The anti-pitch
GrapheneOS is free. You can install it yourself.
We sell GrapheneOS phones — and we start by telling you the software costs nothing and you can do it yourself. If that is your best option, do it. Here is how, and here is what you actually pay us for.
The software is free
GrapheneOS is a hardened, free, open-source Android OS with reproducible builds. Nobody should sell it to you as a secret. Charging for it without saying so is one of the scams we document on our verification page.
The official installer
The source of truth is the project itself. The web installer runs from a WebUSB-capable browser (Chromium), with no account and no proprietary software:
What installing takes
- 01
A supported Pixel
GrapheneOS only supports Google Pixels (for verified boot under your own keys). Check the supported-devices list on the project site.
- 02
Unlock the bootloader
Required to flash — and it wipes the device entirely. Some carrier units have OEM unlocking locked down: verify this before buying second-hand.
- 03
Flash via the web installer
A reliable USB-C cable, a computer, a WebUSB browser. The installer downloads and writes the right image; budget 30 to 60 minutes.
- 04
Re-lock the bootloader
The essential, often-skipped step: re-locking re-enables verified boot under GrapheneOS’s keys. A bootloader left unlocked voids much of the protection.
- 05
Verify
Check verified-boot state and hardware attestation. Being able to redo this check yourself is exactly the autonomy this project is for.
What you pay us for
Not the software. Time, a verified supply chain, and support:
- A sourced, verified Pixel, prepared in the workshop — see “How we prepare your device”.
- The full preparation: baseline apps, pre-granted permissions, USB data protection, preloaded offline maps.
- Guided hardening done with you: diceware credentials, duress PIN, auto-reboot.
- Legal warranty and the right of withdrawal — as with any purchase from a professional.
- Optionally, “care”: self-hosted remote assistance at your initiative, locate and wipe on demand — never an MDM, never permanent access.
Plainly
If you are comfortable with a terminal, a cabled install and a firmware check, do it yourself: it is the best choice for your autonomy, and it is free. Our offer is for those who want to save time, get verified hardware and human support — not for those looking for software you cannot find anywhere else.
Note: this is about phones. Our ThinkPads (coreboot / Heads) and Mudi routers follow the same logic — free upstream software, value added in sourcing, preparation and support.
To go further: