GrapheneOS
What it's for
A fully de-Googled Android, installed on a Pixel phone: mobile sovereignty.
Why it matters
It’s the structural defence par excellence against an OS or app store that would scan you. Google services in an optional sandbox, per-app network permissions, isolated profiles, auto-reboot that purges keys from memory, a duress PIN that wipes the phone. So respected for security that it’s used by spyware targets.
For whom & when
Exposed profiles, but also any citizen willing to buy a Pixel to take back control of their phone.
Install & use
Get a compatible Google Pixel phone (it’s the only supported hardware, for security reasons).
On a computer, go to grapheneos.org/install and follow the web installer (a few clicks, no terminal needed).
For your apps, install the free F-Droid store; add sandboxed Google Play only if needed.
- Set a long passphrase (not a 4-digit PIN) and learn the “Lockdown” mode.