GrapheneOS
@grapheneos.org
Open source privacy and security focused mobile OS with Android app compatibility.
https://grapheneos.org/
https://grapheneos.org/
Pinned
GrapheneOS
@grapheneos.org
· Feb 7
In April 2024, Pixels shipped a partial implementation of our January 2024 proposal for firmware-based reset attack protection. Fastboot mode now zeroes RAM before enabling USB. This successfully wiped out the After First Unlock state exploit capabilities of two commercial exploit tools.
The change you're describing is something to do with the work profile management app rather than GrapheneOS.
February 9, 2026 at 2:01 AM
The change you're describing is something to do with the work profile management app rather than GrapheneOS.
GrapheneOS adds Contact Scopes as an alternative to granting the Contacts permissions and Storage Scopes as an alternative to granting any of the file/media permissions. Profiles are very useful but those specific things are covered well without them on GrapheneOS.
February 9, 2026 at 2:01 AM
GrapheneOS adds Contact Scopes as an alternative to granting the Contacts permissions and Storage Scopes as an alternative to granting any of the file/media permissions. Profiles are very useful but those specific things are covered well without them on GrapheneOS.
There have been no changes to the way work profiles function in any of the recent releases. You're describing a configuration change made by the work profile management app you use. It's not anything to do with a GrapheneOS change. Work profile management apps can set up different lock approaches.
February 8, 2026 at 11:48 PM
There have been no changes to the way work profiles function in any of the recent releases. You're describing a configuration change made by the work profile management app you use. It's not anything to do with a GrapheneOS change. Work profile management apps can set up different lock approaches.
Unlike the other 2 kinds of available profiles, work profiles are heavily controlled by the work profile management app and are essentially owned by it although it still can't access data of the apps within the work profile along with other similar boundaries being in place. It can configure a lot.
February 8, 2026 at 11:47 PM
Unlike the other 2 kinds of available profiles, work profiles are heavily controlled by the work profile management app and are essentially owned by it although it still can't access data of the apps within the work profile along with other similar boundaries being in place. It can configure a lot.
Profiles are useful for having separate groups of apps with separate data but apps cannot access data outside their sandbox without the user or another app in the same profile allowing it regardless. You don't need profiles to have app sandboxing and work profiles are just one type of profile.
February 8, 2026 at 11:46 PM
Profiles are useful for having separate groups of apps with separate data but apps cannot access data outside their sandbox without the user or another app in the same profile allowing it regardless. You don't need profiles to have app sandboxing and work profiles are just one type of profile.
That's a work profile. There are 3 kinds of profiles: Private Space, work profiles and secondary users. Apps are sandboxed without involving profiles. Apps can't see what's happening in other apps or read their data. Apps also can't read profile data such as contacts without explicit user consent.
February 8, 2026 at 11:44 PM
That's a work profile. There are 3 kinds of profiles: Private Space, work profiles and secondary users. Apps are sandboxed without involving profiles. Apps can't see what's happening in other apps or read their data. Apps also can't read profile data such as contacts without explicit user consent.
Not clear what you mean. Do you mean work profile? Private Space? We don't understand what's being asked.
February 8, 2026 at 7:28 PM
Not clear what you mean. Do you mean work profile? Private Space? We don't understand what's being asked.
Nearly all Android apps work on GrapheneOS. Our sandboxed Google Play feature works better than ever. Extremely very apps use the Play Integrity API. It's mainly used by banking apps and 90% of banking apps still work fine on GrapheneOS despite it. Some banking apps using it permit GrapheneOS.
February 7, 2026 at 11:14 PM
Nearly all Android apps work on GrapheneOS. Our sandboxed Google Play feature works better than ever. Extremely very apps use the Play Integrity API. It's mainly used by banking apps and 90% of banking apps still work fine on GrapheneOS despite it. Some banking apps using it permit GrapheneOS.
It does work every time a PIN is requested on the lockscreen for a SIM PIN, primary lock PIN or 2-factor authentication PIN. It doesn't change the PIN authentication UI elsewhere.
February 7, 2026 at 5:45 PM
It does work every time a PIN is requested on the lockscreen for a SIM PIN, primary lock PIN or 2-factor authentication PIN. It doesn't change the PIN authentication UI elsewhere.
Our 2-factor fingerprint unlock feature also makes using a strong passphrase much more convenient without opening up the security hole of biometric-only unlock. Can use 6-8 diceware words for a passphrase but then mostly unlock with fingerprint+PIN. A random 4 digit PIN is fine as the 2nd factor.
February 7, 2026 at 2:07 AM
Our 2-factor fingerprint unlock feature also makes using a strong passphrase much more convenient without opening up the security hole of biometric-only unlock. Can use 6-8 diceware words for a passphrase but then mostly unlock with fingerprint+PIN. A random 4 digit PIN is fine as the 2nd factor.
We first introduced locked device auto-reboot in July 2021. It can be set between 10 minutes and 72 hours. iOS 18.1 and Android 16 added a similar feature but those are hard-wired to 72 hours for both and it's opt-in for Android. They're missing comparable USB and other defenses to go along with it.
February 7, 2026 at 1:48 AM
We first introduced locked device auto-reboot in July 2021. It can be set between 10 minutes and 72 hours. iOS 18.1 and Android 16 added a similar feature but those are hard-wired to 72 hours for both and it's opt-in for Android. They're missing comparable USB and other defenses to go along with it.
GrapheneOS makes the device far more secure against exploitation in general whether it's a remote attack or through physical access. It greatly improves the security of a device in the After First Unlock state against data extraction. Our locked device auto-reboot gets the device back to BFU.
February 7, 2026 at 1:46 AM
GrapheneOS makes the device far more secure against exploitation in general whether it's a remote attack or through physical access. It greatly improves the security of a device in the After First Unlock state against data extraction. Our locked device auto-reboot gets the device back to BFU.
A strong password such as 6-8 random diceware words will stop them getting the data if the device is in Before First Unlock state. However, that's extremely inconvenient with Android or iOS and few people will use it. Titan M2 or SEP make it so a typical random 6 digit PIN is quite secure in BFU.
February 7, 2026 at 1:44 AM
A strong password such as 6-8 random diceware words will stop them getting the data if the device is in Before First Unlock state. However, that's extremely inconvenient with Android or iOS and few people will use it. Titan M2 or SEP make it so a typical random 6 digit PIN is quite secure in BFU.
GrapheneOS version 2026020600 released:
grapheneos.org/releases#202...
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
discuss.grapheneos.org/d/31639-grap...
#GrapheneOS #privacy #security
grapheneos.org/releases#202...
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
discuss.grapheneos.org/d/31639-grap...
#GrapheneOS #privacy #security
GrapheneOS releases
Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.
grapheneos.org
February 7, 2026 at 1:43 AM
GrapheneOS version 2026020600 released:
grapheneos.org/releases#202...
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
discuss.grapheneos.org/d/31639-grap...
#GrapheneOS #privacy #security
grapheneos.org/releases#202...
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
discuss.grapheneos.org/d/31639-grap...
#GrapheneOS #privacy #security
Vanadium version 145.0.7632.45.0 released:
github.com/GrapheneOS/V...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31596-vana...
#GrapheneOS #privacy #security
github.com/GrapheneOS/V...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31596-vana...
#GrapheneOS #privacy #security
Release 145.0.7632.45.0 · GrapheneOS/Vanadium
Changes in version 145.0.7632.45.0:
update to Chromium 145.0.7632.45
add workaround for upstream bug causing a crash in desktop mode for sites using videos with I420
extend connectivity check chan...
github.com
February 5, 2026 at 7:42 PM
Vanadium version 145.0.7632.45.0 released:
github.com/GrapheneOS/V...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31596-vana...
#GrapheneOS #privacy #security
github.com/GrapheneOS/V...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31596-vana...
#GrapheneOS #privacy #security
We've been working with a major OEM since June 2025 and that's going well. They'll have devices meeting our requirements (grapheneos.org/faq#future-d...) and providing official GrapheneOS support in 2027.
February 5, 2026 at 4:21 PM
We've been working with a major OEM since June 2025 and that's going well. They'll have devices meeting our requirements (grapheneos.org/faq#future-d...) and providing official GrapheneOS support in 2027.
GrapheneOS version 2026020400 released:
grapheneos.org/releases#202...
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
discuss.grapheneos.org/d/31576-grap...
#GrapheneOS #privacy #security
grapheneos.org/releases#202...
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
discuss.grapheneos.org/d/31576-grap...
#GrapheneOS #privacy #security
GrapheneOS releases
Official releases of GrapheneOS, a security and privacy focused mobile OS with Android app compatibility.
grapheneos.org
February 5, 2026 at 9:24 AM
GrapheneOS version 2026020400 released:
grapheneos.org/releases#202...
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
discuss.grapheneos.org/d/31576-grap...
#GrapheneOS #privacy #security
grapheneos.org/releases#202...
See the linked release notes for a summary of the improvements over the previous release.
Forum discussion thread:
discuss.grapheneos.org/d/31576-grap...
#GrapheneOS #privacy #security
Pixels are currently the only devices meeting the requirements which are listed at grapheneos.org/faq#future-d.... We're working with a major Android OEM since June 2025 towards a subset of their future devices meeting the requirements starting in 2027. It's a non-goal to support insecure devices.
February 4, 2026 at 6:41 PM
Pixels are currently the only devices meeting the requirements which are listed at grapheneos.org/faq#future-d.... We're working with a major Android OEM since June 2025 towards a subset of their future devices meeting the requirements starting in 2027. It's a non-goal to support insecure devices.
GrapheneOS is heavily focused on privacy and security which means it needs secure hardware providing the hardware-based security features we use to protect users. It supports all of the available devices meeting the security requirements. There are 20 supported non-end-of-life devices right now.
February 4, 2026 at 6:21 PM
GrapheneOS is heavily focused on privacy and security which means it needs secure hardware providing the hardware-based security features we use to protect users. It supports all of the available devices meeting the security requirements. There are 20 supported non-end-of-life devices right now.
GrapheneOS App Store version 35 released:
github.com/GrapheneOS/A...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31550-grap...
#GrapheneOS #privacy #security #android
github.com/GrapheneOS/A...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31550-grap...
#GrapheneOS #privacy #security #android
Release 35 · GrapheneOS/AppStore
Notable changes in version 35:
temporarily disable predictive back until issues are addressed
retry automatic repository updates with exponential backoff before reporting an error
handle Cancellat...
github.com
February 4, 2026 at 4:30 PM
GrapheneOS App Store version 35 released:
github.com/GrapheneOS/A...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31550-grap...
#GrapheneOS #privacy #security #android
github.com/GrapheneOS/A...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31550-grap...
#GrapheneOS #privacy #security #android
GrapheneOS App Store version 34 released:
github.com/GrapheneOS/A...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31526-grap...
#GrapheneOS #privacy #security #android
github.com/GrapheneOS/A...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31526-grap...
#GrapheneOS #privacy #security #android
Release 34 · GrapheneOS/AppStore
Notable changes in version 34:
adjust selection logic for ABI APK variants to avoid updating packages to ones with more ABI mismatches in order to start using 64-bit-only Vanadium updates for 64-b...
github.com
February 3, 2026 at 5:30 PM
GrapheneOS App Store version 34 released:
github.com/GrapheneOS/A...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31526-grap...
#GrapheneOS #privacy #security #android
github.com/GrapheneOS/A...
See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.
Forum discussion thread:
discuss.grapheneos.org/d/31526-grap...
#GrapheneOS #privacy #security #android
It's a public Discord server anyone can join and debating desktop operating systems isn't permitted even in the offtopic channel. Anyone you've seen posting these things has been breaking the official rules. People who know the rules and are respecting it aren't promoting desktop operating systems.
February 2, 2026 at 10:40 AM
It's a public Discord server anyone can join and debating desktop operating systems isn't permitted even in the offtopic channel. Anyone you've seen posting these things has been breaking the official rules. People who know the rules and are respecting it aren't promoting desktop operating systems.
macOS has much better overall security than Windows or traditional desktop distributions. Moving to Windows from macOS for privacy or security reasons doesn't make sense. It isn't something you would have heard from any GrapheneOS project member. You're giving others the wrong impression.
February 2, 2026 at 10:36 AM
macOS has much better overall security than Windows or traditional desktop distributions. Moving to Windows from macOS for privacy or security reasons doesn't make sense. It isn't something you would have heard from any GrapheneOS project member. You're giving others the wrong impression.
This post gives the incorrect impression that our project has views it doesn't based on what a few people who aren't GrapheneOS project members or contributors have said on Discord. Using iOS and macOS is reasonable but we don't recommend iOS over GrapheneOS and definitely don't recommend Windows.
February 2, 2026 at 10:33 AM
This post gives the incorrect impression that our project has views it doesn't based on what a few people who aren't GrapheneOS project members or contributors have said on Discord. Using iOS and macOS is reasonable but we don't recommend iOS over GrapheneOS and definitely don't recommend Windows.
The reason we currently only support one family of Android devices is because those are the only ones providing both reasonable security and proper alternate OS support. GrapheneOS is a privacy and security hardened OS, so it wouldn't make sense to use insecure devices where we can't protect users.
February 1, 2026 at 11:05 PM
The reason we currently only support one family of Android devices is because those are the only ones providing both reasonable security and proper alternate OS support. GrapheneOS is a privacy and security hardened OS, so it wouldn't make sense to use insecure devices where we can't protect users.