A Pixel phone running the GrapheneOS operating system

GrapheneOS is an open-source operating system based on Android (AOSP), developed by a non-profit project with a focus on security and privacy. It ships without Google services, hardens app isolation, grants network and sensor access as separate permissions, and receives security updates as fast as stock Android does. Ordinary Android apps run on it.

Only on Google Pixel. GrapheneOS supports only devices that allow installing a different system and locking the bootloader again with verified boot intact, and only Google Pixel phones meet that requirement. The full list of supported models, the models GemiGuard recommends are in our article on which phones run GrapheneOS.

GrapheneOS is the continuation of the original CopperheadOS: the same development team renamed the project in 2019, after the split from its former sponsor in 2018. The CopperheadOS sold today is a separate closed-source product that reuses the old name and is not associated with the GrapheneOS project.

Out of the box a Pixel runs Google’s Android with all of Google’s services inside. We replace it with GrapheneOS: install the OS, lock the bootloader, harden the installation, and verify the installation.

Usually. Our standard configuration includes Google Play installed as a sandboxed compatibility layer (Sandboxed Google Play): Google’s services run as ordinary apps with no system privileges and only the permissions granted them. Common messenger apps work flawlessly, navigation and e-mail work as usual. Privat24, monobank, MyRaif, Oschad, Sense and KredoBank work; Reserv+ works even without Google services; Diia works when installed from the Play Store under a separate Google account with exploit protection relaxed for it. Paying by phone through Google Pay is unavailable on GrapheneOS. The conditions and the dated reports are in the knowledge base article “Banking apps, Diia and Reserv+ on GrapheneOS”.

Google guarantees seven years of updates for every model from the Pixel 8 onward, and GrapheneOS supports the device for that whole period. The date each model is updated until is on its page.

By the GrapheneOS project’s own procedure: at boot, your Pixel shows the verified boot key hash, which you can verify against the one hash published by GrapheneOS (verification instructions included with every GemiGuard Pixel).

Choose a model and message us on Telegram, Signal, WhatsApp or Messenger — we will confirm the price, the lead time and the delivery. Devices are prepared to order: 24–48 hours to install and verify, and then we send it to you.

In crypto, by card, Apple Pay or Google Pay through a WayForPay payment link or QR code, by IBAN transfer to our sole-proprietor account, by card transfer, or in cash at our office in Odesa. No VAT.

A new phone with GrapheneOS installed and hardened by GemiGuard’s experts, the bootloader locked and Verified Boot active, in its original packaging, together with the verification instructions and a customized operation handbook.

Yes. Tell us how you will use it and we configure it to that brief: sandboxed Google Play where you need it, attestation, profiles and permissions. After the purchase we stay in touch.

Everything is done on the phone itself: install apps from Google Play running in its sandbox, or download an APK from the developer’s site in the built-in Vanadium browser and open it.

Any Ukrainian operator, on a physical SIM or an eSIM, and any operator abroad.

A 12-month warranty serviced in Odesa, GrapheneOS security updates, and our support in the messenger after the purchase.

Yes. We ship throughout Europe and beyond regularly: tell us your country and city in Telegram and we propose the method and the time. Most often we hand the phone to the driver of a scheduled coach to your city. Our staff bring it to the bus station, agree it with the driver and give you his telephone number; you or a person you appoint meets the coach, and we follow the handover until the phone is in your hands. To Portugal, Spain, Germany, Poland, Greece, Moldova and other countries we also have our own verified channels. The cost depends on the country and the method and is usually small. From abroad you can pay by card, Apple Pay or Google Pay by link, by transfer to our sole-proprietor account, by Revolut or in crypto. The phone travels in its original packaging, or removed from the packaging and carefully handled to ease passage through customs.