Install GrapheneOS – Take Back Control of Your Smartphone

If you're reading this, you're probably done with data harvesting, pre-installed Google services, and the feeling that your smartphone owns you more than you own it. That's exactly where GrapheneOS comes in: a hardened Android for Google Pixel devices, built for security, privacy, and control.

In this video my on-board technician shows you how to turn your Pixel into a digital bunker. (Video in German)

What Is GrapheneOS – and Is It Worth It?

GrapheneOS is a free, security-hardened operating system for current Google Pixel devices. It builds on Android Open Source but strips out Google tracking, hardens the system, and gives you significantly more control.

• No pre-installed Google account, no forced services.
• Heavily hardened sandbox and memory security.
• Option to install Google services later in an isolated (sandboxed) environment.

Before You Start: Risks & Plain Talk

Before you unlock the bootloader:

• Warranty usually stays intact: A common myth. Bootloader unlocking is officially supported by Google on Pixel and is fully reversible. Genuine hardware defects (battery, display) generally remain covered by the manufacturer warranty — keep your receipt.
• Data loss: Your device will be completely wiped. No backup means no data.
• Personal responsibility: You bear the risk if something goes wrong.

Prerequisites

• A supported Google Pixel.
• PC/laptop running Windows, macOS, Linux, or ChromeOS, or alternatively a second Android device (Android 14 to 17 with Play Protect certification, or GrapheneOS). No Android Platform Tools needed: the web installer talks to the device via WebUSB. Only on Linux do you need the udev rules once (android-sdk-platform-tools-common or android-udev).
• At least 2 GB of free memory and 32 GB of free storage space.
• A reliable original USB-C cable.
• A Chromium-based browser: Chromium, Brave (only with Brave Shields disabled), Google Chrome, Microsoft Edge, or Vanadium. No Snap or Flatpak versions, which rules out the Chromium shipped with Ubuntu.

1. Prepare Your Pixel (Settings)

Before we plug in any cables, you need to prepare the Pixel on the software side:

1. Enable Developer Options: Settings → About phone → Tap "Build number" 7 times.
2. Allow OEM unlocking: Back to Settings → System → Developer options. Enable the "OEM unlocking" toggle. (Nothing works without this!)
3. Enable USB debugging: Optional, but often helpful for device recognition.

2. Enter Fastboot Mode

Now it gets serious. For the installer to have access, the phone needs to be in bootloader mode:

• Turn the Pixel completely off.
• Connect it to your PC/laptop with the original cable.
• Hold the Power button and Volume Down simultaneously.
• Wait until you're in Fastboot Mode (a black screen with technical text).

3. Installation with the Web Installer

Now open the official web installer on your PC. Follow the on-screen instructions strictly. Here's the flow in detail:

A) Connect & Unlock

Click the blue "Unlock bootloader" button in your browser.

A USB device selection window will usually appear: Select your Pixel (e.g. "Pixel 8") and click "Connect".

• The phone now shows a warning screen.
• Use the volume buttons (up/down) to navigate to the unlock option ("Unlock the bootloader").
• Confirm the selection with the Power button.

B) Download & Flash

Now click "Download release" in your browser. The system downloads the image.

Download complete? Then click "Flash release".

Don't panic: The phone will reboot several times during this process. That's completely normal. Don't touch anything until the browser says it's done (progress bar full).

C) Relock the Bootloader

This step is essential for security!

1. Click "Lock bootloader" in your browser.
2. A menu appears on the phone again. Use the volume buttons to select the lock option.
3. Confirm with the Power button.

The screen should now report the state as "locked".

4. First Boot & Verification

When "Locked" is shown, you can start the phone. Press the Power button (next to "Start" in the on-screen menu).

On boot you'll see a yellow warning message:

"Your device is loading a different operating system."

This is normal and will always be there from now on — it tells you that stock Google Android is no longer running.

Trust but verify:

This warning screen also displays an ID. Compare it with the "Verified boot key hash" section on the GrapheneOS website where you ran the installation (scroll down to your model). If the hashes match: congratulations, your system is clean and securely installed!

5. Life with GrapheneOS

Your Pixel is now hardened. No Play Store out of the box — but full control. Install apps via F-Droid, Aurora Store, or use GrapheneOS's own "Sandboxed Google Play" services if you absolutely need push notifications or Maps.

Welcome to the other side.