Should I bother installing GrapheneOS on my Pixel 6?

Xarcell

I have been eyeballing GrapheneOS for sometime. I had a Pixel 2 that I wanted to do a test install on, but now I see it is no longer supported. Now I have a Pixel 6 and was thinking of installing it. However, it says support ends in October 2026.

I cannot afford to buy a new phone, or replace my phone every 2-3 years. It seems to me that to some people their phone is there life-line and cannot live without. Personally, if I didn't need to make phone-calls/texts to family or need it for work, I'd throw my phone in the trash.

That being said, I still "need" (not want) a phone. Security and privacy is important to me and I'm trying to get away from Google.

I don't have a desktop, only a Samsung Chromebook. I need 2 banking apps, Capital One mobile, and First Citizens Bank (which I don't see a confirmation that it works with GOS). So I may have to install all the Google scrap on it anyway.

Should I bother installing GrapheneOS on my Pixel 6? Considering it will only have two years of support and I have to install Google Framework, Google Services, etc, on it anyway?

secrec

Xarcell However, it says support ends in October 2026.

I cannot afford to buy a new phone, or replace my phone every 2-3 years.

Putting GrapheneOS onto it, IN NO WAY forces you to "upgrade" your phone sooner. The phone will continue to work for as long as the hardware holds up, just like it would with factory OS.

The point about support ending is that the UPSTREAM support ends, which means no future system updates or security patches. People who are looking for maximum security shouldn't depend on the security of something that is no longer being supported, regardless of whether it is GrapheneOS or upstream providing the support.

Now here's the neat part; GrapheneOS typically extends support a bit beyond what upstream does. GrapheneOS also adds a lot of security consideration beyond what upstream does. That really means that you are much better off with GrapheneOS than upstream. Still doesn't mean that you should depend on it being absolutely secure, but its better.

spring-onion

Xarcell However, it says support ends in October 2026.

Xarcell I cannot afford to buy a new phone, or replace my phone every 2-3 years.

That's fair. Consider the second-hand market, starting with 8th generation pixels have 7 years of support, in 2 years time you could be looking at a pixel 9 that will still have about 5 years of support time remaining then.

Xarcell I need 2 banking apps, Capital One mobile, and First Citizens Bank

We got a community maintained list for this very occasion. Capital One appears to work, no one reported First Citizens yet.

Xarcell I have to install Google Framework, Google Services, etc, on it anyway?

Remember google play is sandboxed like any other app, it can't take what you don't give it. I reckon the privacy impact can be considered negligible for many people out there, especially if you don't really rely on any other google services, and have found alternatives to them. NewPipe for youtube, organic maps instead of google maps, etc. Not to mention it's not a crime to continue using these services if you enjoy them and simply don't want to switch.

Originalcahummer For what it's worth, if you still have the Pixel 2, you could install GOS to get a feel for functionality.

We don't provide images for devices we have completely sunset support for, and even if you did find some, they would be so out-of-date you couldn't derive what the actual experience would be like.

angela

Xarcell

Probably not.

Graphene OS is easy to install. There are banking Apps that are not compatible.

If you like computers, or are concerned about being hacked or tracked by governments or corporations, it makes sense.

You don't use many phone features (so your risk of being hacked is lower because you'll install fewer apps and go to fewer sites). You have a Chromebook and that combined with low cell phone usage makes me think you are not that into computers. My guess is your tolerance for computer problems and annoyances is low. Graphene doesn't have many problems, but banking compatibility is a major problem for many. My guess is you would likely not be hacked in your phone anyway, many hacks are based installation of sketchy Apps found online (like games or "free" things) or unusual sites with bad javascript or server breaches. If you have a lot of money in uninsured accounts (like money in a bank not FDIC insured or insured at all) that you regularly access in regular Android and there's a good amount in it, if there's a new browser exploit then you're less likely to be compromised in Graphene. You're less likely to be compromised in Graphene is general, but a lot of hacking happens with high value server breaches done by hacking gangs or individual hackers and you have little control over that.

There's no easy site to check if your banking apps use play integrity API and block Graphene.

It's easy to install but I don't know how easy it would be to revert back to a different OS. If you are willing to lose banking App acess to get away from Google software, then it's worth it.

If you think technology is interesting, it could be worth the install for the cool factor of just trying it.

You should also know when you call people, your cell phone company sells that to "trusted partners" which means selling to Facebook or people who do business with Facebook and they create a profile based on that and Google and Facebook likely share information.

Yes you'll get rid of google play services as a in-phone spy but you'll also not eliminate tracking. The browser Vandium doesn't have ublock by default. Stuff about you will still be sold on multiple levels from many parties, including even if they are not loading third party javascript just by doing transactions.

Graphene OS also is a smoother and less annoying Operating system than default Android in many ways, but be aware that if your banking apps are compatible now they could implement play integrity API a few weeks from now and no longer load. If that's a must have for you, I am not sure it makes sense to install Graphene unless you have time to install another OS later.

SpiderWebb

Just do it. I did a while back and it was the best decision I made about a phone, I wish I had done it earlier. My first GOS was a P6, 2 years is a long time and by then P7's will be cheap second hand but I will bet that by that time you will think differently. I am a 50 something year old builder with no connection to the IT industry and I discovered that GOS is NECESSARY.

Eirikr70

Hello @Xarcell , your phone will be EOL either with stock OS or with GrapheneOS. So I wouldn't consider that aspect into making the decision between one OS or the other. You have security and privacy benefits of using GrapheneOS even if you install the Google services framework. But security benefits will be gone (or going) within two years, in either case.

Manky

My first grapheneos device was a pixel 6.

I say go for it. Try it out. Graphene with sandbox google is better than stock. Either you will like it or you won't. Only one way to find out.

If it's not for you then flash back to stock

missing-root

Yes

GrapheneOS supports EOL devices longer than Google afaik. Not complete patchsets but pretty good.

The Vanadium browser, webview and the other apps are still updated on my Pixel 4a, so this is also an increase in security.

If you are not especially threatened, the baseline security of GrapheneOS is SO much better than anything you get otherwise, that there is no danger really.

spring-onion

missing-root GrapheneOS supports EOL devices longer than Google afaik. Not complete patchsets but pretty good.

secrec Now here's the neat part; GrapheneOS typically extends support a bit beyond what upstream does.

It is my current understanding we don't plan to provide this extended support for 6th generation devices and onwards. Keeping these old phones working is not trivial, and with google releasing more and more devices every year with the aforementioned 7 years of support, workload is increasing too.

GrouchyGrape

One thing I don't see being mentioned is that those banking apps may not work at all, regardless of whether or not you install the google suite.

Personally, I do all my banking through the browser. I have 7 financial institutes that I have to interact with weekly and the only feature I'm missing is mobile check deposit. Thankfully for me this works and I never have to have those apps installed anywhere on my phone.

All that being said, GOS is seriously awesome. I daily drive a Linux machine, windows machine, iPhone, and GOS on a pixel 7 pro. The only one I "couldn't live without" is GOS.

I too would rather throw all my tech in the trash and just live in the mountains undisturbed, but unfortunately for me that's not an option right now (but I'm working on it lol) therefore I need something that I can fall back on and trust, and for me that's GOS.

zynex

I have a Pixel 6a which I have used GOS for the last 1,5 year or so, works absolutely great! I usually get about 2-3 days of battery life from it to, so no need to switch yet for me :) Regarding banking apps, I think that depends of where you live and which bank? Here in Sweden there is no issues what so ever with banking apps and GOS. We rely on 2FA for login (called BankID), so there security lays there. The only issue with BankID is with some apps installed outside Play Store, and if you have any availability setting on for that app. Quite annoying "feature" the added earlier this year.

Originalcahummer

For what it's worth, if you still have the Pixel 2, you could install GOS to get a feel for functionality. I have not yet fully switched. To prevent panic, I'm test driving on an old phone with WiFi only.

secrec

Originalcahummer There are no more system images available for pixel 2, so no, he CANNOT install GrapheneOS on it.

missing-root

spring-onion that is sad, as 6th Gen are more capable to modern standards. But totally understandable.

I donated multiple times, and hope everyone else does too! Thanks for your amazing work! Delivering such a stable, user friendly, private AND secure OS is not a small task at all.

missing-root

angela

There is a site

https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/

It is crowdsourced from GrapheneOS users. If your bank is in there, and works, it works.

Note that Google Pixel phones have some features not in AOSP. I think Chromebook Sync is among those.

But I agree that GrapheneOS is WAY less annoying than stock android. After setting it up, it JUST WORKS.

I will do a guide on how I setup GrapheneOS. It is opinionated but pretty well researched. If you write me in a couple of days, I can help you get a comfortable system running. Its mostly installing apps, opening them, they tell you to allow some permissions, you allow them, done.

missing-root

Btw if you want extended support for EOL devices, have a look at DivestOS.

I have not tried it yet. It has wider hardware support and even supports Android 7. The disadvantage is lower security (than GrapheneOS, not than Stock outdated Pixel OS).

Note that this cannot update the firmware, because firmware needs to be signed by the firmware vendors, and nobody else can update that. Yeah, that is a problem.

Xarcell

I can't write back to everyone here, but I wanted to thank everyone for the info they provided. I think I will give GrapheneOS a try, even if it bricks my phone. As far as my banking, the bank that wasn't on the list allowed me to use just the web version. So at this point, I don't think banking is going to be a problem.

As far has my history, I used to build websites and offer shared web hosting managed through cpanel. I also dabbled in a little bit of FOSS CMS's. However, that was a long time ago as I have gotten Parkinson's Disease and struggle to type, hence why I don't have a desktop PC anymore.

Anyway, I plan to use Proton Services(mail, drive, vpn, calendar, etc) as I have already been using them for years. I also use Brave Browser/Search for pretty much everything else. The only Google products I still use are Docs, Sheets, and Android of course. Proton almost has their version of Docs ready and I think if I switch to GrapheneOS I can pretty much say that I've gotten away from Google.

I plan to get a second hand Pixel Tablet and put GrapheneOS on it too if it works out on my phone. Currently, I use a FireHD8 with Google Play store unlocked on it. A tablet is my primary device as it is best suited for my needs because of my Parkinson's Disease.

I am also looking into Session and Threema. I assume SMS isn't all that safe even on GrapheneOS? Because of carrier/ISP spying? I dunno.

If GrapheneOS works out for me, my family will follow my lead and switch to it to. I even already got a friend interested. My biggest fear is that the Government will not like my political views, track down something I said or did years ago, that was legal then, but illegal now, and make my life a living hell.

spring-onion

Xarcell I think I will give GrapheneOS a try, even if it bricks my phone.

It won't. The web installer can not brick your phone, you can twist and turn it as you like. The worst case scenario is the installation is interrupted for one reason or another and you are temporarily left with no operating system at all, but you can always return to fastboot, the bootloader interface, and restart there at any time. Not to mention you can always go back to stock too if you wish, and it will be like nothing ever happened.

Xarcell I assume SMS isn't all that safe even on GrapheneOS? Because of carrier/ISP spying? I dunno.

It's still flawed, there isn't much we can do against that. You can disable 2G, run 4G/LTE mode only and strip out attack surface that way but cellular calls/texts should be avoided if you're handling sensitive information.

Xarcell

spring-onion I tried installing GrapheneOS via web installer. It pretty much brick my phone, I think. It won't boot up past the Google logo screen.

other8026

Xarcell This can happen when an installation has been interrupted or not completed for some reason. Just push and hold down the power button until the phone turns off. I think it's something like 30 seconds, but it might feel like longer than that. After shutting down, try flashing again.