If you're reading this, you're probably done with data harvesting, pre-installed Google services, and the feeling that your smartphone owns you more than you own it. That's exactly where GrapheneOS comes in: a hardened Android for Google Pixel devices, built for security, privacy, and control.
Important Note
This article is my personal guide — an orientation for getting started. It does not replace the official documentation. If you actually want to flash, make sure you read the instructions on the official site.
In this video my on-board technician shows you how to turn your Pixel into a digital bunker. (Video in German)
What Is GrapheneOS – and Is It Worth It?
GrapheneOS is a free, security-hardened operating system for current Google Pixel devices. It builds on Android Open Source but strips out Google tracking, hardens the system, and gives you significantly more control.
- No pre-installed Google account, no forced services.
- Heavily hardened sandbox and memory security.
- Option to install Google services later in an isolated (sandboxed) environment.
Before You Start: Risks & Plain Talk
Before you unlock the bootloader:
- Warranty void: Manufacturer warranty often lapses.
- Data loss: Your device will be completely wiped. No backup means no data.
- Personal responsibility: You bear the risk if something goes wrong.
Prerequisites
- A supported Google Pixel.
- PC/laptop (Windows, macOS, Linux) with Android Platform Tools installed to communicate with the Pixel.
- A reliable original USB-C cable.
- A Chromium-based browser (e.g. Brave, Chromium, Vanadium).
1. Prepare Your Pixel (Settings)
Before we plug in any cables, you need to prepare the Pixel on the software side:
- Enable Developer Options: Settings → About phone → Tap "Build number" 7 times.
- Allow OEM unlocking: Back to Settings → System → Developer options. Enable the "OEM unlocking" toggle. (Nothing works without this!)
- Enable USB debugging: Optional, but often helpful for device recognition.
2. Enter Fastboot Mode
Now it gets serious. For the installer to have access, the phone needs to be in bootloader mode:
- Turn the Pixel completely off.
- Connect it to your PC/laptop with the original cable.
- Hold the Power button and Volume Down simultaneously.
- Wait until you're in Fastboot Mode (a black screen with technical text).
3. Installation with the Web Installer
Now open the official web installer on your PC. Follow the on-screen instructions strictly. Here's the flow in detail:
A) Connect & Unlock
Click the blue "Unlock Bootloader" button in your browser.
A USB device selection window will usually appear: Select your Pixel (e.g. "Pixel 8") and click "Connect".
- The phone now shows a warning screen.
- Use the volume buttons (up/down) to navigate to the unlock option ("Unlock the bootloader").
- Confirm the selection with the Power button.
B) Download & Flash
Now click "Download Release" in your browser. The system downloads the image.
Troubleshooting Tip
If you get an error like Error: storage quota has been exceeded, your browser storage is full.
Fix: Install a clean Chromium browser (no extensions) dedicated solely to this task.
⚠️ Important: Do not use Incognito mode! It limits temporary storage so severely
that downloading the large image file will almost always fail.
Download complete? Then click "Flash Release".
Don't panic: The phone will reboot several times during this process. That's completely normal. Don't touch anything until the browser says it's done (progress bar full).
C) Relock the Bootloader
This step is essential for security!
- Click "Lock Bootloader" in your browser.
- A menu appears on the phone again. Use the volume buttons to select the lock option.
- Confirm with the Power button.
The screen should now display in green text:
Device State: locked (unlockable).
4. First Boot & Verification
When "Locked" is shown, you can start the phone. Press the Power button (next to "Start" in the on-screen menu).
On boot you'll see a yellow warning message:
"Your device is loading a different operating system."
This is normal and will always be there from now on — it tells you that stock Google Android is no longer running.
Trust but verify:
This warning screen also displays an ID. Compare it with the "Verified boot key hash" section on the GrapheneOS website where you ran the installation (scroll down to your model). If the hashes match: congratulations, your system is clean and securely installed!
5. Life with GrapheneOS
Your Pixel is now hardened. No Play Store out of the box — but full control. Install apps via F-Droid, Aurora Store, or use GrapheneOS's own "Sandboxed Google Play" services if you absolutely need push notifications or Maps.
Welcome to the other side.
Resources & Sources
Official GrapheneOS web installer:
grapheneos.org/install/web
Android Platform Tools (communication):
developer.android.com/platform-tools
Support the project (donation link):
grapheneos.org/donate
Tools for Real Owners
Tools I use myself — for Bitcoin self-custody and digital sovereignty:
- Alien Investor Handbooks: My own ebook "GrapheneOS: Android in the Age of Surveillance" — the complete step-by-step guide covering everything only touched on here.
https://alien-investor.org/buecher - 21bitcoin: Bitcoin-only app from Europe, ideal for DCA and stacking sats regularly (use code ALIENINVESTOR).
https://alien-investor.org/21bitcoin - ₿ BitBox: Hardware wallet for secure Bitcoin self-custody (use code ALIENINVESTOR).
https://alien-investor.org/bitbox - Proton: Swiss all-round protection for email, VPN, and cloud — minimal data footprint, maximum security.
https://alien-investor.org/proton
Disclosure: These are affiliate links. Using them supports my work at no extra cost to you. Thanks!