Privacy & security · mobile operating system
GrapheneOS
Hacker Approved
A hardened, privacy-focused Android that just works, with fine-grained permissions and optional sandboxed Google Play, though some banking apps refuse to run on it.
Summarized from 2838 comments.
A hardened, privacy-focused Android that just works, with fine-grained permissions and optional sandboxed Google Play, though some banking apps refuse to run on it.
- recommend
- 895
- criticize
- 312
- months recommended
- 13 of 13
- median owned, 87 owners said
- 1 year
Why people love it
Strong security hardening by default · 8
GrapheneOS adds the option to set a 2nd factor PIN for fingerprint unlock to make using a strong passphrase convenient without the downsides of biometric-only unlock.
Jul 2026 · commentGrapheneOS is not going to compromise on privacy or security, and so far, pixel devices are the only devices meeting the hardware security requirements.
Oct 2026 · commentFor me it's the added security features: per-app network permissions, scoped storage/contacts permissions, and a bunch of system hardening measures.
Jun 2026 · commentOptional sandboxed Google Play · 5
Graphene also allows changing (or disabling) connections to Google via their proxy for: Widevine checks, Internet Connectivity checks, certificate transparency, PSDS, and SUPL.
Sep 2026 · commentGrapheneOS does better at deGoogling than other OSes, including adding features to the OS so people have fewer reasons to install Sandboxed Google Play
Oct 2026 · commentIt is significantly easier to the point it is entirely optional. GrapheneOSs privacy and security features do not make avoiding google more difficult.
Oct 2026 · commentGranular network and storage permissions · 3
GrapheneOS has storage scopes which make the app think it has full folder/file access but in reality you can choose the exact files or folders to give access.
Jul 2026 · commentFor me it's the added security features: per-app network permissions, scoped storage/contacts permissions, and a bunch of system hardening measures.
Jun 2026 · commentThis is good for compatability (apps generally take into account that a network can be down) and too avoid apps knowing you are using the feature.
Feb 2026 · commentFast, easy, just works · 3
Everyone should use Graphene. You don't have to be a privacy nut - it's also a version of Android that just works, efficiently, without bullshit, for you and not for Google.
Jun 2026 · commentI've been using GrapheneOS for years, I can't go back to another OS due to its ease of use, speed, and awesome features baked into my day to day use now.
Jan 2026 · commentConsumers don't care how interesting the developer's problems are. They want their own problems to be solved and GrapheneOS does a better job of that.
Jan 2026 · comment
What people warn about
Some banking apps won't work · 5
It is very ironic that the solution is using an old, insecure phone full of unpatched holes for all important banking and id business, because that one is vendor-allowed while your state-of-the-art GrapheneOS is not.
Jan 2026 · commentunlike other non-rooted custom ROMs, allows re-locking the bootloader. But, whether a banking app will work depends on what level of Google Play attestation they require
Jan 2026 · commentprivacy-aware family members running up-to-date Lineage or Graphene OS with recent kernels and frequent updates constantly run into apps refusing to work for "security" reasons
Jul 2026 · commentUpdates limited by OEM drivers · 2
It's effectively a hardened variety of LineageOS/AOSP, hence entirely reliant on device-specific downstream kernels/BSPs that will never see a feature update.
Jan 2026 · commentGrapheneOS is fully dependant on the OEM of the phone to supply them with up to date drivers and can't support their builds longer than that.
Aug 2026 · comment
Every quote
The 40 most detailed of 2838 comments. Each links to the original.
It is very ironic that the solution is using an old, insecure phone full of unpatched holes for all important banking and id business, because that one is vendor-allowed while your state-of-the-art GrapheneOS is not.
Mixed · Jan 2026 · in “The Vietnam government has banned rooted phones from using any banking app”
Graphene also allows changing (or disabling) connections to Google via their proxy for: Widevine checks, Internet Connectivity checks, certificate transparency, PSDS, and SUPL.
Recommends · Sep 2026 · in “I captured 72 hours of idle Android packets behind pfSense”
Everyone should use Graphene. You don't have to be a privacy nut - it's also a version of Android that just works, efficiently, without bullshit, for you and not for Google.
Recommends · Jun 2026 · in “GrapheneOS user reported to authorities for using GrapheneOS”
unlike other non-rooted custom ROMs, allows re-locking the bootloader. But, whether a banking app will work depends on what level of Google Play attestation they require
Mixed · Jan 2026 · in “The Vietnam government has banned rooted phones from using any banking app”
GrapheneOS adds the option to set a 2nd factor PIN for fingerprint unlock to make using a strong passphrase convenient without the downsides of biometric-only unlock.
Recommends · Jul 2026 · in “GrapheneOS protections against data extraction from locked devices”
GrapheneOS has storage scopes which make the app think it has full folder/file access but in reality you can choose the exact files or folders to give access.
Recommends · Jul 2026 · in “Selfie for sign-in: a new, easy way to access your Google Account”
I've been using GrapheneOS for years, I can't go back to another OS due to its ease of use, speed, and awesome features baked into my day to day use now.
Recommends · Jan 2026 · in “Privacy and control. My tech setup”
GrapheneOS is not going to compromise on privacy or security, and so far, pixel devices are the only devices meeting the hardware security requirements.
Recommends · Oct 2026 · in “MicroG: Free-libre re-implementation of Google's proprietary Android user space”
GrapheneOS does better at deGoogling than other OSes, including adding features to the OS so people have fewer reasons to install Sandboxed Google Play
Recommends · Oct 2026 · in “MicroG: Free-libre re-implementation of Google's proprietary Android user space”
Consumers don't care how interesting the developer's problems are. They want their own problems to be solved and GrapheneOS does a better job of that.
Recommends · Jan 2026 · in “Changes to Android Open Source Project”
It is significantly easier to the point it is entirely optional. GrapheneOSs privacy and security features do not make avoiding google more difficult.
Recommends · Oct 2026 · in “Your Phone Is About to Stop Being Yours: 70 Days Until Lockdown”
For me it's the added security features: per-app network permissions, scoped storage/contacts permissions, and a bunch of system hardening measures.
Recommends · Jun 2026 · in “GrapheneOS has been ported to Android 17 and official releases are coming soon”
This is good for compatability (apps generally take into account that a network can be down) and too avoid apps knowing you are using the feature.
Recommends · Feb 2026 · in “GrapheneOS – Break Free from Google and Apple”
That's where GrapheneOS comes in. You can go fully Google-free or use their "sandboxed Google libraries" to run the Google apps as a normal user.
Recommends · Jan 2026 · in “Google confirms 'high-friction' sideloading flow is coming to Android”
it all makes sense from the perspective of Graphene not attempting to be a general purpose OS like Lineage, but explicitly a security focused OS
Recommends · Jan 2026 · in “Google confirms 'high-friction' sideloading flow is coming to Android”
GrapheneOS takes real steps to protect user privacy and security, not features that degrade security and don't meaningfully increase privacy.
Recommends · Jun 2026 · in “GrapheneOS has been ported to Android 17 and official releases are coming soon”
Security is GrapheneOS's raison d'être. If you don't want security, you can run another Android build that does run on the hardware you have.
Recommends · Jul 2026 · in “A new Android malware from Google”
GrapheneOS enables all hardening by default and will guide you simply through disabling exploit protections if an app breaks because of them.
Recommends · Jul 2026 · in “Espionage Against the European Parliament”
GrapheneOS distrusts the network. Connections use HTTPS and the integrity of important things like updates is also verified via signatures.
Recommends · Feb 2026 · in “GrapheneOS – Break Free from Google and Apple”
GrapheneOS has sandboxed Google Play, which allows using most Google services (including Android Auto) while limiting their deep OS access.
Recommends · Mar 2026 · in “/e/OS is a complete "deGoogled", mobile ecosystem”
privacy-aware family members running up-to-date Lineage or Graphene OS with recent kernels and frequent updates constantly run into apps refusing to work for "security" reasons
Criticizes · Jul 2026 · in “A new Android malware from Google”
It's effectively a hardened variety of LineageOS/AOSP, hence entirely reliant on device-specific downstream kernels/BSPs that will never see a feature update.
Criticizes · Jan 2026 · in “Changes to Android Open Source Project”
Does not really work in all countries, e.g. here it is quite common at events to pay through a QR code and you need your banking app to do so.
Criticizes · Mar 2026 · in “GrapheneOS will remain usable by anyone without requiring personal information”
GrapheneOS is fully dependant on the OEM of the phone to supply them with up to date drivers and can't support their builds longer than that.
Criticizes · Aug 2026 · in “GrapheneOS project: pixel 11 no longer supports hardware memory tagging (MTE)”
the core issue is not inconvenience but the fact that also doing that still locks you out of applications that many people call essential
Criticizes · Mar 2026 · in “Motorola GrapheneOS devices will be bootloader unlockable/relockable”
A duress password isn't a booby trap. Nothing was damaged except for the fragile egos of the man-children who weren't able to bully someone into giving up their wrong-think.
Recommends · Jul 2026 · in “GrapheneOS Defends Data-Wiping Function That Blocked US Border Search”
Choosing to use an OS focused on privacy and security without root access for more than the bare minimum portion of the OS is not the user lacking control over their device.
Recommends · Oct 2026 · in “MicroG: Free-libre re-implementation of Google's proprietary Android user space”
Graphene's approach (trying to make it a more open ecosystem) and the other one (refusing to participate/trying to destroy the ecosystem) are viable responses to it.
Recommends · Jul 2026 · in “Roblox Officially Supports GrapheneOS”
Given how long I've been using Graphene, this is not a bad idea also because there has been increasing pressure from governments clamping down on privacy solutions
Recommends · Jul 2026 · in “Donate to GrapheneOS”
Since GrapheneOS is more secure than stock Android, security conscious apps like banking apps have a solid technical reason to use the API and support Graphene.
Recommends · Apr 2026 · in “I Bought Friendster for $30k – Here's What I'm Doing with It”
the decision of GrapheneOS to maintain the attestation features and not providing user root is what gives it a fighting chance of being accepted as legitimate
Recommends · Aug 2026 · in “On non-rooted Android 17, ADB uninstall of system apps fails”
They believe strongly in a standard for privacy/security of people's personal devices, and unfortunately only Pixels are close to meeting those standards.
Recommends · Feb 2026 · in “GrapheneOS – Break Free from Google and Apple”
I wish there was a reasonably cheap, sufficiently powerful TV box compatible with a free distribution Android TV. Something like Graphene/Lineage for TVs.
Mixed · Oct 2026 · in “An ad-free Android TV”
I run GrapheneOS and use several US-based banking apps. I've got a mix of well-known national bank apps and smaller local credit union apps working.
Recommends · Feb 2026 · in “F-Droid: "Keep Android Open"”
Deleting the signing keys during a hostile takeover attempt rather than submitting to pressure or greed is an amazing quality that is rare to find.
Recommends · Apr 2026 · in “Original GrapheneOS responses to WIRED fact checker”
I install an entirely different operating system on my phone (graphene) which also advises me not to root because it's stupidly unsafe to do so.
Recommends · Oct 2026 · in “Today, we hacked what we'd set out to hack: the iPhone”
If they have a bubble around them of employees, true believers, and people just afraid of speaking out that chills free expression of criticism
Mixed · Apr 2026 · in “Original GrapheneOS responses to WIRED fact checker”
GrapheneOS supports attestation. GrapheneOS even provides the sort of security guarantees that would make risk management types at banks happy
Mixed · Dec 2025 · in “Things I learnt about passkeys when building passkeybot”
What they have done is provide a workaround for people who have no alternative, while making sure it does not violate the device owners device
Recommends · Sep 2026 · in “Play Store blocks AuroraStore, hurting GrapheneOS users”
the OS recommended to journalists that report on Palestine because freedom of speech doesn't apply without aggressive assertion of your rights
Recommends · Nov 2025 · in “France threatens GrapheneOS with arrests / server seizure for refusing backdoors”
Counts from 1,795,640 Hacker News comments, Nov 2025 to Nov 2026. How we count · Report a mistake