GrapheneOS - the safe & easy way [INSTALL] [De-Googled Pixel7 - Pixel4a] [Chapters]

The easy & safe way to install GrapheneOS on a Pixel device (Pixel 7 & Pixel 4a) without bricking it.
Graphene is the safest and most privacy focussed flavour of Android without having to live in a cave.
Misconceptions: Battery life, performance, responsiveness, notifications, banking apps, no root.
!! Backup all data from your phone, it will be lost by this!
00:00 Overview, Pixel 7 and Pixel 4a
01:12 Misconceptions
03:12 Background, GrapheneOS is different to Custom ROMS & other options
03:49 Root or no Root in Android
05:09 4 reasons for GrapheneOS: Protect yourself from your 3rd party apps
05:55 4 reasons for GrapheneOS: De-Google your phone
06:25 4 reasons for GrapheneOS: Additional security for your job or profession
06:49 4 reasons for GrapheneOS: You don't have to be a nutcase to want privacy
07:34 Alternatives: DivestOS, flavours of LineageOS, vanilla Android
08:53 Preparations: System & browser updates, cables!! Do this or you risk bricking!
09:43 Preparations: Developer options, OEM unlocking, USB debugging
11:10 Preparations: Loading Bootloader interface
12:10 Installation: Quick Check beforehand (Checking the preparations)
13:42 Installation: Unlocking Bootloader
14:02 Installation: Downloading images, reverting back from GrapheneOS to stock Android, common errors
16:45 Installation: Flashing onto the device, fastbootd
18:18 Installation: Locking Bootloader, confirm on phone (Volume button, then Power button) - DONE!
19:02 Onboarding GrapheneOS
19:49 Verifying the installation (skipped, please to this, read the documentation)
20:02 Installing Google Play Services
21:19 Getting Apps: F-Droid.org to get the Aurora Store
23:30 Aurora Store: Getting clean APKs directly from Google (via API request)
25:16 Aurora Store search issues
26:03 Installing Google Maps, common issue: No GPS - Just walk around for a few minutes!
26:56 Apps on GrapheneOS, banking
27:24 Round-Up
27:50 Specials, block all camera/microphone access
GrapheneOS is a modern day equivalent to the XPOSED Framework, granular permission management and sandboxing for all your apps on your device. Please remember

[@ExpediteTravels]

I switched over to Graphene os a month ago and love it thanks for the video 😎 👍🇨🇦

[@DigitalIndependent]

Glad to hear! My checklist to get the most out of Graphene is going online soon

[@devviz]

it's now over 5 months, how's your experience so far?

[@DigitalIndependent]

Additional tips: I really LOVE Scoped Storage on Graphene. You can decide which folder exactly can be accessed per app. No more generic blanket access permissions for apps anymore. iOS had this now for quite some time, at last I can use it on Android!

[@brianmahoney2079]

should you install framework? I installed google play services and framework is installing

[@barriewood9336]

Great video. Informative. Presentationally almost perfect! Great advocacy for Graphene OS! Now subscribed to the channel!!

[@DigitalIndependent]

Thanks for your support! Glad to hear :) more coming, especially your own truly private vpn

[@fear5735]

I got a 6a yesterday and did it. It was my first time doing anything like that. Only took me about an hour to get it set like my S10 in terms of layout and apps etc. I'm very happy with Graphene and the 6a is really cool, literally the only thing wrong with it is no wireless charging.

[@DigitalIndependent]

Great! Thanks for sharing. It's much easier than many people seem to think. I wish you lots of fun!

[@hondurasen3632]

6a doesnt have wireless charging

[@fear5735]

@@hondurasen3632 Hence why I said "The only thing wrong with it is NO WIRLESS CHARGING." R-e-a-d.

[@alexandertikanis5236]

@@fear5735 thats not the os problem lol. learn how to t-y-p-e

[@fear5735]

@@alexandertikanis5236 You need to learn how to read too. I specifically said THE 6A. Two morons in 7 days replying, that's a record.

[@drjthornley]

With you on the journey Oliver. Much gratitude. GOS sed my P6 yesterday. Success! I love it. No going back. Too bad about wallet.

[@DigitalIndependent]

Great :). Private (your own!) VPN coming up very soon.

[@jimcabezola3051]

I just subscribed after watching this video! It makes me want to try this! Thank you!

[@DigitalIndependent]

Thanks :) Just starting out… Have you tried Graphene by now?

[@jimcabezola3051]

@@DigitalIndependent I have, indeed! Like many, I merely followed "Side of Burritos" channel and installed it on the Pixel 6a I just bought. As I may have mentioned, I use this as a MUCH better camera than the ones on my LG Stylo 4 and Samsung A10e. The new one features time-lapse video which I use regularly. The camera app in Graphene is better than the ones in my other phones, but I run Google's camera app in a sandbox. I cannot comment on calls or messaging; this phone has no SIM, and I don't intend to add one. I just like the camera. It's light years ahead of my 17+-year-old Canon, Nikon, and Pentax DSLRS, needless to say. I like the MP3 player in it, and the display is also not at all bad for reading my ebooks and magazines. My Ethernet-to-USB-C adapter works great. I don't bother with wi-fi, so I don't know how well that works. I got the phone for $299, so I think I got a decent deal.

[@-LosTboY-]

I just see the world through very different lenses and although I think you are great at what you do but you still cultivate untruths about security and having a locked OS. As soon as you down played rooted devices I knew you are missing very important knowledge about absolute freedom. Total root can do things you probably point know exist. Their is no such thing as partial anarchism. Stop holding back and go all the way. We need more people like you to stop promoting any type of governance. Thanks for your time and sacrifice for these instructional. ❤

[@Deach777]

Awesome videos, I'd love to see more of anything you have to share, well done

[@Salzmann_AvX]

Wonderful video, the best I was able to find. Even tho it's a close call with David Bomball's, but yours Is tailored more to inexperienced people.

[@luckychukiye8743]

Great video! Plan to get a brand new 7 very soon as it's a new phone :D Will Google camera work on it?

[@DigitalIndependent]

Yes! You will need to install sandboxed Goople Play Services and you're good to go

[@michael49789]

Yes! And good news: with recent GrapgheneOS version you don't need sandboxed Google Play Services for GCam and Google Photos anymore! Since I have read this in the GrapheneOS Forum, I have tried it on my Pixel 7 Pro with Owner Profile and it works really! I use two profiles: 1. Owner Profile (without Google Services). 2. Google Profile (for my few apps which need Google Services). Advantage of this setup: I can logout from this second profile after doing things which need these apps and Google. So it needs no energy when I switch back to my owner profile! If you only switch from the second profile, the second profile continues to consume energy in the background.

[@DigitalIndependent]

@@michael49789 very interesting idea to set up a specific and separate profile only for apps that need google play services. I’m going to idea to my upcoming video on user profiles

[@luckychukiye8743]

@@michael49789 Thanks! Ill just run this on the owner profile w/ Google camera & should be set The 7 is still very new right?

[@michael49789]

@@luckychukiye8743 Sorry, don't understand what you mean, because of your typos. Since the firmware update in April 2023, Google's Camera app (GCam!) and Google Photos app work w/o Google Play services! As “Storage Scope” I have allowed them access to one directory only: Main storage/DCIM/Camera. I have revoked the internet authorisation for both! Works great!

[@rbbelfay9354]

I appreciate your humor

[@galapogosisland]

I had an issue on chrome browser flashing GrapheneOS after downloading the factory image. Chrome claimed the image was never downloaded. The chrome version is 116.0.5845.111 (Official Build) (64-bit) on win11. I switched to brave and it installed the GrapheneOS factory image fine. Just a tip in case anyone ran into the same problem.

[@DigitalIndependent]

Thanks for sharing! Would recommend brave as the first option, but if it solves a problem … it solves the problem :)

[@Bond2025]

Do you really think it stops you from being tracked? The exploit security services use to get your exact location is related to the emergency call locator system. That can be interrogated at any time if you are of interest or you go to a certain area. Surveillance is also via IMSI catchers if you go to public events, parades, gatherings etc. All your calls, texts and what you do with the phone is intercepted. Graphene is a good alternative, but doesn't protect anyone. It is the equivalent of using a VPN or Tor and not understanding what they are for, but listening to sales talk. Graphene only protects to a certain extent against having some user data collected by Google and sold on by them. The next problem is who else collects info and how. You need to look at web browsers, extensions, VPNs, companies you deal with - all of them can cross reference information and sell it if they choose. Then look at your ISP and DNS provider, do you know what they collect and what they are up to? Your innocent looking home WiFi router is also a problem as they all collect personal details, some also have apps, and they know every site you use and when you use them and the identity of your SSID etc. Random IMEI does nothing to stop tracking. So the problem doesn't just go away by not using Google Play.

[@DigitalIndependent]

It completely depends on the threat model. The threat model here is Big Tech and advertising tracking you, collecting data and creating profiles. Plus more safety vs apps with mailicious intent. I would rely on this against state actors or apts.

[@dmpath]

This may seem like a stupid question, do I activate the new phone first with a carrier and then update the OS? Or do I buy an unlocked pixel, install GrapheneOS and then activate it with a carrier?

[@DigitalIndependent]

Unlocked Pixel is the way to go. Then activate it. Sorry for being a bit late with my answer.

[@ronobvious1785]

@@DigitalIndependent What if it is already activated with a carrier? I recently upgraded my phone to a Pixel, but it is already working with the carrier using stock Android. GrapheneOS conversion will not work here?

[@DigitalIndependent]

@@ronobvious1785 It should work, but there seem to be regional differences. Example: if you use an eSIM in Germany you have to activate it before migrating to Graphene. Not sure in your case. I would advise asking in the GrapheneOS subreddit. I don’t want to mess up your phone :)

[@will_s_citylights]

Hi there. Newbie but want to make the move to GrapheneOS. Not super tech savvy, come from a biology background, but I can hold my own enough. Have any recommendations on best way to backup your Pixel should you want to have the option to roll back to Android?

[@DigitalIndependent]

Not really. I never found a really reliable and full backup solution for Android without root. So It's more of a: Copy and/or export your stuff, start fresh, import/copy back.

[@KennethYounger]

Any recommendations on Backup/Restore? Preferably to something self-hosted.

[@DigitalIndependent]

No recommendations:) I use built in backup from Graphene and it’s ok. Would prefer borg backup, but haven’t had time to try

[@otisobl]

i just installed Graphene on a Pixel 4a and I like it so far. I do wonder though whether I should move up to a later Pixel. The 4a is sufficent, but the missing security updates worry me.

[@DigitalIndependent]

I wouldn’t use the pixel 4a as a daily driver or main phone. As a secondary it’s fine. Personally I go for last year’s pixel, that’s the right mix of lifespan and value. Getting them second hand is also a good way, if there is proof of the battery being replaced recently.

[@otisobl]

@@DigitalIndependent Thanks. Yeah, that it the plan. In the meantime I tried a Fairphone with a /e/OS, but I feel - albeit loving the concept, the Fairphone is not there yet technically....

[@DamonAlec]

Could you please do a video explaining in detail the best senerio for privacy when using different users on graphene. An explanation on how to use different user accounts for the best privacy and security setup. I've looked and there is no good video that explains this in detail. Thanks

[@DigitalIndependent]

Great Idea!

[@devviz]

when you say "brick" does it mean you messed up the installation process and the phone cannot boot up or is the phone literally died and nothing can be done to fix it?

[@DigitalIndependent]

Brick means it’s like a building brick, a largish stone used to build houses. It’s dead then. But on the positive side: usually it doesn’t fully brick. It’s more like you have to re-flash.

[@Michael-it6gb]

The sad part is 99% of people do not care or understand the issue about their privacy from big tech spying. The process of setting up a new rom/OS is too complicated or in many cases can destroy your device(bricked phone).

[@RedVRCC]

Will this work on any android phone? I'm gonna test it on one of my old phones just in case it bricks it.

[@MrBobWareham]

I have a Samsung Galaxy S6 that I would like to install Graphene OS on, would that work or is it just for Google Phones?

[@kptechnologyservices4696]

I did this process on my pixel 8 from a factory state. So, no data to worry about

[@DigitalIndependent]

That’s how I like to start, too. But not always possible. You probably bought the pixel just for this, right :)?

[@kptechnologyservices4696]

@@DigitalIndependent yup, that's why It was done from a brand new state

[@mickeysam9762]

Whats the logic of using google play services in a degoogled phone...

[@DigitalIndependent]

Depends on the use case. Some apps require it and it runs very differently here. No sensors, most probably no location, for many apps you can even deprive it of network access. So there’s still benefits. Not recommending it, just trying to make the migration easier

[@sainteckes]

For me it never worked with GPS when I am inside, because the Google WIFI triangluation is not used there..

[@dr.wasabi7833]

@DigitalIndependent! What have you heard about the new EU bill that says that EU must have access to your pictures and text messages and if you dont allow them, the APP's shall prevent you from sending pictures or messages in the future. Even Signal messages will be included in this stupid bill.

[@DanSlotea]

Banking apps are working, but NFC payment does not?

[@schh486]

why is usb debgging required, there is no mention of it in the official installationguide

[@DigitalIndependent]

For troubleshooting. If something goes wrong, you have access via USB (adb). I thought it is also required for the installation itself.

[@schh486]

@@DigitalIndependent I did the installation on my pixel tablet aswell, but i followed another guide without the debugging option and that worked fine. Was just curious. Thanks for the guides your doing. They are very good. Keep it up!

[@stargalacticfederation]

I'm using a Google Pixel 7 Pro 12GB of ram with 512 GB memory storage. I cannot pick up incoming phone calls from my primary profile on GrapheneOS. When I am on my owner profile, I see the call, and I hear the ring tone, but the "switch to profile" button is unresponsive. so why is this happening. I hope this makes some sense and I am not littering this space too much. Any ideas/help is much appreciated.

[@DigitalIndependent]

Strange. It works for me on all profiles. Have you checked the profile settings to make sure you have allowed „make calls“?

[@stargalacticfederation]

@@DigitalIndependent yes I can make calls

[@xs3927]

i think i bricked my phone, how do i know? and now what?

[@michaelliu9576]

Hey, is there a way to keep the vpn on by default when turning on the phone?

[@DigitalIndependent]

Yes. Per user you can insist on a vpn.

[@paulbailey6251]

Hi, did you say 'direct os', as I can't seem to locate a source?

[@DigitalIndependent]

I think you mean "DivestOS". that's an alternative to Graphene with a slightly broader hardware support but mostly without locked bootloaders.

[@forgottenvirtues5480]

Can anyone tell me how updates work, for example when you install a banking app on google play services?

[@DigitalIndependent]

Graphene does its own backups. You are prompted to import a backup on installation. Of this is important to you, I would suggest doing a basic configuration, backing it up, resetting and the importing

[@ThePr8head]

But why pick one of most the expensive Google phones?

[@DigitalIndependent]

I wanted QI charging. That only comes with the top line phones. And Graphene really only runs on Pixels :/

[@brandonmcclelland4359]

I want to use this only for Pokémon go spoofer… can I do this with graphene?

[@DigitalIndependent]

Graphene doesn’t give you any root and doesn’t give you any location spoofing. So I guess you have to go with a custom ROM from xda developers. Take a look in the forum for your device. :)

[@cdm297]

how is Calyx OS?

[@DigitalIndependent]

Smaller ecosystem, similar. Bootloader locking is not a core feature, and for me that is important. Is a bit less minimal than Graphene.

[@TimStifter-x9c]

very good!

[@pietjespappie]

I always wonder why people install a custom rom to get rid of google and install those google crap apps afterwards again...

[@DigitalIndependent]

Because we can! Because it makes sense! Sometimes… :) 1. It’s in an isolated profile 2. google Play services run with hardly any permissions and can not track the users in the same way. 3. some people can’t work without at least a basic access to the big G. So this at least mitigates some of the problems

[@darkwolf41nite53]

Can I install this on a intel Chromebook that has chromeOS?

[@DigitalIndependent]

Nope. Pixel Phones only

[@kingofkingz235]

They should make it available for more Samsung phones

[@itzmillertyme]

Can this be put on a ZTE red magic 8 pro?

[@DigitalIndependent]

Nope. Pixel all the way

[@UndetectedKiller-yi1dy]

There is xda talk of how to root graphene os. Find out the instructions and make a video. Having the most secure rooted phone is a +

[@DigitalIndependent]

Not too sure about this. Rooting defeats the purpose and most security benefits. And if the bootloader can’t be re-locked after rooting, then this just isn’t secure. Then you can just install a lineageOS if you have to have root.

[@greenpanther94]

Please get a more powerful microphone

[@DigitalIndependent]

Thanks for the input!

[@BarryandKaren]

Why? He was perfectly clear to me.....

[@devviz]

every time you think about or want to "de-google", remember what app/platform you are on. this comment is written and posted on youtube, a subsidiary of alphabet - google's parent organization.

[@DigitalIndependent]

That’s the spirit :)

[@prakashpothineni7752]

Sir my problem with gapps build custom rom is heavy battery drain, somehow google draining the battery with gms & play services, so I want vanilla build but I also want to use google email app, any solution for this ..🥲

[@DigitalIndependent]

I don’t have any battery drain with Play Services. Have you ran it for a day without to verify?