GrapheneOS is the phone system most degooglers end up recommending. It takes Google off the phone and still lets you run the apps you depend on. The catch is the hardware, because today it runs only on Google’s own Pixels.
This page takes you from choosing the Pixel to daily use, checked against GrapheneOS’s own documentation in October 2026. If you’d rather buy a phone that ships degoogled, read our guide to the best degoogled phones first.
What GrapheneOS Is
GrapheneOS is a free, open-source version of Android run by a non-profit project. It ships with no Google apps and no Google Play services. Its first goal is security, and privacy follows from that.
On top of plain Android, you get these extras.
- No Google by default. Nothing on the phone talks to Google unless you install Google’s apps yourself.
- Extra hardening. GrapheneOS adds exploit protections across the system, including the hardware memory tagging (MTE) built into recent Pixels.
- Network and Sensors permissions. You can cut any app off from the internet or from the motion sensors.
- Contact Scopes and Storage Scopes. An app that asks for your contacts or files sees only the ones you pick, or none.
- Theft and seizure protection. A locked phone restarts after 18 hours by default, the USB-C port only charges while locked, and an optional duress PIN wipes the phone.
- Its own apps. The Vanadium browser (a hardened Chromium), GrapheneOS Camera, and Auditor, which checks that the system is genuine.
Two things put some people off. You have to buy a Google Pixel to leave Google. And GrapheneOS will run Google’s Play services if you ask, as ordinary apps with no special access. Purists skip them. Most people install them for a few apps and fence them off.
Supported Pixels in October 2026
GrapheneOS supports Pixels from the Pixel 6 to the Pixel 10a, including the Fold models and the Pixel Tablet. The latest release, 2026100600 (6 October 2026), is built on Android 17 with the October 2026 security patch.
| Pixel | Supported until at least | Should you buy it? |
|---|---|---|
| Pixel 10a | March 2033 | Yes |
| Pixel 10, 10 Pro, 10 Pro XL | August 2032 | Yes |
| Pixel 10 Pro Fold | October 2032 | Yes |
| Pixel 9a | April 2032 | Yes |
| Pixel 9, 9 Pro, 9 Pro XL, 9 Pro Fold | August 2031 | Yes |
| Pixel 8a | May 2031 | Yes, a good used buy |
| Pixel 8, 8 Pro | October 2030 | Yes, a good used buy |
| Pixel Fold, Pixel Tablet | June 2028 | Only if you already own one |
| Pixel 7a | May 2028 | Only if you already own one |
| Pixel 7, 7 Pro | October 2027 | No |
| Pixel 6a | July 2027 | No |
| Pixel 6, 6 Pro | October 2026 | No, support is ending now |
The dates are the end of Google’s minimum update support, as listed by GrapheneOS. GrapheneOS says its own updates for a Pixel typically end shortly after that date. It “strongly” recommends buying only a Pixel 8 or newer, because those models get at least 7 years of support from launch.
Don’t Buy a Pixel 11 for GrapheneOS
The Pixel 11 series is on sale, but GrapheneOS doesn’t support it. In late August 2026, GrapheneOS said it “strongly” recommends against buying one, because Google appeared to have dropped hardware memory tagging, a security feature GrapheneOS relies on. On 1 September it said the hardware may still support memory tagging and that it was testing. It hasn’t added the Pixel 11 to its list. Until it does, buy a Pixel 10 or 10a.
Motorola Is Coming, but Not Yet
Motorola and GrapheneOS announced a partnership in March 2026, and GrapheneOS says Motorola support is on track for 2027. No Motorola phone runs GrapheneOS today. If you need a phone now, don’t wait for it.
Buying a Pixel for GrapheneOS
New or Refurbished
A new Pixel gives you the full support window and a clean history. In October 2026 the Google Store in the US sells the Pixel 10a from $599 and the Pixel 10 from $799. In Germany the 10a costs from €649, and the Pixel 10 was on sale for €629 instead of its usual €799. Prices change often, so compare both models where you live. The Google Store still lists the Pixel 9a at $499, but shows it out of stock.
A used or refurbished Pixel 8, 8a or 9 series phone is the cheapest way in, with updates until 2030 or later. Buy from a seller who accepts returns, because a carrier block on unlocking can’t be fixed after purchase.
Carrier-Locked Phones Can’t Be Unlocked
To install GrapheneOS you must turn on OEM unlocking, and a carrier can block that switch. GrapheneOS warns that devices sold in partnership with specific carriers “may be locked by the carrier, which will prevent installing GrapheneOS.” It says this is mainly a problem with US carriers. Verizon Pixels in particular often can’t be unlocked at all. A SIM unlock from your carrier is a separate thing, so don’t count on it lifting the block.
Buy the unlocked version from the Google Store or a retailer that sells it unlocked. Before you pay for a used Pixel, run this check.
- Connect the phone to Wi-Fi, since some phones need internet before OEM unlocking can turn on.
- Open Settings → About phone, check the model against the table above, then tap Build number repeatedly until developer mode turns on.
- Open Settings → System → Developer options and try the OEM unlocking toggle. If it’s grayed out, the phone is probably carrier-locked. Walk away.
Buying One With GrapheneOS Already Installed
Nitrokey in Germany sells NitroPhone 10 models, which are Pixel 10 series phones with GrapheneOS preinstalled. They cost from €649 for the NitroPhone 10a to €1,999 for the 10 Pro Fold (Oct 2026). GrapheneOS says it isn’t affiliated with any company that sells phones with GrapheneOS, and its official advice is to buy a supported Pixel and install it yourself. If you buy preinstalled, check the phone with the Auditor app when it arrives. Our buyer’s guide compares the ready-made options.
Install GrapheneOS With the Web Installer
The official web installer runs in your browser. GrapheneOS publishes no time estimate, but plan on 30 to 60 minutes the first time, downloads included.
Before You Start
The install wipes the phone twice. Export your two-factor codes first, because losing them hurts most. Then move your photos, save your chats with each app’s own backup, export contacts that live only on the phone, and download anything else with Google Takeout.
What You Need
- The Pixel, charged, unlocked and on the supported list.
- A computer running Windows 10 or 11, macOS Sonoma, Sequoia or Tahoe, Arch, Debian 12 or 13, Ubuntu, Linux Mint or ChromeOS, with at least 2 GB of free memory and 32 GB of free storage. No virtual machines. Another phone running GrapheneOS or Play-certified Android 14 to 17 also works.
- A supported browser. Use Chrome, Chromium, Edge, Vanadium, or Brave with Shields off. Skip private windows and Snap or Flatpak builds. On Ubuntu, Chromium is a Snap with broken USB support, so use Chrome there.
- A good USB-C cable plugged straight into the computer, with no hub.
Steps
- On the Pixel, connect to Wi-Fi. Open Settings → About phone and tap Build number repeatedly until developer mode turns on.
- Open Settings → System → Developer options and turn on OEM unlocking.
- Turn the phone off. Hold Volume Down while you turn it on, and keep holding until you see a red warning triangle and Fastboot Mode. Don’t press the power button to pick Start, because the installer needs the phone in this mode.
- Connect the phone to the computer. On Windows you may need to install a fastboot driver, and on Linux you may need udev rules. Take a Pixel Tablet off its stand.
- Open grapheneos.org/install/web and click Unlock bootloader. On the phone, use a volume button to select the option that accepts, then press the power button. This wipes the phone.
- Click Download release and wait until the installer says the download is done.
- Click Flash release. Don’t touch or unplug the phone until the installer reports that flashing is finished.
- Click Lock bootloader and confirm on the phone the same way. This wipes it again. Don’t skip it. Verified boot, which checks that the system hasn’t been tampered with, only fully protects you with a locked bootloader.
- With Start selected on the phone, press the power button to boot GrapheneOS.
- Go through setup. The last screen has a toggle about OEM unlocking that is checked by default. Leave it checked, which turns OEM unlocking off again.
From now on, the Pixel shows a short warning at startup that it’s loading a different operating system. That’s normal with GrapheneOS.
To check the install is genuine, install Auditor from the GrapheneOS App Store and pair it with a second Android phone. You can also compare the boot key hash the phone shows with the list on the install page.
If flashing fails, try another cable or USB port, close any private window, and make sure your browser isn’t a Snap or Flatpak build.
To go back to stock Android, boot into fastboot, click Remove non-stock key on the GrapheneOS installer page, then flash Google’s own system with Google’s Android Flash Tool.
Set It up Without Google First
Start with no Google at all, because you may not need it. Set a strong PIN, since GrapheneOS’s protections lean on it. Open the App Store app, GrapheneOS’s own store, and install Auditor or GrapheneOS Camera if you want them. Then install F-Droid or Obtainium and try your apps. Add Google only when an app refuses to work without it.
Sandboxed Google Play, and What Works With It
Many apps expect Google Play services for push notifications, maps, sign-in and payments. GrapheneOS lets you install Google’s real Play services as ordinary sandboxed apps. In GrapheneOS’s words, Google Play “receives absolutely no special access or privileges.”
- Open the App Store app, select Google Play services and install it. The Play Store comes with it.
- Sign in to the Play Store with a Google account if you want to download apps from it. It can be a separate account that holds nothing else.
- For push notifications, turn off battery optimization for Google Play services in its app info.
Location requests from Google’s apps go to GrapheneOS’s own location service by default. Play Games is a separate install. A few features that need deep system access don’t work.
Banking Apps
Most banking apps work once sandboxed Google Play is installed. Apps that demand Google’s Play Integrity “device” check fail, because GrapheneOS isn’t certified by Google and doesn’t fake it. It supports hardware attestation instead, and its attestation guide is something you can send to your bank.
Check every must-have app before you switch. The PrivSec.dev list tracks banking apps on GrapheneOS (last updated 1 October 2026), and Plexus rates thousands of apps on degoogled setups. Known problem cases include N26 (new sign-ups), BoursoBank (new logins), Denmark’s MitID and TD Authenticate.
If an app crashes or refuses to start, try these in order.
- Turn on Exploit protection compatibility mode for that app under Settings → Apps, then the app’s name.
- If you turned off Native code debugging under Settings → Security & privacy → Exploit protection, turn it back on.
- If the Play Store blocks the install, the PrivSec list suggests installing through Aurora Store.
Google Wallet and Tap-to-Pay
Android Auto
Android Auto is officially supported. It needs sandboxed Google Play.
- Install Android Auto from the GrapheneOS App Store, not from the Play Store.
- Open Settings → Apps → Sandboxed Google Play → Android Auto.
- Turn on the permissions toggle for wired Android Auto, or for wireless if your car uses it. Wired needs much less access. Some cars need the wireless permissions even over a cable.
- To see notifications in the car, grant notification access from the link below the toggles.
Only apps installed from the Play Store show up in the car. If you use Android Auto inside Private Space, the same screen lives under Settings → Security & privacy → Private Space.
Calls, Texts and Carrier Features
GrapheneOS aims to work with every carrier Google supports on Pixels, including VoLTE, Wi-Fi calling, visual voicemail and 5G. There are a few gaps. Visual voicemail doesn’t work on AT&T in the US. Wi-Fi calling can vary on carriers that rely on Google’s own apps. RCS chat in Google Messages is only known to work in the Owner profile, the main one you set up first. For texting without Google, see our Google Messages alternatives.
Profiles Keep Google in Its Own Box
GrapheneOS lets you run up to 31 extra user profiles plus a guest. Each has its own apps and data, and sandboxed Google Play installed in one profile is invisible to the others. Ending a profile’s session stops every app in it. Pick the simplest of these three setups that works for you.
- Everything in the Owner profile. Install sandboxed Google Play once and use the phone normally. RCS and Android Auto work most simply here.
- Google in a second profile. Keep the Owner profile Google-free and put your bank, WhatsApp and other Google-dependent apps in a second profile. Notification forwarding between profiles is off by default, so turn it on if you want those alerts.
- Google in Private Space. A locked area inside your main profile, under Settings → Security & privacy → Private Space, so you don’t have to switch users.
Work apps are a common reason to keep a separate profile. Some users report that workplace device-management tools flag GrapheneOS as a rooted phone, so keep work in its own profile or on another device.
Profiles also suit a child’s phone. You keep the Owner profile, give your child a secondary user and switch off app installs for it. GrapheneOS has no time limits or web filter, so our Family Link alternatives page shows what to pair it with.
Where to Get Apps
Use the GrapheneOS App Store for GrapheneOS’s own apps, F-Droid for open-source apps (its rewritten 2.0 app came out in September 2026), and Obtainium for apps that publish releases on GitHub or their own site. Aurora Store fetches Play Store apps without a Google sign-in, though anonymous logins can break. Accrescent is a security-focused store, still in early alpha. The Play Store inside sandboxed Google Play covers paid apps and the rest. Our phone guide compares these stores, and our Google Play Store alternatives page shows how to move your apps over.
Backups With Seedvault
GrapheneOS includes Seedvault, an encrypted backup service. It’s off until you turn it on. Search Settings for Backup to find it.
- Where backups go. A USB drive, or any cloud storage app that plugs into Android’s storage system, such as Nextcloud.
- The recovery code. Seedvault gives you a 12-word code when you set it up. Write it down. Without it you can’t restore.
- What’s missing. Apps can opt out of Android backups, and many messaging and banking apps do. Back up Signal and your 2FA app with their own export tools.
GrapheneOS plans to replace Seedvault with a new backup system, so expect this to change.
Updates
Updates are automatic. The phone checks about every six hours, downloads in the background and installs to a second copy of the system. A notification tells you to reboot when it’s done. If the new version fails to start, the phone rolls back.
The settings live under Settings → System → System update. Leave the Release channel on Stable unless you want to test Beta releases.
GrapheneOS and Android Developer Verification
Google now requires Android app developers to verify their identity. On certified phones, meaning ordinary phones sold with Google Play, apps from unregistered developers will be blocked unless you use a one-time “advanced flow” or a computer. Since 30 September 2026, Google checks installs from Google Play and other participating stores in Brazil, Indonesia, Singapore and Thailand. It plans to cover all apps worldwide in 2027.
GrapheneOS isn’t Play-certified, so the rule doesn’t apply on it. F-Droid, Obtainium and downloaded app files keep installing normally. The indirect risk is that developers who refuse to register lose stock-phone users, which could shrink the supply of open-source apps. Our phone guide has the full timeline.
GrapheneOS vs CalyxOS, /e/OS, LineageOS and iPhone
| System | Runs on | Google layer | Updates and security | Choose it if |
|---|---|---|---|---|
| GrapheneOS | Pixel 6 to Pixel 10a | Optional sandboxed Google Play | Strongest hardening, fast patches, relocked bootloader | You have or can buy a Pixel |
| CalyxOS | Pixels up to the 9 series and 10a, Fairphone 4, 5 and 6, several Motorola g phones, SHIFTphone 8 | microG built in | Back to monthly updates since July 2026 after an 11-month pause | You own a Fairphone 5 or 6 |
| /e/OS | 217 phones on its list, and sold preinstalled by Murena | microG, plus Murena’s store and cloud | Usually lags GrapheneOS on security patches | You want a ready-made phone |
| LineageOS | The widest range of phones | None, though community builds add microG | Bootloader usually stays unlocked, so clearly weaker | You’re keeping an older phone alive |
| iPhone | iPhones | Apple instead of Google | Long support, closed source | You want the least effort and every app |
microG is an open-source rewrite of parts of Google Play services. It runs less Google code, but push still passes through Google’s servers and Play Integrity checks fail, so banking apps tend to do worse than with sandboxed Google Play.
If you’re torn between the first two, our GrapheneOS vs CalyxOS comparison goes deeper on phones, apps and update end dates. For ready-made phones and picks by budget, see the best degoogled phones. For other routes, including degoogling a Samsung without flashing, see our main phone guide.
Before you wipe anything, find out which accounts depend on your Google address. Our free scan builds that list from files you download yourself, and nothing is uploaded.