Flashing a used Google Pixel to GrapheneOS?

sappy_junior728

Are there any privacy and security concerns if I get a used Google Pixel device and flash it to GrapheneOS? Is there any chance there could be malware or viruses that could linger even after a factory reset and then flashing to GrapheneOS? Is there any chance previous data could get mingled with GrapheneOS? Can I trust a used Google Pixel with GrapheneOS?

userofgos

sappy_junior728 Are there any privacy and security concerns if I get a used Google Pixel device and flash it to GrapheneOS?

None that I can think of.

sappy_junior728 Is there any chance there could be malware or viruses that could linger even after a factory reset and then flashing to GrapheneOS?

Extremely unlikely, especially with a used Pixel that is running the latest up-to-date Stock PixelOS. It is recommended to update to the latest Stock PixelOS but isn't absolutely necessary.

It's best practice to update the device before installing GrapheneOS to have the latest firmware for connecting the device to the computer and performing the early flashing process. Either way, GrapheneOS flashes the latest firmware early in the installation process.

Source: https://grapheneos.org/install/web#prerequisites

sappy_junior728 Is there any chance previous data could get mingled with GrapheneOS?

No. I'd suggest reading the GrapheneOS Web-install documentation. Data is wiped multiple times during the process.

Unlocking the bootloader will wipe all data

Flashing factory images replaces the OS and wipes the data

The initial install will be performed by flashing the factory images. This will replace the existing OS installation and wipe all the existing data.

Locking the bootloader wipes the data again.

DeletedUser639

sappy_junior728 Are there any privacy and security concerns if I get a used Google Pixel device and flash it to GrapheneOS?

None, I have used refurbished Pixels for over two and a half years.
No helicopters over my house, no abseiling tooled up marines crashing through my front door.

I use this as a benefit, as they are significantly cheaper. If I loose it or its stolen or I drop it, then I can afford that financial loss, however annoyed I may be. I can financially replace it instantly with another refurbished device.
Purchasing a new phone for over £400-£500, its just not in my DNA.

sappy_junior728

userofgos

Some people recommend setting up a Google account at a public location and not at home. What's the basis for that? If I'm using a used Pixel, there's no way I could know where the phone was previously used or set up. Is there any potential privacy/security concern?

Blastoidea

How many things can survive a factory reset?

Can someone list a few?

sappy_junior728

Blastoidea

I don't know, that's why I'm asking the experts here.

userofgos

Blastoidea How many things can survive a factory reset?

Can someone list a few?

only thing I'm aware of is Esim's

userofgos

sappy_junior728 Some people recommend setting up a Google account at a public location and not at home. What's the basis for that?

Two reasons. First is the difficulty of avoiding the Phone number verification check during account creation if you use a VPN/TOR, so you will most likely have to use a non-suspicious IP - the one provided by your ISP or one from a public WiFi network. Second is that some people have different threat models, some have a high threat model and don't want the Google account creation being linked to the IP provided by your ISP which could also allow Google to link the account to your real identity.

sappy_junior728

userofgos

Is it even possible to create a Google account without a phone number in 2026? I'm reading that even with a public non-VPN IP or a residential IP, a phone number is still required.

At home, I never have any devices connected to the internet without a VPN. I have an OpenWRT router with a VPN running 24/7/365. So, the IP address any of my devices get will be based on the VPN.

userofgos

sappy_junior728 Is it even possible to create a Google account without a phone number in 2026?

Yes, you just have to keep trying, and try different methods like creating it from within the Google Play Store. There's many threads on this forum with the steps