Hey dear smart community, I don’t use any Google products or services over 3 years now. Always had android and used fdroid. No apps for banking ( cash lover). Osmand for maps. Extremely happy to find this app for socializing with like minded people. Now I feel time has come to upgrade privacy and security and custom ROM phone. I am considering if getting pixel8 and installing GOS. The only issue is,that I have 0 (ZERO) knowledge about how to do it. I have looked many videos and read on websites how to do it,but I am so afraid that I will not be able. I don’t know if that is right to ask for assistance from people here,but I don’t feel like I am capable of doing so. Plus,I have samsung which I would like to prepare and give my friend to use. Unfortunately, that person in immersed to Google world ( internet banking apps ect). Do you think LineageOS could give more protection and same smooth usage of phone ? I will appreciate any suggestions how to custom ROM phones. Best wishes to all.
GrapheneOS is super easy to install if you do the browser method. The explanation kn their site may look longish but it’s always longer to explain something than to do it. Feel free to DM me of you get confused, but you won’t.
Most Samsung won’t allow you to unlock the bootloader so the Lineage angle is probably moot. If it is one of the few supported Samsungs, it does offer more privacy by not coming with Play Services. Assuming your friend doesn’t just sign into Google anyway, or is willing to make the transition to apps that don’t need Play Services for notifications. Also Lineage does not allow you to relock the bootloader, which is a substantial security security risk of someone gets ahold of your phone, which isn’t unrealistic in today’s world with rising fascism. So really, if he is not going to commit, it may be better to just leave stock Android on there.
GrapheneOS is both the pro enthusiast choice and the “set it up for your friend” choice because they can have sandboxed Play Services, sign into Google, and use the Play Store, and they’re still significantly better off privacy AND security wise than even iPhone, and virtually no different for someone used to Android. Especially if they use a dedicated google Account just for the phone. Of course, it may not be relevant to you in this instance if you’re giving him a Samsung.
I was apprehensive about buying a used Pixel to install GrapheneOS on, so I put it off for a year or two. When I finally did it, it was so easy I wished I had done it sooner. It’s a great OS and you’ll probably be surprised how easy it is to set up. Things have really changed since the old days of finding half-baked custom Android images on dodgy file shares through forum sites.
Just make sure your Pixel 8 is unlocked. The rest is very simple.
Installing Graphene OS on a Pixel device is basically idiot proof and done in less than 20 minutes. All you need is a chromium based browser (Chrome, Edge, Brave, Ungoogled Chromium, etc.) and a USB cable. That’s it.
No voodoo required, the tutorial is easier than following along a recepie for chicken pot pie. If you can read you can install Graphene OS, that’s literally the sole prerequisite.
not even windows?
ONE IMPORTANT THING!!!
Make sure you do it on a chromium browser. I did it on FF a few years ago and was confused as to why it was failing, but when I switched to Chromium it worked. Idk if they fixed that by now, it’s been two years. Not that it bricked my phone or anything, it just took more time.
But yeah the guide is awesome literally just read it.
There’s nothing to fix, Firefox simply does not support the webusb standard required for this yet, unfortunately: https://developer.mozilla.org/en-US/docs/Web/API/WebUSB_API
Of course google has already enabled support even though the spec is not final. So now the standard will have to follow Chrome’s implantation, because so many people already use it.
This is what people mean when they say google practically controls web standards.
Agree, but do yourselve a favor and:
- Use a good USB-C cable
- Before installing GOS, update your pixel to the latest stock android
Both are also written in the instructions but I’ve seen so many people skipping those and struggling with interrupted installation processes :)
Idiot here. Can confirm. Posted from my pixel 9a with GrapheneOS which is my only phone and daily driver.
I clicked the buttons and followed the tutorial. All I needed was my PC, the phone and a USB-C cable.
Setup was easier than the android I was used to with all the bloat on it.
Your testimony is inspiring. Thanks 😊
OMG, your answer is so cool ! I cook a lot, I know how to follow perfectly the recipes. That was such a good comparison. Thanks for your comment.
I’ve just recently installed GrapheneOS on a new Pixel 8 (as in, refurbished, but for me it was new). It worked quite well. I’ve used to use the CLI installer before, but after looking at the current recommendations on their website, I followed through with the web-based one.
One point of local struggle for me was when I needed to “Flash factory images”. It looked like it’s not going well, I didn’t understand (still don’t) how to read the instruction unambiguously on when I should stop waiting, ended up restarting my phone once needlessly. However, doing the same step again afterwards somehow made the flashing successfully, and the button for the next stage got enabled (“locking the bootloader”). In total, it was inconsequential.
Everything is working super-smooth since. I’ve did a hardware attestation procedure to make sure that my refurbished phone is fine, and it shows up as fine. I’m quite content with how it went. Considering how you describe your phone usage, you would benefit from GOS or another open firmware a lot. You can give it a try, it’s a good firmware! I wish there’d be projects that would be freedom-first, not privacy-first with the same quality level. I digress and it’s subjective at this point. Just give it a try!
FYI, firmware is technically the wrong term here (apologies for being pedantic), the correct term would be operating system, or custom operating system. A lot of the firmware, even after installing GrapheneOS, is closed source and managed by Google. There’s not much the project, or any project, can do about that, but their partnership with Motorola might help with the closed firmware problem.
Thanks for the correction, I appreciate it!
You’re right. I got confused because I remember I was “flashing firmware from GOS”. However, that is sadly non-free. (Not GrapheneOS’s fault, it’s always proprietary with how Google pushes Android to be.)
Partially related, I really want to give my PinePhone another try if/once google rolls out the nasty update of requiring developer’s identity documents and making it harder to use F-Droid.
If you’re using GrapheneOS, it will continue to be as easy as it’s always been to use F-Droid.
That much is true, but the fact that google is throwing obstacles in F-Droid’s way is undeniable. So while I’d be able to circumvent the bigger changes for a while, around me things will get a bit more deserted with “newbies” having a harder time to join than before.
So… it’s as good time as any to give the PinePhone another go isn’t it? ;-)
Personally, as much as I love the freedom of phones running desktop Linux on mobile (well most use Ubuntu as a starting point, so maybe “freedom”), I think freedom can only go so far with limited security.
Unfortunately so-called “Linux phones” (which is a horrible name imo, android is based on the Linux kernel, so really they should be called systemd phones) have very lackluster security on the device itself (app sandboxing is a joke on desktop Linux, which applies to mobile (non android) Linux too), not to mention physical security (“linux phones” are built with the goal of running Linux, not protecting their users from the combined hacking power of the US, Israel, China and other nation state actors). With the new terminal emulator allowing people to run desktop Linux apps on android, I really only see pinephone and other such devices as novelty phones, rather than a real daily driver smartphone. I don’t really understand the obsession with putting desktop Linux on the phone anyways.
I’m personally hoping for the GrapheneOS team to grow enough to build their own microkernel instead of relying on the relatively insecure monolithic Linux kernel. That said, I’m definitely a minority, so as long as big tech is losing its monopoly on the smartphone market, more power to you I suppose.
Did you check if the Samsung device is officially supported by LineageOS?
https://wiki.lineageos.org/devices/
Also, the accurate term is ”Android distribution” the term “Custom ROM” is outdated and technically inaccurate.
Regarding GrapheneOS I would advice you to read the information on the webpage of the installer on the official GOS website, it’s very easy and tells you everything you need to know.
the term “Custom ROM” is outdated and technically inaccurate
Why do you say that?
ROM means read only memory, you are not modifying the phone’s read only memory. The term originated back operating systems and games were intended to be written once to a chip at the factory and never modified again.
I did check some time ago and there is possibility for Samsung I have .I will try this weekend with pixel phone. Thank you for advices you gave.
If you have a pixel, I’d highly recommend avoiding custom OSs other than GrapheneOS unless you cannot use GrapheneOS for whatever reason. That said, in most cases running stock with modified settings can preserve the base android security while giving you more privacy.
If you can, you mention having a Samsung, avoid using Samsung with a 10 foot pole. Their security is laughably bad for a major OEM, and once you begin customizing anything with the phone, you’ll encounter bug after bug after bug.
If you want a handful of reasons to avoid non GrapheneOS custom OSs, here are some of the biggest offenders (if you want more, you could ask in various GrapheneOS chatrooms (such as on matrix or discord) and they’ll be happy to give you more reasons (be warned, some people will be very blunt)):
Most other custom OSs use privileged MicroG, as opposed to sandboxed Google Play which is mostly unique to GrapheneOS, as well as their own privileged serviced to provide things like parental controls or deeper app customization.
They’re also very lacking in security, being no better than stock android when faced against Cellebrite or Graykey.
Their updates tend to take weeks, if not multiple months in some cases, while also not updating when new vulnerabilities are found unless it’s patched upstream.
Most don’t support locking the bootloader due to the way they support devices (this is part of the reason GrapheneOS is pixel exclusive) which means your phone is vulnerable to having parts of the boot process modified potentially maliciously to allow an attacker access to your data.
User privacy on custom OSs is often really theater, promising privacy because they’ve removed Google Play Services by replacing it with a less secure, more vulnerable, and less user friendly version called MicroG.
Finally the /e/OS devs, an operating system recommended to you by another reply, straight up said they’re intentionally not making their OS any more secure, because only pedophiles need to worry about their privacy (the video is in French, and I don’t have it saved, but I can find it if you want).
All said, if you just want to avoid Google but don’t care about any other Tom, Dick, and Harry accessing your private information, custom OSs are great. If you care about other people, especially other companies, not having access to your private data, and you’re already getting a new phone anyways, I strongly recommend buying a pixel and slapping GrapheneOS on it. Sideofburritos is a great source of information for GrapheneOS, he even made a video trying to brick GrapheneOS during the install process (spoiler: he couldn’t) in case you’re worried about damaging the pixel in the process.
Disclaimer: I’m not associated with the GrapheneOS project, I’m just a user who cares a lot about their digital security. If it sounds like GrapheneOS is too good to be true, I’d be happy to include some drawbacks of the OS. There really aren’t many, as every news outlet that reviews the OS can agree, but there are a few.
Also check /e/OS and iodéOS, they support some Samsung phones.
Both are based on LineageOS and they only support devices that LineageOS doesn’t support based on partnerships with the company of the phone.
basic rule for life (and messing with computer hardware / software) - it’s inevitable that you will have times that are challenging and difficult but if you work through the problems you’ll come out the other side with more experience under your belt.
You may have zero knowledge now but I can already tell that the desire to improve is there.
We all start somewhere.
