Getting started

Before we begin remember this guide should only be used if you have no other options! Mobile is still not good for your opsec!

Installation

Graphene has two officially supported installation methods, this guide will cover the recommended method.

WebUSB-based Installer - recommended for most users
Command Line Install - recommended for advanced users

Prerequisites

Install an officially supported operating system, you should have at least 4GB of free memory available and 32GB of free storage.

Windows 10
Windows 11
macOS Catalina (10.15)
macOS Big Sur (11)
macOS Monterey (12)
Arch Linux
Debian 10 (buster)
Debian 11 (bullseye)
Ubuntu 20.04 LTS
Ubuntu 22.04 LTS
ChromeOS
GrapheneOS
Google Android (stock Pixel OS) and other certified Android variants

Ensure your system is up to date before proceeding.

Start the Install

Install an officially supported browser on your computer

Chromium (outside Ubuntu, since they ship a broken Snap package without working WebUSB)
Vanadium (GrapheneOS)
Google Chrome
Microsoft Edge
Brave

Ensure your browser is up to date before proceeding.

Do NOT use incognito or other private modes for installation.

Enable OEM Unlocking

Enable developer options by going to Settings -> About this phone -> tap the build number option until developer mode is enabled.
Go to Settings -> Developer options -> Toggle OEM unlocking

Flashing as non-root (Linux specific)

On Arch Linux, install the android-udev package. On Debian and Ubuntu, install the android-sdk-platform-tools-common package.

Arch Linux:

sudo pacman -Syy android-udev

Ubuntu:

sudo apt-get install android-sdk-platform-tools-common

Boot into the bootloader interface

Reboot the device and hold the volume down button while the phone boots. Continue holding volume down until the phone boots into the bootloader interface

Connecting the phone

Connect the phone to the computer. On Linux, you’ll need to do this again if you didn’t have the udev rules set up when you connected it.

On Windows devices if you don’t have the fastboot driver already installed you will need to install them to move forward. Alternatively you can also install the latest drivers for pixels.

Proceed to the official GrapheneOS website, and navigate to install -> web installer.

Jump to the ‘Unlocking the bootloader’ section.

Follow the remaining installation steps on the page. ( <font color="red"listing the next steps would be pointless as you need to click page buttons to initiate WebUSB commands)

Post Installation Setup

Once GrapheneOS installation is completed, it is recommended that you change the following settings.

Navigate to Settings -> Privacy -> disable camera/microphone access.
Go to Settings -> Location -> Turn off use location.
Go to Settings -> Security -> Auto reboot and select an auto reboot time.
Go to Settings -> Security -> Pin scrambling and enable it.
Go to Settings -> Security -> Screen lock camera access and disable it.

Once your settings have been updated, open the browser and download F-Droid. This will act as your app store on your device.

Recommended Apps

OpenKeychain: Easy PGP
AuthPass - KeePass compatible
InviZible Pro
Fennec F-Droid
Tor Browser for Android
(Look for F-Droid (FOSS) alternatives for PlayStore apps)

Once you have installed your desired apps, begin by configuring them. It is recommended that you follow here to set up Fennec to browse I2P

Conclusion

Congratulations, you have successfully set up your secured mobile device! It is important to remember that your devices security is only as secure as you are; be careful of the applications you install, the permissions you provide, and the settings you enable. Using Cellular Service will always de-anonymize you. If you must use it, it is recommended to use a faraday bag or box to limit tracking. Be sure to keep your system up to date with the latest GrapheneOS updates.

PLEASE follow all guides and read all FAQ questions on grapheneos.org