Knowledge Base

Pixel with GrapheneOS

Which Pixel to choose, what GrapheneOS changes, and how to use the phone every day.

• Which phones run GrapheneOS, and why only Pixel

  GrapheneOS runs on Google Pixel only: every model from the Pixel 6 to the Pixel 10a is supported, the Pixel 8 and later are recommended, and the project’s hardware requirements, from verified boot to a secure element and hardware memory tagging, rule out every other brand. With Google’s support-end date for each model.

  Choose Reference Published 27 September 2026

• Which operating system a Google Pixel runs, and what GrapheneOS replaces

  Every Google Pixel ships with Android: Google’s own build of it. GrapheneOS replaces that build with its own, also based on the Android Open Source Project, on the same hardware. It removes Google’s privileged services from the system.

  Choose Explainer Published 27 September 2026

• GuardDo Pixel: how to verify a secure phone

  In September 2026 every check we could run on GuardDo Pixel gave the same result: its security claims come with no evidence a customer can verify. A claim that cannot be checked has to be taken on trust. Owners of EncroChat, Sky ECC and ANOM phones took the same kind of promise on trust.

  Choose Guide Published 27 September 2026

• The IMEI on a Google Pixel: where it is stored and what changing it takes

  Where the IMEI physically lives on a Tensor Pixel, the three layers that hold it in place, why it is an integrity check inside signed modem firmware rather than a hardware fuse, what IMEI spoofing modules actually change, and why none of it buys anonymity on a cellular network.

  Security and privacy Explainer First published February 2026

• VPN on a GrapheneOS Pixel: why an app on the handset does not cover all traffic

  Enforcement in Android applies to application identifiers, and system identifiers are exempt from it at the level of the networking subsystem. Which categories Google confirms are outside the tunnel, why tethered traffic never enters it, where DNS leaks come from, and the one configuration — cellular off, Wi-Fi only, tunnel on the router — that leaks nothing.

  Security and privacy Explainer First published March 2026

• Banking apps, Diia and Reserv+ on GrapheneOS: what works on a Pixel in Ukraine

  Privat24, monobank, Oschad, Sense SuperApp, MyRaif and KredoBank work with sandboxed Google Play. Reserv+ works even without Google services. Diia works under two conditions. Binance works. The NFC chip works, while tap-to-pay through Google Wallet and Google Pay is unavailable, because Google permits it only on operating systems it has certified itself.

  Everyday use Reference Published 24 September 2026

All articles in this section (6)

GL.iNet routers and VPN

Setting up GL.iNet routers, VPN protocols, and privacy on the mobile network.

• High-security VPN routers for use with Starlink terminals

  Comparing the GL.iNet Slate AX and Flint 3 for working with Starlink. Technical specifications, WAN integration, the advantages of OpenWrt over the standard Starlink router. Choosing the right model for mobile and fixed scenarios.

  Choose Explainer First published December 2024

• WireGuard and OpenVPN — a VPN protocol comparison

  How OpenVPN and WireGuard work: the two VPN protocols GL.iNet routers support. OpenVPN is the time-tested standard. WireGuard is a modern approach built on ChaCha20. Compatibility with ProtonVPN, NordVPN, Mullvad. Configuration via the web panel or the app.

  Choose Explainer First published November 2024

• Mudi V2 — a quick setup guide (GL.iNet GL-E750V2)

  Seven steps from unboxing to a working VPN router: charging, inserting the SIM, powering on, connecting to Wi-Fi, signing in to the admin panel, automatic configuration. Notes on Kyivstar, Lifecell and Vodafone.

  Set up Guide First published February 2025

• Tailscale on GL.iNet routers — the complete guide

  What Tailscale is and how a WireGuard-based mesh VPN works. A comparison with VPN, Tor and Cloudflare WARP, use cases, setup, and a table of GL.iNet routers that support Tailscale — with a link to every model.

  Set up Guide Published 4 August 2026

• IMEI obfuscation on the GL.iNet Mudi GL-E750V2 VPN router

  A detailed breakdown: what IMEI is, how it is tied to the modem chip, when it is transmitted to the cellular network, and why IMEI obfuscation is an important counter-surveillance strategy. Benefits, risks and key considerations.

  Security and privacy Explainer First published December 2024

• GPS and location telemetry in the GL.iNet Mudi GL-E750V2 and Puli GL-XE300

  The Mudi V2 and Puli cannot transmit the user’s GPS coordinates. The hardware configuration, the GPS status in GL.iNet firmware, and how to verify it yourself via AT commands. Context on cell-tower triangulation.

  Security and privacy Explainer First published December 2024

• Rivian in Ukraine — OTA updates via a US-IP VPN

  Rivian does not send OTA updates outside the US and Canada, and the built-in eSIM is dead outside North America. A GL.iNet Puli holding a permanent US-exit tunnel restores updates, the mobile app and remote diagnostics. It does not restore maps or live traffic while driving. The package: a Puli, a prepaid Kyivstar SIM and a US IP address.

  Everyday use Guide Published 12 August 2026

All articles in this section (7)

Other articles

• How to make your woman happy: a scientific 24-step guide

  A satirical guide from the International Institute of Domestic Harmony: why a vacuum cleaner is not a gift, how to covertly learn her size, why you should buy in sets, and where stable Wi-Fi comes in. In partnership with TSODS.

  Published 10 June 2026