good reason).

Comment by preisschild 27 minutes ago

They value privacy and security. Allowing userspace apps to completely circumvent Android's permission system massively weakens both.

Comment by 0xdecrypt 8 minutes ago

[dead]

Comment by iririririr 11 hours ago

permanent reminder that graphene and all other "alternatives to android" depend on extracted binary blobs. tons of them. which is the reason new (kernel) versions are such a chore/achievement.

Comment by strcat 1 hour ago

The kernel drivers are fully open source and moving to new kernel branches is a standard part of the update process. Pixels are currently moving from 6.1 and 6.6 to 6.12 with Android 17 QPR2. This is part of the hardware requirements for GrapheneOS listed here:

https://grapheneos.org/faq#future-devices

Comment by Asfand3099 1 hour ago

[flagged]

Comment by jocelyner 1 hour ago

[dead]

Comment by phantasmat 1 hour ago

[flagged]

Comment by seabombs 10 hours ago

I had been using LineageOS + microG for many years on my Pixel 3. I upgraded to a Pixel 8 and tried out GrapheneOS and the install experience was good, but I found some odd performance quirks - apps would be slow to install and run, downloads were slow, etc. Has anyone had similar issues?

Many apps that work on microG don't work in GrapheneOS without installing Google services anyway. I'm by no means across the full privacy implications, but my feeling is microG balances privacy and usability better for me.

I've since switched back to LineageOS+microG and am happy with it. Just my experience.

Comment by gruez 6 hours ago

>but I found some odd performance quirks - apps would be slow to install and run, downloads were slow, etc. Has anyone had similar issues?

not sure about downloads specifically, but app installs are slow because grapheneos forces AOT compilation (JIT is disabled), presumably for security reasons.

Comment by seabombs 5 hours ago

Ah that makes sense, thanks!

Comment by lucb1e 9 hours ago

A lot of developers are lured into building in a dependency on Google services, so yes you'll need microG or, as GrapheneOS prefers, the original Google code running on your device for those apps to function. Or patch the app, like Langis does for Signal (not necessary for it to function without Google in this case, but it removes its calling out to Google's apps and services for those who don't want that). If you're happy with that setup and don't need protect-from-the-government levels of security (street thugs aren't going to ransomware your device by abusing an unlocked bootloader or send exploit chains that work on anything but the hardened allocator), LineageOS is probably the better choice for you. GrapheneOS has some nice things like easily denying the network permission for an app (even if they could theoretically work around it with intents) and having a custom A-GNSS server, but you can do the same on LineageOS by using root and something like AFWall+ for the network and configuring Graphene's A-GNSS (SUPL) proxy in the system settings (don't forget to donate if you use it and are able)

Comment by gruez 6 hours ago

>but you can do the same on LineageOS by using root and something like AFWall+ for the network

lineageos has built-in firewall for years now. no need for afwall.

Comment by codelong888 9 hours ago

[flagged]

Comment by qzgrid37 9 hours ago

[dead]

Comment by Lucasoato 9 hours ago

Since grapheneOS only supports latest Google pixel phones, I tried installing LineageOS on my Mi11. Sadly, if you own a Xiaomi, you can’t just install another os. You need to unlock the bootloader and Xiomi limits you with a global quota of daily unlocked phones, you basically need to enter at midnight and hope. This is a complete nonsense, we have zero governance on our devices after paying them so much.

Comment by 7 hours ago

Comment by mvdtnz 11 hours ago

So I still need to buy a Google phone to get it? No thank you.

Comment by Cider9986 11 hours ago

To get a sense of the project and its goals I recommend reading this post[1].

Buying a used Pixel is economical, environmental, and likely doesn't support Google. Pixels are the only secure and open android devices that could work for the project and meet the extensive requirements[2]. This is because GrapheneOS takes real steps to protect user privacy and security, not features that degrade security and don't increase privacy. You are going to be doing much more against Google by using GrapheneOS because it comes with 0 google services by default and takes advanced steps to protect you from all apps and services you install.

If you are still not willing or able to purchase a Pixel, GrapheneOS has a partnership with Motorola to help them create compatible devices which will be available soon[3].

[1] Privacy and security on computing devices need to become far stronger to protect people from pervasive violations of their rights. https://xcancel.com/GrapheneOS/status/2044440381803069778#m

[2] https://grapheneos.org/faq#future-devices

[3] https://xcancel.com/GrapheneOS/status/2028448871374803007#m

Comment by jesterson 6 hours ago

> Buying a used Pixel is economical, environmental, and likely doesn't support Google

Interesting. What do you think are reasons for google to run Pixel then?

Not being sarcastic here, but what links you shared (thank you) say imply there are almost no benefits for Google to run Pixels and as we all know, Google is not a company doing charities.

Comment by Cider9986 5 hours ago

> What do you think are reasons for google to run Pixel then?

Get millions of users using their services. The average person who buys a Pixel will likely go all in with the Google ecosystem giving Google every word they type, every message to a loved one, every search. It's a data gold mine.

I doubt they sell Pixels at a loss, but even if they did they could make up for it like how Amazon does with kindles.

https://www.forbes.com/sites/zakdoffman/2026/04/28/price-of-...

I think they also use pixels for testing android and such which is why they keep it secure and open.

Comment by mvdtnz 11 hours ago

The Pixel was never sold in my country so it's much more difficult that you think. Even if it was I wouldn't buy it because I don't buy Google products.

> If you are still not willing to purchase a Pixel for whatever reason, GrapheneOS has a partnership with Motorola to help them create compatible devices which will be available soon[2].

Ok? Wake me up when that happens.

Comment by kQq9oHeAz6wLLS 10 hours ago

> The Pixel was never sold in my country

Okay, see, that's an important thing to add to your original post. Saves everyone a lot of time.

If they don't sell them in your country, it's not "no thank you" as you said, it's "this doesn't apply to me".

Comment by mvdtnz 10 hours ago

I don't see how it's relevant. I couldn't possibly have made it any more clear I would not buy a Google device, new or used, because I don't like Google.

Comment by prmoustache 10 hours ago

I am not sure why you even consider an android based OS then.

Comment by okanat 10 hours ago

Because AOSP is open source and can be built without Google Play running at the background unlike the other alternative: giving up privacy to yet another big tech Apple.

Graphene adds many privacy features on top of regular AOSP. But it only works on phones that has good security features that are not woefully outdated or completely closed-off. Google has complete control over Pixel supply chain and they can make their phones with all bells and whistles for their ends and they behave a bit benevolently and expose the interfaces to the user too.

Most Android phones use Qualcomm which doesn't give a flying fuck about giving control or privacy to the users.

Comment by dredmorbius 5 hours ago

That's a value judgement, and it's a fair one. It does throw an additional constraint in the works though.

FWIW, I've been looking at the mobile / portable computing space fairly intensively for a month or so. I share your quite dim view of Google.

GrapheneOS does seem to be one of the most attractive Android alternatives.

There are also Lineage (based on CyanogenMod), AOSP, KaiOS (based on AOSP, via Firefox OS), LightOS (by Lightphone, AOSP), AphyOS (used by Punkt. mp03, also based on AOSP). These tend to be minimal, used on feature phones / dumbphones / minimalist phones. And there are /e/OS and iodéOS.

Among Linux-based non-Android options are Sailfish OS (Jolla), Ubuntu Touch (Ubuntu), PineOS (Pinephone), and PureOS (Purism), Tizen, Mobian (based on Debian), postMarketOS (based on Alpine Linux). These tend to be maximalist, offering a fuller experience than Android, with support for native Linux applications and configurations.

There are some non-Linux OSes, of which I'm aware of System 30+ (a/k/a S30+, Nokia), OpenHarmony (by Huawei), and ... something described as "realtime OS" or "RTOS" which actually had a name, for a Japanese flip phone, but which has slipped my mind (probably something reviewed by Jose Briones on his YouTube channel).

And of course there's iOS.

Briones by the way is an absolutely excellent resource: <https://josebriones.org/>. He's also one of the mods of /r/dumbphones at Reddit.

There are trade-offs, and what you choose depends on what you value, in the marketplace, in capabilities, in your own peace of mind.

If you want a full-featured device with wide acceptance, few limitations, and want nothing to do with Google, look at iOS devices.

If you want (nearly) full Android capabilities, but without Google's prying eyes and ears, GrapheneOS or LineageOS are probably your best bets. Whilst Graphene currently only works on Google Pixel devices, there's been a partnership announced with Motorola, there may be others in future (my speculation, with no other basis). And ironic as it seems, Graphene + Pixel actually does get you further from Google in many ways, though I still understand your position.

If you want full freedom / maximal privacy, and are prepared to make compromises on capabilities and battery life, look at one of the Linux-based, non-Android options. I've heard of quite a few bugs with these.

If you're looking for specific hardware capabilities (e-ink, folding / candybar, keyboard (T-9, qwerty, ...), small, large, tablet, headphone jack, etc., etc., or specific software capabilities, you're going to further refine your search. (Briones has a Dumbphone Finder at his website which does this pretty well.)

If you want modularity or repairability, there are devices such as Fairphone or Keyphone with (some) replaceable components.

If you want minimalism, look at an AOSP-based device, or perhaps S30+. These will give you feature phones capable of calls, texts, and a few apps, but not much else. For more complete computing you'll need either a desktop or a laptop.

There are more extreme options. I'm considering, for example, whether or not a roving SIP WiFi-only phone might be an option, and if so, what would be necessary to make that work. It would rely on a WiFi network provider (public or non-public network, or a cellular modem), and wouldn't function everywhere but should function in many locations sufficiently to be useful.

Most non-smartphone options I've looked at, and in particular the usual "dumbphone" suspects (Light Phone, Punkt.) tend to run an AOSP-based OS, with Nokia being the principle exception.

Briones FWIW uses the Light Phone III as his daily driver. That's somewhat spendy, and quite minimal, but he has his reasons, discussed at length at his blog and YT channel.

I'm leaning fairly strongly toward an option now, though my main hesitation is that KaiOS devices have very limited phone/SMS spam and/or traffic management. I'd prefer known-contacts-only could reach the device, that doesn't seem to be possible (KaiOS has only specific-caller blocking, and apparently a limited API for enabling more robust phone blocking). On the flipside, the device can be powered off, and/or battery removed.... I'm also looking at some VOIP/SIP options.

Comment by microtonal 2 hours ago

Most of them also have really bad security, for various reasons, including:

- Since virtually no hardware vendor (outside Jolla) supports non-Android phones, they typically use phones that were made by their ODMs as Android phones and rely on kernel/firmware/device trees made available for those Android builds. Sadly, nobody outside Google (PixelOS) and Samsung really cares about giving their kernels and firmware timely updates. So usually the kernel and firmware are full of known holes (Qualcomm and others do monthly bulletins).

- For many reasons, Linux systems have never really focused on proper security isolation and sandboxing. So most of these phones have really poor isolation and you are only one browser/image parsing/... vulnerability away from full phone compromise.

- Unlocked bootloaders or otherwise compromised boot chain. So, it's easy for persistent malware to compromise a phone and there is no way to attest that the system runs unmodified binaries (as you can e.g. can with GrapheneOS' auditor or Android phones with fully verified boot and Strongbox).

Let's say, if I was a bank, I can understand why I would want to block such devices.

Comment by 725686 10 hours ago

Motorola is not mentioned in any of the links.

Comment by troyvit 10 hours ago

https://news.ycombinator.com/item?id=47214645

Comment by Cider9986 10 hours ago

third link

Comment by driverdan 10 hours ago

It makes sense that an open source project would focus on one series of phones since their time and resources are limited.

That said, Google's hardware is behind their competitors and they've had a lot of problems in the past few years. The Pixel 8 Pro has hardware WiFi problems, the 9 and 10 are both minor updates with prices that are far too high, the 10 is eSIM only, etc.

Comment by microtonal 2 hours ago

The Pixel 9 had a vastly improved modem and the 10 switched to TSMC for their Tensor SoC, resulting in better performance and better battery life/less heat.

It's true that the SoCs are not that great for an expensive flagship phone, but the trick is buying a Pixel halfway the cycle, when the prices go to mid-range. For instance, currently in my country:

- Pixel 10 is 350 Euro off (currently 549 Euro).

- Pixel 10 Pro is 360 Euro off (currently 739 Euro).

- Pixel 10 Pro XL is 360 Euro off (currently 939 Euro).

- The Pixel A series are less interesting currently, because it's still early in the cycle, but the 9a is 200 Euro off (349) and the 10a is 120 Euro off (428). It's a shame that they switched to last-gen SoCs and modems now on the A-series now.

I know that the Pixel 100 is coming soon-ish, but the 10 series have floated around those price points since 5-6 months after the release.

the 10 is eSIM only

Looking at my P10P with physical SIM. I guess you are in the US?

Comment by lucb1e 8 hours ago

> The Pixel 8 Pro has hardware WiFi problems, the 9 and 10 are both minor updates

The prime difference between P8 pro and P9 pro is that the newer one is nearly a usable size (just about fits in a pocket now). The battery also got substantially better in two ways: on mobile data (when you're on someone's WiFi, odds are you're also near a charger) you get 33% longer use time on all variants of the P9 and 55% on the P10 and P10p (9 to 12 and 14 hours, respectively), and hours of use per 30 minutes of charging went up from 4.6 for the P8 to 6.3 for the P9(p) and 6.2 or 7 for the P10 and P10p, respectively

The rest is indeed relatively minor but it's not an unwelcome upgrade. Prices didn't change much when buying second-hand 1.5 years after release, when the newest devices are out and nobody cares about the generation-before-last despite >5 years of updates remaining (plus however long you think it's fine without updates)

Comment by jordand 11 hours ago

Only silver lining to this is they run a lot of discounts and promotions on them, and it's possible to buy them at a significant discount. Got my first Pixel 10 on a very cheap contract with trade-in promos on top, and got a second Pixel 10 at a 70% discount from the RRP.

Comment by microtonal 2 hours ago

Watch out in the US though, apparently some carriers disable OEM Unlocking (so you cannot unlock your bootloader).

Comment by mvdtnz 11 hours ago

It's not possible to buy them at all where I live, even if I wanted to funnel money to Google - which I do not. I have gone to great lengths to de-Google my life.

Comment by drnick1 10 hours ago

Soon, there will be compatible Motorola phones.

Comment by boldlybold 10 hours ago

Ebay? A friend to ship it? I agree on the de-google part but putting graphene on a used pixel is aligned!

Comment by drnick1 10 hours ago

Absolutely, and it is irrational to refuse to buy hardware from Google (which, with Graphene, is under your control) when the alternative is to either run a Google OS on a third party phone (and give up control of the software), or Apple (equally bad), or some impractical and less secure alternative like a Linux phone incompatible with Android apps.

Comment by nosioptar 7 hours ago

If you buy used, you save a bundle and google gets no money from you.

I still don't want a pixel, so I went with a used ebay phone and installed lineageos.

Comment by lanycrost 3 hours ago

I have tried ubuntu on mobile only once and never come back, because it had very bad and poor experience compared to native experience of that mobile. On which models this system works the best?

Comment by strcat 54 minutes ago

GrapheneOS is highly usable and compatible with nearly all Android apps. It has a similar experience to a mainstream Android OS if you choose to set it up that way such as using sandboxed Google Play in the main profile (which does not ruin what it provides at all, it's a perfectly valid setup). The purpose of GrapheneOS is to provide far better privacy and security than the Android Open Source Project (AOSP). AOSP is a lot more private and secure than a traditional desktop OS including one ported to mobile.

See https://grapheneos.org/faq#recommended-devices for the device recommendations. There are going to be Motorola devices with GrapheneOS support within a year too.

Comment by konstmonst 55 minutes ago

A pity that GrapheneOS works only on Pixel and those phones are trash for me (no microsd support). I have a 1.5 tb microsd card with all media/books and it is easy to move to another phone by just swapping the microsd card so this is one of the most important features for me.