GrapheneOS is finally ready to break free from Pixels, and it may never look back TL;DR The makers of GrapheneOS have confirmed they are partnering with a major Android OEM to bring the privacy-focused Android fork to Snapdragon-powered smartphones. The project has confirmed it’s bringing support for Pixel 10, but is unsure whether support will continue for Pixel 11. GrapheneOS didn’t reveal the name of its new partner, but said that those devices will be priced in the same range as Pixels. --- Saw this coming. It would have been nice to see more transparency and less "everything is fine, we've got it covered" when I engaged with them about the recent Google updates just two months ago. The technical realities I was asking about clearly pointed here, and the dismissive responses didn't inspire confidence. Either way, this kind of partnership was supposed to happen years ago before that deal fell through. Let's hope all those who recently bought Pixels specifically to run GrapheneOS will get the years of updates they expected before needing to migrate to this new device. I stopped using GOS as a primary device months ago—it was a pain getting my data off, and Google's Play Integrity API is making it harder for apps to install on custom ROMs. I still recommend them to most people for secondary devices. The privacy fundamentals are solid, but GrapheneOS has always relied on Pixel's superior hardware security (Titan M2, verified boot, etc.). Finding an OEM partner with comparable hardware security has been a bottleneck all along. I'm genuinely interested to see what they come up with. #IKITAO #Privacy #GrapheneOS #Pixel
Ava's avatar Ava
@GrapheneOS What about the "real possibility that some hardware components or features could be permanently broken on custom ROMs. Features that rely on heavily customized drivers, such as advanced camera functionalities, may be particularly difficult to implement perfectly"? And Google's move towards using a virtual device, codenamed "Cuttlefish," as its primary reference target for AOSP development - "intended to make AOSP development more hardware-agnostic"? I think we're all interested in what your plans are for Cuttlefish. But more specifically: 1. You acknowledge that "device tree configurations were dropped"—so why do you dismiss this as the article "not quite understanding what changed"? The loss of device tree configurations is exactly what multiple sources identify as the core problem requiring reverse engineering. While you're correct that userspace driver code remains available, the missing device trees are what force developers into "blind guessing and reverse engineering from prebuilt binaries." Your response seems to minimize the significance of losing these configurations. How substantial is the impact of having to recreate device tree configurations without Google's official versions. 2. Without complete kernel commit history, how do you ensure that monthly security patches don't inadvertently break hardware functionality? The HowToGeek article specifically mentions this as a major concern for maintaining feature parity. 3. Regarding automation improvements—are you building tooling to automatically extract and reverse engineer the missing device tree configurations from Google's proprietary builds each month? This would represent a significant ongoing maintenance burden that wasn't present before. 4. What's your contingency if Google's shift to Cuttlefish as the primary AOSP reference eventually leads to reduced Pixel-specific support in future Android versions? This appears to be part of Google's strategy to make AOSP "hardware-agnostic." 5. Can you quantify the development time impact? While you've maintained Android 16 support, how much additional development time per release cycle are you now allocating to reverse engineering that was previously unnecessary? The broader privacy community deserves transparency about whether this represents a sustainable long-term approach or if we should be preparing for reduced custom ROM viability on future Pixel generations.
View quoted note →

Replies (25)

That's incredibly doubtful because Samsung does not allow unlocking your bootloader anymore. It's not been possible on Snapdragon devices for a long time and now they've moved it to their other devices as well.
💯 Pixel is best in class for security—and GrapheneOS has been clear about that for years. IMO it's going to be hard to compete with Google money, experience, and resources while keeping the cost down to anything that resembles affordable for the average consumer. I guess we'll see.
@GrapheneOS Since it seems unsure if GOS will support Pixel 11... for those considering the purchase of a new Pixel 9 or 10 specifically to run #GrapheneOS, what's the guaranteed support timeline? People need to know if they're buying a 7-year device or a 2-3 year device before they invest.
They certainly seem to expect them to be, yes. "GrapheneOS also hinted that the mysterious partner's devices will be 'priced similarly to Pixels' and available globally as part of the brand's standard lineup." The question still remains: how will they compare build-wise and security-wise with the phones they have said were the only ones secure enough to meet their standards for years now? I asked them a couple years back if finding another OEM manufacturer was still on the roadmap, and they said they had no plans after the last deal fell through. Then Google put the squeeze on custom ROMs with Android 16, and it looks like they found one. I look forward to seeing what they release.
Hopefully that still holds true in the light of recent news. I expect that it will, but it will be good to get an official confirmation. Many people are uncertain as to whether they should buy a Pixel to run GOS now.
This reminds me a bit of the certified #QubesOS hardware route. By this I mean Qubes is running better for me on an older Thinkpad that a newer Qubes certified Starbook.