GrapheneOS

GrapheneOS
The GrapheneOS logo with a hexagonal lattice
GrapheneOS home screen
GrapheneOS home screen
DeveloperGrapheneOS[a]
OS familyAndroid (Linux)
Working stateCurrent
Source modelOpen source
Initial releaseApril 2019; 5 years ago (2019-04)
Latest release2024110400[4] / November 4, 2024; 1 day ago (2024-11-04)
Repositorygithub.com/GrapheneOS
Marketing targetPrivacy/security-focused smartphones
Update methodOver-the-air (OTA) or locally
Package managerAPK-based
Kernel typeMonolithic (Linux)
LicenseMIT, Apache License, various permissive open-source
Official websitegrapheneos.org Edit this at Wikidata

GrapheneOS[b] is an Android-based, open source, privacy and security-focused mobile operating system for selected Google Pixel devices, including smartphones, tablets and foldables.[5]

History

[edit]

The main developer, Daniel Micay, originally worked on CopperheadOS, until a schism over software licensing between the co-founders of Copperhead Limited led to Micay's dismissal from the company in 2018.[6] After the incident, Micay continued working on the Android Hardening project,[6][7] which was renamed as GrapheneOS[7] and announced in April 2019.[6]

In March 2022, two GrapheneOS apps ("Secure Camera" and "Secure PDF Viewer") were released to the Google Play Store.[8]

Also in March 2022, GrapheneOS reportedly released Android 12L for Google Pixel devices before Google did, second to ProtonAOSP.[9]

In May 2023, Micay announced he would step down as lead developer of GrapheneOS and as a GrapheneOS Foundation director.[10] As of September 2024, the GrapheneOS Foundations' Federal Corporation Information lists Micay as one of its directors.[2]

Features

[edit]
GrapheneOS' default "AppStore" (formerly known as just "Apps"[11])

Sandboxed Google Play

[edit]

By default Google apps are not installed with GrapheneOS,[5][12] but users can install a sandboxed version of Google Play Services from the pre-installed "AppStore".[12] The sandboxed Google Play Services allows access to the Google Play Store and apps dependent on it, along with features including push notifications and in-app payments.[12]

Around January 2024, Android Auto support was added to GrapheneOS, allowing users to install it via the AppStore.[13] The Sandboxed Google Play compatibility layer settings adds a new permission menu with 4 toggles for granting the minimal access required for wired Android Auto, wireless Android Auto, audio routing and phone calls.[14]

Security & Privacy features

[edit]

GrapheneOS introduces revocable network access and sensors permission toggles for each installed app.[5][15] And a PIN scrambling option for the lock screen is included with GrapheneOS.[16]

GrapheneOS by default, randomizes Wi-Fi MAC address' per-connection (to a Wi-Fi network), instead of the Android per-network default.[6][17]

A hardened Chromium-based web browser and WebView implementation known as Vanadium, is developed by GrapheneOS and included as the default web browser/WebView[15]

Auditor, a hardware-based attestation app, developed by GrapheneOS, which "provide strong hardware-based verification of the authenticity and integrity of the firmware/software on the device" is also included.[18]

Reception

[edit]

In 2019, Georg Pichler of Der Standard, and other news sources, quoted Edward Snowden saying on Twitter, "If I were configuring a smartphone today, I'd use Daniel Micay's GrapheneOS as the base operating system."[19]

In discussing why services should not force users to install proprietary apps, Lennart Mühlenmeier of netzpolitik.org suggested GrapheneOS as an alternative to Apple or Google.[20]

Svět Mobilně and Webtekno repeated the suggestions that GrapheneOS is a good security- and privacy-oriented replacement for standard Android.[21][22]

In a detailed review of GrapheneOS for Golem.de, Moritz Tremmel and Sebastian Grüner said they were able to use GrapheneOS similarly to other Android systems, while enjoying more freedom from Google, without noticing differences from "additional memory protection, but that's the way it should be." They concluded GrapheneOS cannot change how "Android devices become garbage after three years at the latest", but "it can better secure the devices during their remaining life while protecting privacy."[6]

In June 2021, reviews of GrapheneOS, KaiOS, AliOS, and Tizen OS, were published in Cellular News. The review of GrapheneOS called it "arguably the best mobile operating system in terms of privacy and security." However, they criticized GrapheneOS for its inconvenience to users, saying "GrapheneOS is completely de-Googled and will stay that way forever—at least according to the developers." They also noticed a "slight performance decrease" and said "it might take two full seconds for an app—even if it’s just the Settings app—to fully load."[23]

In March 2022, writing for How-To Geek Joe Fedewa said that Google apps were not included due to concerns over privacy, and GrapheneOS also did not include a default app store. Instead, Fedewa suggested, F-Droid could be used.[5]

In 2022, Jonathan Lamont of MobileSyrup reviewed GrapheneOS installed on a Pixel 3, after one week of use. He called GrapheneOS install process "straightforward" and concluded that he liked GrapheneOS overall, but criticized the post-install as "often not a seamless experience like using an unmodified Pixel or an iPhone", attributing his experience to his "over-reliance on Google apps" and the absence of some "smart" features in GrapheneOS default keyboard and camera apps, in comparison to software from Google.[12]

In his initial impressions post a week prior, Lamont said that after an easy install there were issues with permissions for Google's Messages app, and difficulty importing contacts; Lamont then concluded, "Anyone looking for a straightforward experience may want to avoid GrapheneOS or other privacy-oriented Android experiences since the privacy gains often come at the expense of convenience and ease of use."[24]

In July 2022, Charlie Osborne of ZDNet suggested that individuals who suspect a Pegasus infection use a secondary device with GrapheneOS for secure communication.[25]

In January 2023, a Swiss startup company, Apostrophy AG, announced AphyOS, which is a subscription fee-based Android operating system and services "built atop" GrapheneOS.[26][27]

See also

[edit]

References and notes

[edit]
  1. ^ "Frequently Asked Questions - GrapheneOS". grapheneos.org. Archived from the original on 17 September 2024. Retrieved 18 September 2024.
  2. ^ a b "Federal Corporation Information - 1485757-7". Government of Canada. Archived from the original on 2 October 2024. Retrieved 28 January 2024.
  3. ^ "History - GrapheneOS". grapheneos.org. Archived from the original on 18 September 2024. Retrieved 18 September 2024.
  4. ^ "GrapheneOS Changelog". grapheneos.org. Archived from the original on 24 August 2024. Retrieved 2 September 2024.
  5. ^ a b c d Fedewa, Joe (23 March 2022). "What Is GrapheneOS, and How Does It Make Android More Private?". How-To Geek. Archived from the original on 10 June 2022. Retrieved 4 July 2022.
  6. ^ a b c d e Tremmel, Moritz; Grüner, Sebastian (11 December 2019). "GrapheneOS: Ein gehärtetes Android ohne Google, bitte" [GrapheneOS: A hardened Android without Google, please]. Golem.de (in German). pp. 1–3. Archived from the original on 15 November 2021. Retrieved 20 July 2022.{{cite web}}: CS1 maint: unfit URL (link)
  7. ^ a b Baader, Hans-Joachim (9 April 2019). "Android Hardening wird zu GrapheneOS" [Android Hardening becomes GrapheneOS]. Pro-Linux (in German). Archived from the original on 21 September 2019. Retrieved 17 September 2019.
  8. ^ Hazarika, Skanda (4 March 2022). "GrapheneOS brings its camera and PDF viewer apps to the Play Store". XDA. Archived from the original on 22 June 2022. Retrieved 22 June 2022.
  9. ^ Wilde, Damien (11 March 2022). "Privacy-focused GrapheneOS based upon Android 12L comes to Pixel 6 in latest beta". 9to5Google. Archived from the original on 28 June 2022. Retrieved 28 June 2022.
  10. ^ "Daniel Micay (@DanielMicay)". 26 May 2023. Archived from the original on 26 May 2023. I've stepped down as lead developer of GrapheneOS and will be replaced as a GrapheneOS Foundation director. I'll be ending my use of public social media. I'm unable to handle the escalating level of harassment including recent swatting attacks. There will be a smooth migration.
  11. ^ "GrapheneOS/AppStore Version 24 Release". GitHub. 18 July 2024. Archived from the original on 24 August 2024. Retrieved 24 August 2024.
  12. ^ a b c d Lamont, Jonathan (20 March 2022). "A week with GrapheneOS exposed my over-reliance on Google". MobileSyrup. Blue Ant Media. Archived from the original on 6 July 2022. Retrieved 6 July 2022.
  13. ^ Schoon, Ben (3 January 2024). "GrapheneOS, a privacy-focused version of Android, is adding Android Auto support". 9to5Google. Archived from the original on 3 January 2024. Retrieved 3 January 2024.
  14. ^ "2023123000 - Releases". grapheneos.org. Archived from the original on 20 December 2023. Retrieved 3 January 2024.
  15. ^ a b Mascellino, Alessandro (16 June 2022). "What is GrapheneOS and how does it improve privacy and security?". Android Police. Archived from the original on 22 July 2022. Retrieved 17 August 2022.
  16. ^ "This is why James Bond doesn't use an iPhone". Wired UK. ISSN 1357-0978. Archived from the original on 17 August 2022. Retrieved 17 August 2022.
  17. ^ Valeri, Vitor (17 June 2022). "O que é o GrapheneOS? Como ele aumenta a segurança e a privacidade do celular?". Oficina da Net (in Brazilian Portuguese). Archived from the original on 22 June 2022. Retrieved 5 August 2022.
  18. ^ "Features overview". GrapheneOS. Archived from the original on 28 January 2023. Retrieved 5 February 2023.
  19. ^ "If I were configuring a smartphone today, I'd use @DanielMicay's @GrapheneOS as the base operating system. I'd desolder the microphones and keep the radios (cellular, wifi, and bluetooth) turned off when I didn't need them. I would route traffic through the @torproject network". Twitter. Archived from the original on 15 November 2022. Retrieved 5 February 2023.
  20. ^ Mühlenmeier, Lennart (19 July 2019). "Warum Post, Bank und Co. ihre Kunden nicht zwingen sollten, Apps zu benutzen" [Why Post, Bank and Co. shouldn't force their customers to use apps]. netzpolitik.org (in German). Archived from the original on 18 September 2019. Retrieved 18 November 2019.
  21. ^ Šlik, Jáchym (6 April 2019). "GrapheneOS chce napravit bezpečnostní prohřešky Androidu" [GrapheneOS wants to fix Android security violations]. Svět Mobilně (in Czech). Archived from the original on 8 April 2019. Retrieved 17 September 2019.
  22. ^ Kalelioğlu, Eray (3 April 2019). "Android Tabanlı İşletim Sistemi 'GrapheneOS' ile Tanışın" [Meet the GrapheneOS Android-Based Operating System]. Webtekno (in Turkish). Archived from the original on 3 April 2019. Retrieved 17 September 2019.
  23. ^ Diane (28 June 2021). "GrapheneOS: A Hardened Android Alternative (Review)". CellularNews. Archived from the original on 14 July 2022. Retrieved 4 July 2022.
  24. ^ Lamont, Jonathan (13 March 2022). "I replaced Android on a Pixel 3 with an Android-based privacy OS". MobileSyrup. Blue Ant Media. Archived from the original on 6 July 2022. Retrieved 6 July 2022.
  25. ^ "How to find and remove spyware from your phone". ZDNET. Archived from the original on 20 August 2022. Retrieved 20 August 2022.
  26. ^ "Swiss Startup Takes On Apple and Google With Privacy-First OS". Bloomberg.com. 16 January 2023. Archived from the original on 23 May 2023. Retrieved 25 May 2023.
  27. ^ "Swiss startup takes on Apple and Google with privacy-first OS". The Star. Archived from the original on 25 May 2023. Retrieved 25 May 2023.
  1. ^ The developers have been referred to as the "GrapheneOS developers" or the "GrapheneOS project" on GrapheneOS' frequently asked questions page,[1] but the Canadian nonprofit organization "GrapheneOS Foundation"[2] was created "in March 2023 to handle the intake and distribution of donations".[3]
  2. ^ Formerly Android Hardening or AndroidHardening
[edit]