Skip to main content
GrapheneOS Installatie & Hardening

Spy-Supply

GrapheneOS Installatie & Hardening

Send in your own Pixel, we flash and configure it

€150incl. VAT

You already own a Google Pixel but don’t want to figure out GrapheneOS yourself. Send in the device or book an appointment in Enschede: we install GrapheneOS through the official web installer with verified boot enabled, set up the full app list and hardening exactly as on our own phones, and hand it back with a short walkthrough. No accounts, no cloud backup needed, everything happens locally or via tracked shipping.

In stock
Warranty
12 months
Shipping
Neutral packaging
Payment
Bank, cash or crypto

Preinstalled and configured

Take the phone out of the box, choose a PIN and you can communicate encrypted right away. You do not have to install or configure anything yourself.

Everything is free software with no subscription, except Mullvad VPN. Want an app left off? Mention it with your order and we will skip it.

What actually makes GrapheneOS strong?

We explain how encryption fits together from your PIN down to storage, why a separate security chip makes the difference, and how the device holds up against spyware like Pegasus.

Read more about GrapheneOS
  • Aurora StoreAlternative app store for installing apps from Google Play, optionally without a personal Google account. (Aurora OSS)
  • F-DroidOpen-source Android app store focused on free and transparent software. (F-Droid)
  • TutaPrivacy-focused email service with end-to-end encryption for secure communication and email data storage. (Tuta)
  • Threema LibrePrivacy-focused messenger for encrypted chats, calls and files. The Libre version is distributed through F-Droid.
  • MollySecurity-focused Signal variant with encrypted local storage, automatic locking, RAM wiping and Tor support. (Molly)
  • WhatsAppPopular messaging app for everyday communication, with end-to-end encryption for personal messages and calls.
  • SimpleX ChatMessenger without a traditional user ID, phone number or username. Contacts connect through a link or QR code, with end-to-end encrypted messages. (SimpleX Chat)
  • ConversationsOpen-source XMPP messenger with OMEMO end-to-end encryption for secure chats. (Conversations)
  • OpenKeychainOpen-source OpenPGP app for encrypting and decrypting files and communications with cryptographic keys. (OpenKeychain)
  • Mullvad VPNVPN service that routes internet traffic through an encrypted VPN tunnel and does not log user activity according to Mullvad policy. (Mullvad VPN)
  • DuckDuckGo BrowserPrivacy-focused browser with built-in protection against different forms of online tracking. (DuckDuckGo)
  • WastedEmergency security app that can lock the device or start a wipe when configured triggers occur, such as prolonged inactivity or a USB data connection while locked. (Google Play)
  • SentryAdditional security layer that can limit failed unlock attempts and disable certain USB data connections. (Google Play)
  • StayPutAnti-theft app that can trigger a loud alarm when the phone is unexpectedly disconnected while charging. (F-Droid)

Protections already enabled

  • Duress PIN: enter it and the device wipes itself immediately and irreversibly.
  • Automatic wipe after a configurable number of failed attempts.
  • Auto-reboot: the device returns to a locked state after inactivity, making extraction far harder.
  • USB port blocked while the device is locked.
  • No Google Play Services, unless you explicitly ask for them.

How the software works

GrapheneOS feels like ordinary Android but works fundamentally differently beneath the surface. This is what you notice day to day, and what runs along invisibly.

Every app sits in its own cage

Apps run strictly separated and only see what you give them. Unique to GrapheneOS: you can also switch off internet per app. An app without network permission literally cannot send anything out, no matter what you type into it.

Storage fenced off per app

With Storage Scopes you give an app access only to the folders or photos you point at, while the app believes it can see everything. No app quietly leafing through your entire camera roll.

Google apps are possible, but caged

Need an app that truly cannot work without Google? Then we install Google Play as an ordinary, unprivileged app in a separate profile. Google runs as a guest on your device instead of as its owner.

Several lives on one device

Profiles are fully separated worlds with their own apps, data and encryption. Work and private, or a profile you only open at home. A locked profile is unreadable to the rest of the device.

Updates straight from the source

Security updates come straight from the GrapheneOS project, usually within days. There is no manufacturer or carrier sitting on a patch for months. Installing happens in the background, you notice nothing.

Under the hood: stricter memory

Nearly all spyware abuses memory-management bugs. GrapheneOS uses a stricter memory system that aborts such abuse on the spot, on the Pixel 8 and newer even inside the processor itself. Protection that also works against flaws nobody knows about yet.

Highlights

  • GrapheneOS with verified boot, you check the fingerprint yourself
  • The same app list and hardening as on our own phones
  • By appointment in Enschede, or send in via tracked shipping
  • No Google account, no cloud backup needed

In the box

  • Your own Pixel with GrapheneOS and preinstalled apps
  • Short personalised walkthrough, in person or via Signal
  • Overview of the chosen PIN and wipe settings

Specifications

Operating system
GrapheneOS
Turnaround
1–2 werkdagen
Delivery
Afspraak in Enschede of retour per post
WhatsApp openen