So which on of these are better for my pixel 7a if we consider these:
i dont care about leaving the bootloader unlocked
i want customization to my os as long as this is possible
i hate google so i dont want any google things or google spyware (i dont use any google service)
i need push notifications for some apps (maybe microg or sandboxed google play services)
i dont use esim or google pay so idc about these
i need A LOT of privacy and security to my data to the point that i want to block trackers for any app i use
i wanna use google camera as it is in stock rom but i dont want google spy shit. if i use a firewall would be ok?
Note: i can sacrifice locking the bootloader and customization for my privacy/security/not having spyware on my phone
Thanks in advance!
Edit: i just saw that there is iodé (which sees app trackers and i found it interesting) plus CopperheadOS Edit 2: THANK YOU ALL A LOT, your answers are the best, imma go with grapheneos and donate them also cause their job is the best
also i found this matrix for oses that helped me: https://eylenburg.github.io/android_comparison.htm !!!
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 57 users / day
- 383 users / week
- 1.5K users / month
- 5.7K users / 6 months
- 1 subscriber
- 3.12K Posts
- 78.1K Comments
- Modlog
For those that are looking to install GrapheneOS and want to ensure that their banking apps work as intended, here is a curated list of supported apps per country:
https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/
do you mean that these apps work on graphene os with or without the sandboxed google play?
Note that anyone can contribute to the list, just open an issue un the repo.
absolute hero thanks
GrapheneOS for modern Pixels DivestOS for any other phone
I still got a Pixel 5 with Graphene OS. Its 3 Years Old. Is it bad because its not a new phone?
GrapheneOS only publishes updates for devices with active security updates. Your device is EOL and therefore won’t receive any further mainline updates. It still will receive extended support from the Android 14 legacy branch with whatever security patches arrive in upstream AOSP, but unlikely to see device-specific patches nor firmware patches. Your device isn’t getting the same care and attention that active devices are receiving nor will it receive any future versions of Android through GrapheneOS.
It’s not bad, but it has less of the newer security features.
Also the longer a device exists, the more known exploits will be found.
Like a good lock, phones will never keep someone out forever, they will just delay (for years)
CopperheadOS is anti-libre software, extremely dangerous. We do not control it. It fails to include a libre software licence text file, like GPL. 🚩
GrapheneOS
This is my second iteration of CalyxOS, I used to rock a Pixel 4a and now I’m on a Fairphone 5, and I love it. It’s rock solid and never had a compatibility issue, although I heard that some banking apps might misbehave with microg, but not in my experience.
Graphene has pretty much the same approach but instead of supporting microg, has decided to take the route of sandboxing Google Services, which is a better route for compatibility at the expense of letting some of your data leak through once in a while.
/e/OS is a wonderful project on paper, but in my experience it was the one with more issues and bugs: they try to support as many devices and services as possible, providing a full environment that’s easy to setup for any user, but having to deal with so may things makes them a little hit or miss sometimes. Nonetheless I still believe they’re a great project that brings privacy to the less techy people with a (mostly) working ecosystem.
LineageOS isn’t focused on privacy but in extending the life cycle of devices after they’ve been discontinued, so if your concern is to be private I’d go with something else.
Don’t underestimate the bootloader locking feature: once your whole life is connected to one device, you don’t want a guy with a USB cable be able to access it in case of loss/theft. DON’T ASK ME HOW I KNOW IT.
May I please ask whether an unlocked bootloader is still bad for privacy and the risk of data loss/theft, if the phone is enrypted?
My understanding is that while being able to mess with the phone (e.g. including installing a new OS) in the presence of an unlocked bootloader, a properly encrypted phone at least protects the data on it.
Did I get that wrong?
basically, i underestimate it cause in my country the thieves or anyone don’t even know what is the bootloader lol
they are so uneducated cause our educational system is very old
And what about the person the thieves sells it to?
Yeah, but usually thieves sell the stolen phones to people that are slightly smarter and better organized
The state knows
There’s this article in a German IT sec blog which compares the more well-known privacy focused ROMs. If you have any way to translate it, you should check it out. It is a really nice addition to the Eylenburg comparison.
I was rocking Ressurection Remix and Xposed on my old Note 4 and customized the hell out of it. I’m on Graphene now and I don’t miss it a bit. Maybe a little.
Graphene can be installed on your phone via a web browser on a PC on laptop. You should install it and try it out, it’s very easy.
sorry but that’s misleading. it only works with chrome (and honestly better keep it that way). do we really expect in the privacy community that people use chrome?
I’ve personally tried Lineage, CalyxOS and Graphene. I’m currently on Graphene because it has the most app compatability and at least has higher security claims than Calyx which is more FOSS/privacy focused with microg vs graphenes sandboxed Google play.
What really got me to switch was once banking apps started failing to work due to microg compatibility. That may or may not have been resolved by now.
If Privacy and avoiding sending any data to Google is your priority I would do Calyx since you can get push notifications through microg without signing into Google and you can get apps anonymously through the aurora store.
However if you want a better user experience I would suggest GrapheneOS with Sanboxed Google Play. It’s very solid and I haven’t had any issues getting any apps to work thus far.
I use 4 different European banking apps without issues on CalyxOS.
do you have an alternative to Google wallet/other contactless apps not working on grapheneos for some dumb safetynet reason?
I do not at least here in the US where I’m located only Google pay and Apple pay are supported. I have heard some Europeans mention their banking apps natively support their own contactless payment when I’m pretty jealous of
I haven’t tried it myself, but you could get a Garmin watch and add your cards there. I believe you don’t need the phone connected afterwards to make payments.
I use Graphene. I like the Auditor app and the ability to verify that the ROM is unaltered because you can never trust an orphan kernel like all mobile devices. If I ever give up possession of my device, I can verify if it was altered. I also have a way to wipe the device on locked login with no indication that the ROM is being wiped as provided by Graphene.
https://eylenburg.github.io/android_comparison.htm
Unfortunately pixel phones are too expensive for a phone. I went with a Galaxy A34 which is good, but no graphene os for me
not just too expensive, but designed to be hard to repair too. just look up the ifixit disassembly guide, it’s horrible
Pixel 8a was <400€ on black friday. I know not everyone can afford this, but even 5 years ago that wouldn’t have been that much for a phone
Paid $150 for a Pixel 5. Pixel 7 is $200.
I don’t waste money on new phones, or new cars.
Bought Pixel 7 a new for 335 EUR. Refurbished is another option.
Interesting, I paid the same for my phone. But I will keep it five years so it will be a less cheap pixel then
GrapheneOS supports the 7 a until May 2028 with extended support 5 years https://grapheneos.org/faq#device-lifetime
If you find any relevant information, please use it to improve https://www.privacyguides.org/en/android/distributions/
Only consider CalyxOS and GrapheneOS. Ideologues will push you exclusively towards GrapheneOS but it’s not th be-all solution for all people that they think it is. My current and previous phone are GrapheneOS. It’s fine. It does what I want. I don’t find it amazing only because it’s a phone, not a new discovery. I use GrapheneOS with F-Droid with all anti-features disabled in F-Droid settings and I have all the apps I need.
Lineage will likely wirk with random phones, that dosn’t mean it’s quality. I say, if a phone OS works on LG, Samaung, Nokia, and a Chinese company phone, I don’t trust the stability of the OS.
I see the name e/OS around, I don’t hear it ever mentioned in public discussions, I think it’s for Fairphone or one of those gimmick name phones.
I’ve never heard of DivestOS before you mentioning it.
that’s just plain bullshit with at most zero backing knowledge. supporting various brands really won’t make the software that complicated. the software you install won’t need to include compatibility patches of all the supported brands and models, it’s routine that system images are customized for the phone, with patches specifically for that phone.
I mean yeah LOS is not the best in quality, but the remaining part does not make sense
Why don’t you trust the stability of the OS if it works with LG, Samsung, Nokia, and a Chinese company phone?
GP:s comment made me curious as well. Usually, if multiple hardware vendors are supported there are separate branches with different maintainers. It doesn’t necessarily mean that the main codebase is bloated as a result.
There is no reason for considering Calyx at all. Graphene and Divest are better in terms of security and privacy.
If one want’s easy and convenient privacy, /e/ might be a valide option. No need for Calyx, Lineage or Iode
DivestOS has my attention as a graphene user. Not to switch, unless I ever get fed up with the pixel.
Divested is behind the Mull and Mulch browsers, for what it’s worth. I never looked deeper than using Mull, but apparently Divested is one person.
DivestOS sounds interesting but I am wary of any “mission-critical” software project (such as the firmware for my primary phone) that relies on a single person, for multiple reasons. Burnout and potential for social engineering by malicious actors being two of them.
What’s wrong with GrapheneOS?
Nothing, the grand parents said “it’s fine”