Recommended apps

The apps we recommend and use ourselves. Most are free and open source. Download each one only from the place shown, in this order of preference: the developer's own website, then F-Droid, then Aurora Store. Read how to download apps safely to see why.

App stores

Aurora Store

Download everyday apps without signing in to a Google account. Use it only when an app is not on F-Droid or the developer's own website.

Choose Anonymous when it asks how to sign in.

microG

A free replacement for Google Play Services, for apps that need Google.

For phones running other Android systems. On GrapheneOS, use GrapheneOS's own sandboxed Google Play instead.

Security

Sentry

Enforces security rules: a limit on wrong PIN attempts, alerts when someone tries to unlock your phone, and a warning when an app gains internet access after an update.

Advanced: blocking USB data and safe mode needs extra set-up.

Privacy

Messaging and calls

Molly

A hardened version of Signal, with an encrypted database and extra lock options.

Uses your Signal account, which needs a phone number.

Threema

Encrypted messages and calls with no phone number or email needed. A one-off purchase.

Cheogram

Text and call from a real phone number over the internet, with no SIM card. Get the number from jmp.chat and pay in Bitcoin.

Do not use it as your only way to call emergency services.

Files and notes

Standard Notes

End-to-end encrypted notes that sync between your phone and computer.

Notepad

A simple notes app that keeps everything on your phone, with no account.

MA Calendar

An open-source calendar that keeps your events on your phone.

Needs Android 12 or newer.

Crypto

Built into GrapheneOS

Auditor

Checks with a second phone that your GrapheneOS phone has not been tampered with.

Get it from the GrapheneOS app store (Apps).

Maps

On your computer

For your Mudi router

Blue Merle

Changes the IMEI of a GL.iNet Mudi travel router and wipes identifying data.

Advanced. Check the law where you live first.

Before you install anything, check you are on the real website: the address must match exactly. Only install apps you really need, and check what permissions each one asks for.