How to flash a Google Pixel with GrapheneOS

GrapheneOS is a privacy and security focused version of Android. It only runs on Google Pixel phones, and the installer runs in your browser. Allow about 30 minutes.

Warning: installing GrapheneOS erases everything on the phone. Back up anything you want to keep first. Always follow the official instructions at grapheneos.org/install/web if they differ from this page, because they are updated for new releases.

Before you start

1. Buy a supported Google Pixel. Support changes over time, so check the current list at grapheneos.org/faq#supported-devices before you buy. Phones sold by carriers can have a locked bootloader, so buy an unlocked one.
2. Use a computer with a Chromium-based browser (Chrome, Edge or Brave), or another Android device with a Chromium-based browser. Firefox and Safari do not support the installer.
3. Use a good USB cable. Cheap cables are the most common cause of failed installs.
4. Charge the Pixel to at least 50%.
5. On Windows you may need the Google USB driver. Linux and macOS need no extra software, but Linux may need the android-udev-rules package.

Step 1: Prepare the phone

1. Switch on the Pixel, finish the basic setup and connect to Wi-Fi.
2. Open Settings > About phone and tap Build number 7 times until it says developer mode is on.

3. Open Settings > System > Developer options.

4. Turn on OEM unlocking. If it is greyed out, the phone is carrier locked or needs a few days connected to the internet.

5. Turn the phone off. Hold Power and Volume Down together until the bootloader menu appears (it says Fastboot Mode).
6. Connect the phone to the computer with the USB cable.

Step 2: Install GrapheneOS

1. On the computer, open grapheneos.org/install/web in your Chromium-based browser.
2. Click Unlock bootloader, choose your phone from the list, then on the phone use the volume keys and power button to confirm Unlock the bootloader. The phone resets itself.
3. When the phone is back in bootloader mode, click Download release. The installer downloads the correct files for your Pixel.
4. Click Flash release and wait. Do not unplug the phone. This can take several minutes and the phone may restart a few times.
5. When flashing finishes, click Lock bootloader, then confirm on the phone with the volume and power buttons. This step turns on verified boot, which protects the phone from tampering.
6. Click Reboot into the OS. Once the phone starts, you can disable OEM unlocking again in the Developer options.

Step 3: First setup

1. Follow the setup wizard and set a strong PIN or passphrase. A long passphrase is stronger than a short PIN.
2. Skip optional extras and decline any location prompts you do not need.
3. Open Settings > Security & privacy and review the permissions for each app you install.
4. Update the system under Settings > System > System updates and check for updates regularly.

Installing apps

GrapheneOS ships with a basic app store and Apps, where you can install official apps. Prefer these sources, in this order (the new guide linked below explains each one):

1. The GrapheneOS Apps store for GrapheneOS apps and the apps it lists.
2. Aurora Store (get it from F-Droid), our preferred way to get everyday apps, without using your own Google account.
3. Accrescent, a privacy-friendly app store with fewer apps.
4. Obtainium for apps that are shared as downloadable files. It keeps them up to date. Check each file with AppVerifier first. See how to install apps.
5. Only download an APK from a developer's own website if no other option exists, and check its signature if the developer provides one.

Recommended apps