// Base system
No privileged Google services
Stock Android ties Google Play deep into the OS. GrapheneOS ships a hardened AOSP base with no Google account requirement and no privileged Play Services in the system image.
// Hardware · hardened AOSP
GrapheneOS Ready
A carrier-unlocked Pixel 10-series phone with GrapheneOS installed, verified boot relocked, Auditor-checked, and shipped with a hardening checklist — ready to use without a Google account.
// The operating system
What GrapheneOS is
GrapheneOS is a private, security-focused mobile OS built on the Android Open Source Project. It keeps Android’s app model and usability, then hardens the system against remote and local compromise — without bundling Google services into the OS.
Official production support is Pixel-only. That is why this offer is Pixel 10 series: the hardware GrapheneOS uses for verified boot, hardware attestation, and memory tagging, with roughly seven years of updates from launch. GrapheneOS itself is free and open source; we sell the handset, a verified install with the bootloader relocked, and a hardening checklist — not a proprietary fork.
// Capabilities
Features that change how the phone behaves
The differences that matter day to day — privacy controls, exploit resistance, and an attestible boot chain. Full detail lives ongrapheneos.org/features.
// Optional compatibility
Sandboxed Google Play
Need a banking or work app that expects Play? Install official Play apps as ordinary sandboxed apps in a profile. They get no special privileges — revoke Network or Sensors like any other app.
// Permissions
Network and Sensors toggles
Per-app Network permission can cut direct and indirect network access. A Sensors toggle blocks accelerometer, gyroscope, compass and similar sensors beyond stock Camera/Mic permissions — useful when an app only needs offline use.
// Exploit defence
Hardened runtime and memory
Beyond stock AOSP: hardened malloc, tighter sandbox policies, attack-surface reduction (USB and radios off or restricted when locked), and hardware memory tagging on supported Pixels.
// Hardware path
Verified boot and Auditor
Relock the bootloader so the device only boots signed GrapheneOS images. Auditor uses hardware attestation so you can check the phone still matches a known-good state after travel or handoff.
// Daily use
Profiles, USB control, Vanadium
Multiple user profiles isolate work, travel, or high-risk apps. USB-C can stay charging-only while locked. Vanadium is the hardened Chromium browser shipped with the OS.
// Motivation
Why people switch
Not everyone needs GrapheneOS. People who do usually share a clear threat model or a refusal to treat a phone as a default surveillance endpoint.
Stock phones assume you are the product
Consumer Android pushes accounts, cloud sync, and privileged telemetry by default. GrapheneOS starts from open-source Android and hardens privacy and security against real adversaries — not marketing checkboxes.
Google stays optional
Many buyers want a phone that works without a Google account. When an app still needs Play, sandboxed Play keeps that dependency contained instead of owning the OS.
Defence in depth, not obscurity
The project focuses on exploit mitigations, sandboxing, and verified boot — including unknown (0-day) vulnerability classes — rather than hiding behind “secret” features that fail once known.
Attestable hardware you can trust
Journalists, lawyers, researchers, and travellers use GrapheneOS when they need a clean handset with a verifiable boot chain and documented defaults — not a mystery custom ROM.
GrapheneOS reduces OS and app attack surface and telemetry relative to stock. It does not make you invisible to a mobile network — carrier and cell still see a phone.
// Condition · we source the handset
New, grade A, or grade B
We buy and flash the device. Client ship-in is not offered. Latest GrapheneOS-supported generation only — Pixel 10 series.
// New
Out of box
Sealed or factory-new, carrier-unlocked. Current-generation Pixel 10 series only.
from 4.1 XMR
≈ US$1,496 · ≈ A$2,125
// Grade A
Near mint
Light micro-marks at most, strong battery. Fully wiped before install.
from 3.4 XMR
≈ US$1,241 · ≈ A$1,762
// Grade B
Visible wear
Cosmetic marks, fully functional. Same install, relock, Auditor and hardening.
from 3 XMR
≈ US$1,095 · ≈ A$1,555
From-prices for Pixel 10 128GB. Full matrix (all models, storage tiers, grades) at checkout — colour preference does not change price. Express postage within Australia included.USD/AUD indicative 2026-08-03 · invoice settles at the live rate. XMR (preferred) · BTC — package priced in XMR; USD and AUD for comparison; invoice settles at the live rate on-chain. Made to order; lead time typically 5–10 business days after payment. Open shop →
// Models · current generation
Pixel 10 series only
Official GrapheneOS production support, roughly seven years of updates from launch. Older generations are not offered.
- Pixel 10
- Pixel 10 Pro
- Pixel 10 Pro XL
- Pixel 10a
- Pixel 10 Pro Fold
// What ships
Bare install, verified
- We source a carrier-unlocked Pixel 10-series handset (new, grade A, or grade B).
- Install current stable GrapheneOS via the official process.
- Relock the bootloader so verified boot is active.
- Run Auditor attestation and record the result for your handover pack.
- Apply a documented hardening baseline (USB-C charging-only when locked, auto-reboot, OEM unlocking off).
- Ship with a plain-language setup guide — SIM, profiles, optional sandboxed Play notes, backup.
We are not affiliated with the GrapheneOS project. GrapheneOS is free; you pay for the handset, the verified install, and the checklist.
// Who it is for
Legitimate buyers
Journalists protecting sources. Lawyers keeping client material off consumer cloud defaults. Activists and NGOs. Executives handling sensitive deals. Security researchers who want a clean, attestible handset. Travellers who want USB and duress controls without learning the full install path.
// Honest limits
What it is not
- Not invisible to a mobile network — carrier and cell still see a phone.
- Not a Threema / VPN / eSIM lifestyle bundle — bare GrapheneOS only.
- Unlocking and alternate OS typically affect Google hardware warranty.
- Some banking and government apps need sandboxed Play — we document how; we do not promise every APK.
- We do not flash phones you ship in.
// Quote · custom presets
Custom OS presets
Standard bare GrapheneOS Ready is fixed-price online — model, storage, grade, and colour preference at checkout. Use this quote path only when you need specific presets during the OS replacement (sandboxed Play notes, hardening deltas, or other written requirements). Client ship-in is not offered.
- State: model · New / Grade A / Grade B · storage · primary and secondary colour.
- List apps that may need sandboxed Play notes, or hardening changes vs the baseline.
- We reply with a fixed-XMR quote, then a BTCPay checkout link by email or PGP — not the shop cart. No KYC theatre.
- Legitimate buyers only — journalists, lawyers, activists, executives, researchers, high-risk travellers.