Graphene is an operating system (OS) based on the Android Open Source Project (AOSP). Graphene improves the security of AOSP code by improving sandboxing and exploit mitigations, while providing more extensive permission options than stock open source android. It is probably a good idea to do your homework before switching to Graphene, since there is a lot to learn, and the user experience is not as smooth and intuitive as you would find on a typical android phone.

For me, the security and privacy was reason enough to switch, but it is also a way to help free me from big tech.

I have been gradually de-googling my life for a few years now, so I was somewhat prepared to switch to graphene. I replaced gmail, google drive, google calendar, and google contacts with protonmail equivalents. I replaced the google search engine with duck duck go, and replaced google chrome with a bunch of different browsers. I have set for myself the ambitous goal of never using the Google Play Store again. This will be difficult, and I may have to abandon this notion. We'll see.

You may not have started the process of weaning yourself off of Google and or Apple. If that's the case, your transition may be harder.

You may also intend to use google apps and use the Google Play Store. Graphene has a sandboxed mirror of the Google Play Store in its app repository. I will explain what this means and the best way to use it later.

I call this section "Choosing A Phone", but there is really not much choice. You need to get yourself an unlocked Google Pixel. If you're buying a new device, I advise that you buy it directly from Google. I made the mistake of getting an "unlocked" phone from a retailer. What they meant was "carrier unlocked", which means you can choose any wireless service. I struggled for a while with this type phone before realizing my phone was not really unlocked. The phone needs the ability to have its bootloader unlocked. Why does Graphene only support Google Pixel phones? Well, one reason is that the factory phone permits its bootloader to be unlocked. Most other major manufacturers have locked down their devices. Also, the Pixel has hardware-backed keystores, verified boot, attestation, and input-output memory management units (IOMMUs). What this means, in plain english, is that the phone is capable of sandboxing components like the GPU and radios.

I chose a Pixel 7. Since it's new, I figured that it would get updates for many years. I also like the sturdy build quality. From here on, you should refer to this excellent guide, which will help you unlock your bootloader and flash the Graphene OS. Just keep these few points in mind:

Once you have unlocked the bootloader, the rest of the process is a breeze. The windows installer makes it easy. You can also choose the CLI install option. Instructions are available on the page I linked.

Coming from a Samsung Galaxy, I immediately noticed the spare, functional look of the home screen. I appreciated the absence of any bloatware. In my case, I do not have wireless service set up yet. I am still considering my options.
Since I’m heavily immersed in the ProtonMail ecosystem right now, the first thing I did after creating my pin and setting up wifi was grab the ProtonMail PWA by using the default Vanadium browser. Next, I installed the Fdroid app. From there, I downloaded the Proton VPN. Next I downloaded the Stacker News PWA, of course. Graphene has its own apps. These are the apps in the native repository:

I was using Vanadium as my browser, which seemed fine at first. I quickly realized that I had gotten used to Brave’s natural ad blocking, so I hunted around for a browser alternative. I downloaded Mull from Fdroid. That seemed okay. I intend to try Mullvad VPN with its browser, and see how that goes. I will likely go back to Brave eventually.

Keep in mind that there is an alternative to Fdroid if you’re looking to download open source apps. It’s called Obtanium, and this video explains it. As for me, I’m going the tedious route of downloading apps directly from github. The first app I added in this way was the Phoenix wallet.

As I said earlier, I’m going to try to avoid using Google Apps from this point forward. If you decide that you want to continue to use Google Apps, Graphene allows you to do this in a safe, fully sandboxed way. When android ships in a typical phone, all the Google apps are given special privileged status right from the start. This allows them to bypass the default android sandbox, which prevents apps from interacting with each other without permission. Google Apps are free to interact and collect data. In essence, they are spy apps.

Graphene gives Google apps no special privileges. You can use them on Graphene through the mirror, but those apps are sandboxed.

Graphene also allows the setting up of multiple users on the phone. These users have their own environments, cut off from each other. You could create a profile called something like “Google User” who has normal play store access. This video gives you all the information you need.

I received a tremendous amount of help on Stacker News when getting started, so I’m just going to include some of the tips and insights and link to the user, in case you want to show your appreciation: 1.@03365d6a53 provided some great ideas for those not wanting to use the device to make cellular phone calls. I learned from him that if you have airplane mode on, Graphene does not ping your IMEI (International Mobile Equipment Identity) and location to nearby cell towers. He recommends putting an anonymous data sim in a VPN dongle, such as the Mudi GL 750 with Blue Merle software. @final provides a more in depth explanation here @final is also an expert in this area. You would be well advised to ask them for advice. @final may also be posting a guide soon which will provide much more in depth information than the basic stuff I have included here.

I am very new to Graphene. I have a lot to learn. Getting my Pixel set up as a daily driver is going to take some work. Still, I am optimistic. I’m not going to rush it. I am keeping my old Galaxy around too, so my transition will be gradual. If you decide to make the change, I hope this short guide is useful.