Here is a translated version of the article:
With GrapheneOS, a Pixel smartphone is protected against attacks and data eavesdropping.
If you're looking for a practical smartphone that's extremely secure and offers the highest level of data protection, you'll be hard-pressed to find a better solution than a Google Pixel with GrapheneOS. The operating system is incredibly easy to install and restricts only the software, not the user's options.
When it comes to data protection and security, many people probably don't immediately think of a Pixel smartphone, since the manufacturer Google is considered one of the world's largest data giants. But a distinction must be made here. When it comes to protection against cyberattacks by criminals, Google, its software, and its devices are far ahead. The problem lies in its business model, which relies heavily on analyzing as much data as possible to deliver targeted ads.
The advantages far outweigh the disadvantages.
The BSI and consumer protection organizations evaluate password managers. The solution is GrapheneOS, as this open-source operating system combines the high security of Pixel smartphones with maximum data privacy. Moreover, it's incredibly easy to install and use, and the devices receive updates as long as Google Android.
Why only for Pixel devices?
The reason GrapheneOS was developed exclusively for Pixel smartphones is explained in the operating system's comprehensive FAQ. In addition to meeting requirements such as fast and long-term security updates and basic support for alternative operating systems, the devices' security chip (Titan M), unique in the Android world, is crucial. "This chip manages the cryptographic keys separately from the rest of the system, protects the boot process, and prevents manipulation before the device can even boot," according to Tarnkappe.info.
Seven years of updates.
Android updates and security patches are immediately available on GrapheneOS. When you purchase a new Pixel, you also receive seven years of software updates for this alternative operating system. Unfortunately, this no longer applies to older Google smartphones. Devices from the Pixel 6 onwards are still supported. For optimal security, the developers recommend smartphones from the Pixel 8 onwards, which is also how the manufacturer introduced the extended update guarantee.
The operating system is based on the Android Open Source Project (AOSP), making it compatible with all Android apps. GrapheneOS does not include the Google Play Store or Google Play Services. However, it does offer the option to install them, as this entails minimal privacy loss. This is because Google software, like other applications, runs in a sandboxed environment under GrapheneOS.
This means that apps run in isolated environments and can only access system functions or data from other apps with the explicit permission of the user. If you also use Google apps without logging in to an account and consistently use the privacy settings, Google generally only receives the data technically necessary for the respective service function.
Play Store and alternatives.
There is an integrated Play Store solution, but it only includes a few apps. Among them is a security app (Auditor) that allows you to check system integrity from another device. A camera app is also an interesting alternative to the Pixel app. In our tests with a Pixel 9a, it performed well. The accompanying GrapheneOS gallery with editing features is also well-designed.
If in doubt, you can also install the original version. If you don't want the Play Store on your smartphone, the Aurora Store is a good alternative for this and other Pixel apps. It's essentially an open-source image that allows you to download apps without a Google account or Google services.
To install the app, you can download the corresponding file (.apk) directly from the website. Alternatively, you can install the app on your smartphone through another popular and secure alternative app store, such as F-Droid.
So, there are several ways to configure your Pixel smartphone so that using it is virtually indistinguishable from using a regular Google device. Messaging apps like Signal and WhatsApp also work flawlessly. The main exception is Google Pay. However, for contactless payments with your phone, there's Curve as an alternative digital wallet.
Data protection down to the smallest detail.
If desired, GrapheneOS can be transformed into a "privacy monster." The system offers numerous additional options for this, which are much more extensive and detailed than those of Google Android. Furthermore, it's not possible to take screenshots of these features; the operating system prevents this in the settings.
Describing all the data protection and security options is beyond the scope of this text. Ambitious users are advised to consult the extensive GrapheneOS FAQ or read the article on Tarnkappe.info. And those who want to know all the details will find the review by security expert Mike Kuketz very interesting.
Even beginners are advised to create different profiles. For example, you can isolate apps that require Google Play Services in a private profile. Once created, you can select them from the available apps or install new ones directly.
"Killer password"
The "Killer password" is available in the device unlock menu. In an emergency, you can enter this anywhere your user password is normally requested. This will immediately erase all data and eSIMs and disable the device. The same applies to a PIN code.
Under Exploit Protection, the top option is "Automatic restart." Here you can set the time after which the device should automatically restart if it hasn't been unlocked for a certain period. This fully encrypts all data until the device is unlocked, providing additional protection in case of loss or theft.
Quick installation.
Compared to other alternative operating systems, GrapheneOS is extremely easy to install. You only need a computer running Linux, macOS, or Windows and a USB-C cable to connect your smartphone. Simply follow the developers' step-by-step instructions. Although these are only available in English, you can translate the text, for example, using Google Translate or the open-source translation tool LibreTranslate.
Before you begin, it's absolutely essential to create a backup before switching. This is the only way to restore your device later if you're not satisfied with GrapheneOS. To restore a backup, you first need to reinstall Google Android. The Android Flash Tool is the best tool for this.
Source: ntv.de
All rights reserved by ntv.de