FAQ
How does this work?
- Choose a Pixel model & storage.
- We refurbish (if used), then flash GrapheneOS on a clean device, verify signatures, and run a full hardware test (screen, battery health, radios, cameras, buttons).
- We ship ready-to-use with a quick-start privacy guide and optional add-ons (case, privacy glass, VPN voucher, etc).
Note: We’re not affiliated with Google or the GrapheneOS project.
What is GrapheneOS?
GrapheneOS is a security-hardened, privacy-focused Android Operating System (OS) for Google Pixel phones. It’s an open-source project that takes the Android Open Source Project (AOSP) and adds advanced hardening (memory safety mitigations, stricter app sandboxes, exploit defenses) while preserving day-to-day usability.
What it means for you
- No Google by default. You choose your apps. (Optional sandboxed Google Play is available if you need it—runs like any other app, without special system privileges.)
- Verified, locked boot. We flash and relock so the device verifies the OS at boot.
- Frequent security updates. You get regular OTA updates from the GrapheneOS project.
- Granular control. Per-app network toggles, scoped storage, robust permissions, multiple user profiles.
Note: GrapheneOS is independent and not affiliated with Google. It supports Pixel models because their hardware security + update policy enables these guarantees.
At any point, you can unlock the bootloader, flash the original Android version for your pixel, and relock the bootloader, to reverse this process.
We are not affiliated with Google or GrapheneOS.
Is this "Jailbreaking?"
Short answer: No. We’re not “jailbreaking” or “rooting” your phone. We unlock the bootloader via tools provided by factory default, install GrapheneOS, and then re-lock the bootloader. GrapheneOS runs without root and preserves Android’s security model.
What’s the difference?
- Jailbreaking/rooting (colloquial): modifying a device to gain persistent administrator (root) access and bypass manufacturer restrictions.
- What we do: replace the stock OS with GrapheneOS, a privacy-focused Android distribution, using the phone’s official unlock/flash tools—then re-lock so verified boot is active again.
Is this legal?
Yes, in the U.S. there’s a current DMCA exemption that allows owners of smartphones to circumvent protections for the purpose of running lawful software (like installing an alternative OS). This exemption is reviewed on a 3-year cycle and is currently in effect. (This isn’t legal advice; laws vary by region.)
Any trade-offs to know about?
- Some carrier-branded Pixels can’t be unlocked—we only work with unlockable models.
- Unlocking/relocking can affect warranties, Play Integrity/SafetyNet, and app compatibility (e.g., certain banking/DRM apps).
- We verify a clean boot into GrapheneOS at hand-off. Ongoing support isn’t included unless purchased separately.
Bottom line:
This is not a jailbreak. It’s a clean, documented OS install on hardware you own, done with the device’s official flashing process, followed by re-locking for security.
Can I do this on my own?
Yes, and you'll save money. Buy a refurbished Pixel locally and use the documentation GrapheneOS provides.
We offer this as a done-for-you service as a convenience since the process requires technical expertise, and can potentially damage your phone if you're not careful.
Can I do this anonymously?
Yes, buy a used phone with cash locally and flash GrapheneOS on yourself.
We are not responsible for how you use the phone.
Best privacy practices?
Start simple:
- Use a strong device passcode (not 4 digits).
- Use the website version of an app wherever you can.
- Enable auto-updates and keep apps minimal.
- Use user profiles/work profile to separate personal/work or “high risk / low risk” apps.
- Prefer F-Droid / Aurora Store / Obtainium or sandboxed Play only when needed.
- Back up your recovery codes and keep them offline.
- Use a Password Manager.
- Maintain connection to a trusted VPN.
(We’ll publish a longer guide soon and link trusted resources for deeper learning.)
Your privacy is your responsibility. This is just a tool.
Is there a device warranty?
This service that we provide voids any factory warranty. We validate that all phones work as expected and are in good condition prior to shipment. We offer no extra warranty.
You can return your phone in good condition for 30 days after the date of delivery, no questions asked.
Can I request a specific color?
You can send us a message, and we'll try our best to accommodate. The black Pixel models are the most common to find on the market and also offer the greatest variety of functionality.
Can I return my phone?
In most cases, yes. All purchases made with cryptocurrency are final. We will not accept bricked phones that were validated as working prior to shipment. Refer to our refund policy for more information.
Do you accept cryptocurrency?
Yes, and all purchases through crypto are discounted. All purchases made with cryptocurrency are final.
Can I buy a used phone?
Yes. We offer refurbished Pixels alongside new ones. Refurbs are function-tested and cleaned, with a fresh GrapheneOS install.
We source phones strictly in great condition.
Payment Plans?
At checkout, select Klarna for financing/installments (subject to Klarna’s approval and regional availability).
Where do I get other applications?
Options that work well with GrapheneOS:
- F-Droid (open-source apps)
- Obtainium (updates direct from upstream releases)
- Aurora Store (anonymous access to Play catalog)
- Sandboxed Google Play (optional, runs under GrapheneOS’s strict app sandbox)
Choose the lightest option that fits your needs.
What carriers are these phones compatible with?
All offered phones are factory-unlocked Pixels and work on the big three US networks—Verizon, AT&T, and T-Mobile—as well as most MVNOs that use them (e.g., Visible/US Mobile on Verizon; Cricket on AT&T; Mint/Google Fi on T-Mobile).
Compatibility still varies by model and features (mmWave, eSIM, Wi-Fi Calling). If you’re unsure, tell us your carrier and the Pixel model, and we’ll double-check. You can also use your carrier’s BYOD/IMEI checker during activation.
Notes: Verizon uses LTE/5G only (3G is gone). Some carriers/MVNOs require VoLTE to be enabled—Pixels support this when the line is provisioned.
How do I get cell service on this phone?
Insert a physical SIM or setup/scan an eSIM QR code (supported on newer Pixels).
We do not offer data services, though there are some credible privacy-focused services offered in the U.S. that your phone will connect to without issue.
Is this a perfect solution?
No security setup is “perfect.” GrapheneOS significantly reduces attack surface and gives you tighter control (permission scopes, per-app network toggles, hardened memory allocator, frequent security patches). Your threat model and habits still matter: keep the OS updated, be careful with app installs, and use strong authentication.
Why can I only get Pixel models?
Short answer: Google is the steward of AOSP (Android Open Source Project), which most vendors build on. Pixels are special because they combine AOSP with the hardware + update model GrapheneOS needs.
Here’s the nuance:
- AOSP is open source (led by Google, ironically). Samsung, OnePlus, Motorola, etc. all ship Android that’s based on AOSP + a lot of proprietary parts. Some components (e.g., Linux kernel changes) must be published due to licenses, but full device stacks aren’t open. GrapheneOS is fully open source, created from AOSP.
- Pixels add the right hardware + policy combo: strong verified boot (AVB) done correctly, Titan/StrongBox secure elements for keys, robust firmware update pipelines, proper anti-rollback, and long guaranteed update windows. Critically, Google publishes factory images and flashing tools and allows unlock → flash → relock while preserving verified boot, which is exactly what a project like GrapheneOS requires.
- Most other OEMs fall short for GrapheneOS needs: weaker or inconsistent boot chains, limited/slow updates, missing public factory images, no clean relock path, or security features that aren’t exposed in a verifiable way.
So: Android is open source; Pixels are supported because they make the security guarantees verifiable in practice. That’s why GrapheneOS is only offered on Pixel models.
Do banking apps/contactless payments work?
Many banking apps run with sandboxed Google Play Services. Tap-to-pay may depend on your bank’s attestation policies. There is no guarantee, since most of these apps are usually fairly invasive. Online banking websites are a good alternative.
Apps vs Websites?
In all cases, you should use the website version of the app you're trying to use. If you need functionality only offered in an app, you can isolate the functionality safely in a separate profile.
IMEI/Blacklist Checks?
All devices pass IMEI blacklist checks and function tests before shipping.
What data do you keep about me?
Refer to our privacy policy. This is a Shopify store, so only input on this site what you're comfortable with Shopify possessing. We use no extra marketing or analytic software on our site.
Who should I trust?
Trust is something you verify:
- We flash and verify each build before shipping.
- You can verify the build yourself after unboxing with GrapheneOS’s documented signature checks.
- Keep a skeptical mindset with third-party apps and only grant permissions that are necessary.
You either trust publicly reviewable code and an organization with little financial incentive, or you trust the corporate machine.
Who are we?
We’re defensive cyber and physical security experts who build and test secure systems professionally. We apply that mindset to consumer devices by sourcing reliable hardware, installing/validating GrapheneOS, and giving you a practical path to a privacy-respecting phone.