Move to a hardened phone - GrapheneOS, when the stakes are high
For most people, the steps before this are plenty. But if you’re genuinely high-risk - a journalist, an activist, someone a capable adversary wants into - the phone’s operating system itself becomes the weak point. GrapheneOS is a free, open-source version of Android, built for privacy and security, that runs on Google Pixel phones. It’s a real commitment, not a toggle - here’s an honest picture before you decide.
What it is, and what it isn’t
A hardened Android with Google’s services removed from the core, stronger app isolation, and finer permission controls. It’s not an invisibility cloak - it’s a materially harder target, which for the right person is exactly the point.
You’ll need a Pixel
GrapheneOS only supports Google Pixel phones, because it leans on their hardware security features. Check the current supported models on the official site before you buy anything - the list moves as new phones arrive and old ones drop off support.
Installing it
You flash it from a computer using the official web installer; it takes under an hour and wipes the phone clean. Use only the official GrapheneOS site - never a phone sold “pre-loaded with GrapheneOS” by a third party, which defeats the entire purpose.
Living with it
Most apps work - you can install Google’s Play services in a sandbox if you need them - but expect some friction. A few banking or Google-tied apps may balk. Test the handful of apps you can’t live without before you rely on it as your only phone.
It’s one layer, not the whole answer
A hardened phone with reused passwords and an exposed email is still exposed. Do the earlier steps first - the password manager, the locked-down email, two-step. This is the top of the stack, not a shortcut past the rest of it.
“Is this overkill for me?”
Almost certainly, if no one is specifically targeting you - and that’s a fine thing to conclude. We’d far rather you nailed the free basics than bought a new phone you don’t need. This step is here for the few who genuinely do.
Last checked: 19 October 2026. Supported Pixel models and the install process change - always follow grapheneos.org, not this page, for the current steps.