In this guide, we walk through the steps to get GrapheneOS up and running on your de-googled device. We'll cover the initial setup, installing and configuring apps, migrating contacts and other data, customizing the environment, and hardening your device for added privacy and security. GrapheneOS can appear a bit intimidating at first, especially with a solid black home screen and black-and-white icons. But never fear, this guide will help you become more familiar with your new operating system.
Guided Setup Video
Option: Follow along in this guided video as Mat explains how to initialize and configure GrapheneOS
Table of Contents
- Insert Sim Card
- Initial Power-on
- Pre-installed Apps
- App Repositories
- Essential Apps
- Personal Customization
- Install New Apps
- Harden Your Device
- Transfer Contacts and Personal Data
- Other Resources
Insert SIM Card
Before inserting a SIM card into your degoogled device, see our article about how to remain anonymous while using a SIM card. Also, if this is the first time installing a SIM card, follow our tutorial for detailed instructions.
TIP: For the ultimate privacy-focused phone service on a degoogled device, check out JMP.chat. Our customers receive a phone number and one month of free service.
When powering on the device for the first time, go through these steps
- Power On: Press and hold the power button on the side of the phone. You can safely ignore the message "Your device is loading a different operating system."
- Welcome: At the welcome screen, tap Start
- Language: Select your preferred language.
- Date and Time: Set your time zone and adjust current date and time if needed.
- WiFi: Connect to a WiFi network by selecting the name of your WiFi network and entering the passphrase.
- Turn on Cellular Data: If you have a SIM card installed and are not connected to a Wi-Fi network, you will have the option of using cellular data to complete the setup process. As always, charges may apply.
- SIM card missing (if applicable): If you do not have a SIM card installed, you will get this screen with the option to install one at this point or setup ESIM.
- Location services: Determine whether to give apps permission to the device's location data. Optionally you may set up location data permissions within the individual app settings later.
- Face setup (if applicable): This is an optional step. To use your face to unlock your screen, you will need to add your face. Follow the on-screen instructions or tap Skip to go to the next step.
- Fingerprint setup (if applicable): This is an optional step. To use the fingerprint sensor to unlock the screen, you will need to provide your fingerprint. Follow the on-screen instructions or tap Skip to go to the next step.
- Protect your phone: Set up a PIN, password or pattern to unlock the screen. This is an optional step however it will prevent unauthorized access to your phone by another individual.
- Restore apps and data: If you have a backup from a previously used GrapheneOS phone, you can restore it at this step.
- Tap Start to complete initial setup.
GrapheneOS includes a nice suite of pre-installed apps.
- Apps - This is the repository for managing and updating ONLY those apps developed by the GrapheneOS team
- Auditor - Used to perform device hardware verification with attestation services
- Calculator - Simple and straightforward open source calculator app
- Camera - This is the customized GrapheneOS camera app
- Clock - Standard open-source clock app
- Contacts - Open source contacts app
- Files - A simple file browser
- Gallery - Photo gallery that complements the camera app
- Messaging - The standard SMS/MMS messaging app
- PDF Viewer - A customized PDF viewer developed by GrapheneOS
- Phone Dialer - The standard open-source phone dialer app
- Settings - App used to configure system settings
- Vanadium - An open source web browser developed by the GrapheneOS team
NOTE: F-Droid serves a similar function to the Apple App Store or Google Play store. It contains only free and open source apps. Applications can be browsed, downloaded and installed without the need to register an account.
To install apps, let's download F-Droid, your primary app repository.
- Go to Settings app > Apps > Vanadium > Advanced > Install Unknown Apps > Allowed
- Open Vanadium, navigate to https://f-droid.org/, then tap the button to DOWNLOAD F-DROID, (tap "Download Anyway" quickly or it will disappear!)
- Tap Open > Install
If you don't find a privacy-friendly app on F-Droid, Aurora Store is your next stop. It allows you to access Google Play Store anonymously.
- Open F-Droid app
- Tap the magnifying glass icon in the bottom right corner to begin a search
- Type "Aurora Store" and select the app name (subtitle is "by Rahul Kumar Patel")
- Tap Download
- Tap Install
Signal: At a minimum, we recommend installing Signal app for secure messaging with family and friends.
- Open Vanadium
- Navigate to https://signal.org/android/apk/
- Scroll down below "Danger Zone" for advanced users. Tap the blue Download button
- If asked where to download the file, the default location ("Downloads" folder) is fine
- If you receive a warning message that says "File might be harmful" or "downloading from this source could be dangerous", tap Download Anyway
- Once the file is downloaded, you should receive a message saying the download is complete. tap Open
- When asked "Do you want to install this app?" tap Install
- A message appears "App Installed", tap Open.
Make GrapheneOS feel more like your phone with these recommended settings changes.
- Install wallpapers: Select Settings app > Wallpaper & style to change home screen appearance (download our favorite wallpapers at https://digitalprivacy.shop/wallpaper)
- Use wallpaper colors: Android offers personalized colors based on your wallpaper. Go to Settings app > Wallpaper & style > Enable "use wallpaper colors"
- System navigation: Choose your preferred way to navigate the OS by going to Settings app > System > Gestures > System navigation
- Add widgets: Add a clock or other widget. Hold your finger on an empty area of the home screen; In the pop-up menu tap Widgets; Select desired widget
- Display settings: Go to Settings app > Display to adjust brightness, lock screen, screen timeout, theme, font size, auto-rotate, etc
Install New Apps
TIP: Before installing new apps from F-Droid, sandboxed Google Play Store, or Aurora Store, see our complete list of recommended apps.
Simple Rules to Follow...
- Use privacy-friendly apps: There are viable open-source privacy-friendly alternatives to the apps you have previously used.
- Stay away from Big Tech: Apps made by Google, Facebook, Microsoft, Apple and other Big Tech corporations should be avoided based on their standard practice of selling your personal data for profit and tracking everything you do.
- Install apps from these sources, in this order:
- F-Droid: The best place to find apps is on F-Droid, a repository that curates privacy-friendly open-source alternative apps.
- Aurora Store: If you cannot find a solution on F-Droid, the next step is to search Aurora Store, an open source app that connects to Google Play Store anonymously.
- Direct Download: Not all apps have to be installed using a repository. There are several excellent apps available for download directly from their developer's website.
Harden Your Device
- Reduce App Dependency: The fewer apps on your phone, the more secure and private it will be. I challenge you to only install what you need. This will increase available storage space and reduce the potential for leaked data through random apps.
- Review App Permissions: Apps don't always need the permissions they request. Go to Settings > Apps & notifications > See All ## Apps. Then select each app and review permission settings. Change to Approve, Deny, or Ask Every Time as necessary.
- Install a Firewall: Install a firewall like NetGuard from F-Droid to restrict network access on a per-app basis. Once installed, scan through the list of apps and decide whether to restrict network communication. Be cautious of restricting system apps that appear in the list.
- Setup Multiple User Profiles: If you must install proprietary (closed source) apps that are questionable in terms of privacy (i.e. for your job), create a "Work" profile and isolate them from your personal data. Learn more.
- Activate Private DNS: Why is DNS important? Learn more. Go to Settings > Network & Internet > Advanced > Private DNS. Select Cloudflare DNS, or input a Private DNS provider hostname.
- Install a VPN: A virtual private network encrypts the data being sent from your device by tunneling to a VPN server, effectively cloaking your data and preventing ISP interception. Additionally, to the downstream recipient, your device's location will appear to be the location of the VPN server. This feature is extremely useful when accessing websites that restrict access from specific countries. For a no-cost alternative that uses the TOR network, I recommend Orbot, available on F-Droid by enabling "Guardian Project" repository. There are also three free VPN services available on F-Droid: the CalyxVPN, RiseUpVPN, or ProtonVPN. However paid VPNs offer more features and higher speeds.
Transfer Contacts and Personal DataIf you are coming from an iPhone and want to migrate your contacts, photos, and other personal data, follow the guide Transferring Personal Data from iPhone. Or if you are coming from an Android device, follow the guide Transferring Personal Data from Android.
If you are migrating from an Apple iPhone to an Android, you'll need to de-register iMessages in order to get text messages from other iPhone users. Go to Apple's "Deregister iMessages" webpage and follow the instructions.