BUYING GUIDE
Which Pixel Is Best for GrapheneOS?
GrapheneOS only runs on Google Pixel phones. Choosing the right one decides how long your phone stays secure, so it's worth getting right.
Why only Pixels?
GrapheneOS needs hardware security features that most phones don't offer: a bootloader that can be locked with GrapheneOS's own keys, a dedicated security chip, and long-term firmware updates from the manufacturer. Pixels provide all three, which is why GrapheneOS supports them and nothing else.
What matters when choosing
- Years of security updates left. This is the most important factor. Recent Pixels (the Pixel 8 series and later) come with seven years of security update support from their release, so a newer model stays secure for much longer.
- Newer security hardware. Newer Pixels add hardware protections, such as memory tagging, that GrapheneOS uses to block whole classes of attacks.
- Size and battery. The standard, Pro and Pro XL models differ mainly in screen size, cameras and battery life. The “a” models cost less for the same core security.
We recommend the Pixel 8 series or newer. Before you buy any Pixel, check it's on GrapheneOS's official list of supported devices, and avoid carrier-locked phones, whose bootloader often can't be unlocked.
Our choice: the PF Secured 10a
Our PF Secured GrapheneOS Device is currently the PF Secured 10a: a recent Pixel with years of security updates ahead, flashed with GrapheneOS and installed with our custom Security Protocol, ready to use.
Already have a compatible Pixel?
Install GrapheneOS yourself with GrapheneOS's official web installer, then add our Security Suite on top with our Software Flash Key. Or, in Australia, send it to us for our BYO Device service, which also covers iPhones. Read more about de-Googled phones, or see all our encrypted phones in Australia.
Privacy First is not affiliated with the GrapheneOS project or Google.