GrapheneOS is the premier privacy and security-focused mobile operating system. It delivers hardened Android compatibility without compromising your data, freedom, or peace of mind.
Unlike standard Android distributions, GrapheneOS is engineered from the ground up to protect you against real-world threats, from mass surveillance to targeted exploitation.
Features a custom hardened memory allocator (`hardened_malloc`), advanced exploit mitigations, and a drastically reduced attack surface to neutralize unknown (0-day) vulnerabilities.
No Google apps or services are bundled. Network and Sensors permission toggles allow you to completely sever apps from internet access and hardware sensors.
Run your essential applications seamlessly. Optional "Sandboxed Google Play" provides compatibility with the app ecosystem without granting Google OS-level privileges.
Developed transparently as a non-profit project. GrapheneOS is free from corporate data-harvesting motives, ensuring the software serves you, not advertisers.
GrapheneOS doesn't rely on security through obscurity. It deploys cutting-edge, peer-reviewed technologies to mitigate entire classes of vulnerabilities.
The vast majority of severe vulnerabilities are memory corruption bugs. GrapheneOS includes a custom hardened_malloc that provides probabilistic detection of use-after-free and inter-object overflows, alongside deterministic detection of linear overflows.
Combined with hardware memory tagging (MTE) on supported devices, it renders traditional heap exploitation techniques virtually impossible.
GrapheneOS will never bundle Google services into the OS. However, it provides a unique compatibility layer that allows you to install the official Google Play apps as regular, sandboxed applications.
They receive zero special privileges, cannot access data from other apps without explicit consent, and can be restricted to specific user profiles or completely uninstalled at any time.
Go beyond standard Android permissions. GrapheneOS adds a Network permission toggle to completely disallow direct and indirect network access (including localhost), preventing apps from phoning home.
The Sensors permission toggle blocks access to all non-essential sensors (accelerometer, gyroscope, barometer, etc.), returning zeroed data to apps to prevent side-channel tracking and fingerprinting.
Protect sources and communications against state-level adversaries, device seizures, and network surveillance with hardware-backed attestation and encrypted environments.
A robust, hardened platform for penetration testing, secure communications, and daily use without the telemetry and vulnerabilities of stock Android.
Anyone who believes their personal data, location history, and browsing habits are not for sale to data brokers or tech monopolies.
Yes, in most cases. Because GrapheneOS passes Play Integrity (formerly SafetyNet) checks and supports Sandboxed Google Play, the vast majority of banking and payment apps function normally. In rare cases where an app aggressively checks for a "certified" device, you may need to use the web version or contact the developer.
No. GrapheneOS is installed via the official web-based installer directly from your browser. It requires unlocking the bootloader (which wipes the device), but it does not require rooting. In fact, GrapheneOS is designed to be used with a locked bootloader and verified boot for maximum security.
GrapheneOS officially supports Google Pixel devices. Pixels are chosen because they offer the best hardware security features (like the Titan M2 security chip), timely firmware updates, and support for hardware memory tagging (MTE) on newer models, making them the most secure consumer hardware available.
No operating system can make you completely untraceable if you misuse it. However, GrapheneOS provides the strongest possible foundation: no built-in telemetry, MAC randomization, strict permission controls, and network-level isolation. Your operational security (OpSec) practices remain the most critical factor.