GrapheneOS

Cybersecurity

GrapheneOS is a privacy and security-focused mobile operating system with Android app compatibility. Developed as a non-profit open source project, it aims to provide substantial improvements to sandboxing, exploit mitigations, and the permission model, enhancing both OS and app security without compromising user experience. Founded in 2014 and formerly known as CopperheadOS, GrapheneOS strives to mitigate whole classes of vulnerabilities and fortify security boundaries within the OS and its applications.

• Enhanced Sandboxing: Fortifies app sandbox and other security boundaries.
• Exploit Mitigations: Deploys technologies to make exploiting common vulnerabilities more difficult.
• Permission Model: Adds toggles for features like Network and Sensors permissions, and restrictions when the device is locked.
• User Experience: Designed to avoid impacting user experience with always-enabled privacy and security features.
• Vanadium Browser: A hardened variant of the Chromium browser and WebView.
• Minimal PDF Viewer: Security-focused PDF viewer.
• Auditor App: Hardware-based app providing local and remote verification of devices.
• Modern Camera App: Privacy and security-focused camera app with QR and barcode scanning.
• Seedvault Backup: Encrypted backup solution initially developed for GrapheneOS.
• Sandboxed Google Play: Allows installation of Google Play services as fully sandboxed apps without special privileges.

GrapheneOS also contributes to the Android Open Source Project (AOSP), Linux, and other projects to improve privacy and security for billions of users. It will never include Google Play services or another implementation of Google services like microG, but users can install them as fully sandboxed apps via the sandboxed Google Play compatibility layer.