As a project, GrapheneOS continues to grow with exceptionally loyal users, and it is easy to understand.

We are not some hobby or experimental OS. We are a work of (almost) 10 years of mobile and Android security research, with paid developers, members from many branches of computer and security expertise and volunteer moderators. Everything GrapheneOS has and will implement is added to target the current threat landscape, and is designed to combat real threats. Our security developments aren't to combat irrelevant, baseless 'what-if' scenarios or create easily attacked obscurity tactics and security theater features. We are not scammers who rely on telling you that you'll be "bulletproof" or "untraceable" unlike what came before GrapheneOS.

We are not some average AOSP distribution simply taking the Android base, piling other apps or flawed, insecure additions and treating them as our features. This is not innovation. GrapheneOS changes the AOSP base from all levels, hardening the most exploited components or replacing them with extra secure alternatives that we maintain or have even developed from the ground up. Projects like Hardened Malloc, Vanadium, Camera app and PDF viewer are some users will reap the benefits of in their day to day lives. Other OS's taking such work shows how valuable this work has been.

GrapheneOS is one of the only open-source projects to trailblaze mobile security, from implementing a lock screen bypass fix before Google, reporting numerous security vulnerabilities including ones used by companies attempting to attack us, and adding enhancements upstream to numerous open source projects. GrapheneOS is the first and still the only platform to have ARM hardware Memory Tagging Extensions implemented in production with the Pixel 8 and also the only browser in production when counting Vanadium as well. If you look at the project's socials for this, you will see additions like these have been planned years beforehand.

The foresight the project has for what we should implement should tell you what the experience and skills of the team members are. GrapheneOS is here to stay, and the work done will be around to stay even longer. Even if you don't use the OS you have reaped benefits of the work. It's never too late to understand what you are missing out.

#GrapheneOS

If I wanted to buy a phone this year, what's the best to buy for a standard user to switch to this OS?

Reply to this note

Please Login to reply.

Discussion

Depends a bit, Graphene will usually provide a bit extra to the security update period but for my cheap self it usually comes down to how long a particular device will be supported vs how cheap I can get it.

https://support.google.com/nexus/answer/4457705?hl=en#zippy=%2Cpixel-a-g-pixel-pixel-a-g-pixel-a-pixel-xl-pixel%2Cpixel-a-pixel-pixel-pro-pixel-a-pixel-pixel-pro-pixel-fold%2Cpixel-pro

Bought a 5a a couple of years back on a black Friday, but nowadays you'd probably want a Pixel 6 or newer. The latest is always going to give the longest support period but also costs the most (and the biggest risk you buy it for the long term and break it or something).

Also, be cautious of used phones or carrier phones that don't let you unlock the bootloader.

Pixel 8 has the best security with hardware Memory Tagging support. A Pixel 7a is the best for value and lifespan. A pixel 6a is the cheapest of all supported devices with more than a year of support left.

Worth noting Google is making an announcement for Pixels in a few days... Pixel 8a?

How long can GrapheneOS support my device for?

https://grapheneos.org/faq#device-lifetime

That's a good point.

Replying to this as an update: the new addition was unfortunately a new color for the Pixel 8 - no new phone!

Wait til May for the 8a like the years before.

I saw a lot of possible FUD about no 8a and maybe even no more Pixels. I'd like to hear your take on that. I'm betting you have way better intel on it than these AI/copypasta "news" sites.

There's absolutely nothing to suggest that. Pixels have been a successful phone lineup and Google extending the minimum support period for Pixel 8 and later and expanding form factors by making tablets and foldables should suggest the opposite - guaranteeing they'll support those phones for 7 years is a big statement to make.

We have always said we'd like to see other OEMs meet our security requirements or work with us to make a device for GrapheneOS, but, we have no concerns on Pixels.

I do agree Google has a habit of making a product and then killing it, but I have no concerns over Pixels. Worst case scenario is they make a different device lineup with a new name (like how we had Nexus before Pixel) but that's completely out of the question I think.

That's good to hear. Glad y'all have your finger on the pulse of it. There's so much bullshit noise out there when it comes to new devices.

Unzappable!

Glad my post was useful, maybe at some point I'll get one of those mini nodes setup or something.