−11%GrapheneOS
Privacy-focused Google Pixel configured with GrapheneOS
The a-series drops some camera features but nothing from the security model: same Titan chip, same verified boot, same update window. All apps are installed and the wipe protections configured here too. For most people this is the sensible price point.
Take the phone out of the box, choose a PIN and you can communicate encrypted right away. You do not have to install or configure anything yourself.
Everything is free software with no subscription, except Mullvad VPN. Want an app left off? Mention it with your order and we will skip it.
We explain how encryption fits together from your PIN down to storage, why a separate security chip makes the difference, and how the device holds up against spyware like Pegasus.
Read more about GrapheneOSGrapheneOS feels like ordinary Android but works fundamentally differently beneath the surface. This is what you notice day to day, and what runs along invisibly.
Apps run strictly separated and only see what you give them. Unique to GrapheneOS: you can also switch off internet per app. An app without network permission literally cannot send anything out, no matter what you type into it.
With Storage Scopes you give an app access only to the folders or photos you point at, while the app believes it can see everything. No app quietly leafing through your entire camera roll.
Need an app that truly cannot work without Google? Then we install Google Play as an ordinary, unprivileged app in a separate profile. Google runs as a guest on your device instead of as its owner.
Profiles are fully separated worlds with their own apps, data and encryption. Work and private, or a profile you only open at home. A locked profile is unreadable to the rest of the device.
Security updates come straight from the GrapheneOS project, usually within days. There is no manufacturer or carrier sitting on a patch for months. Installing happens in the background, you notice nothing.
Nearly all spyware abuses memory-management bugs. GrapheneOS uses a stricter memory system that aborts such abuse on the spot, on the Pixel 8 and newer even inside the processor itself. Protection that also works against flaws nobody knows about yet.
