GrapheneOS · Titan M2 · AES-256
The technology behind every Snowden Phone
Whether you choose the Pixel 10, 10a, 10 Pro, 10 Pro XL or 9a: the security is identical on every phone. Google hardware, preloaded with GrapheneOS, with system-wide privacy toggles and hardware encryption that is active from the first unlock.
Choosing the phone
Why a Google Pixel?
The Pixel range is no accidental choice. They are the only phones on which GrapheneOS can run in full, and that comes down entirely to the hardware underneath.
- The only phones with official GrapheneOS supportGrapheneOS supports Pixels only. This combination of hardware and OS doesn't exist anywhere else.
- A relockable bootloaderYou can unlock the bootloader, flash your own OS and lock it again, while keeping verified boot.
- Titan M2 hardware attestationA separate security chip, apart from the main processor, proves that the operating system has not been tampered with.
- 7 years of OS and security updatesPixels get long-term support, and GrapheneOS usually follows the patches within 24 to 48 hours.
What you don't see protects you
The security layers work in the background, on every model, from the very first second.
Privacy toggles for camera, mic & sensors
One tap in Quick Settings blocks app access to the camera, microphone or sensors at OS level. No app can reach them then, not even the apps you trust.
Titan M2 security chip
A separate security chip guards your encryption keys, apart from the operating system. It limits the number of unlock attempts and makes you wait longer and longer between them, even with physical access to the phone.
AES-256 encryption
Everything on your phone is encrypted by default (AES-256): your files, file names and other data. GrapheneOS encrypts per file and also encrypts the metadata (source: GrapheneOS). There is nothing to set up or migrate; encryption is on from the start.
Permission manager
Location, microphone, camera and network: set per app, revocable per session. Nothing by default, unless you ask for it yourself.
Isolated sandbox
Google services run (if you want to use them) in a fully isolated environment, without system privileges.
Hardened kernel
GrapheneOS replaces the Android kernel with patched heap allocators, control-flow integrity and memory randomisation.
Bluetooth & NFC off by default
No invisible connections. You switch on wireless protocols only when you actually need them.
Duress PIN
A second PIN wipes the phone immediately when it is entered. For moments when refusing is not an option.
Specifications
Hardware without compromise
Every phone was chosen because GrapheneOS officially supports it and it has the Titan M2 security chip on board. The specifications below are for the Pixel 9a, our best-selling model. The other models differ only in size, chip and battery.
- Display6.3″ OLED · 120 Hz
- ProcessorGoogle Tensor G4
- Memory8 GB RAM
- Storage128 GB
- SecurityTitan M2 · AES-256
- Camera48 MP main · 13 MP ultra-wide
- Battery5,100 mAh
- Charging23 W wired · Qi wireless
- WaterIP68
- OSGrapheneOS (flashed)
- Updates7 years · until March 2033
Five phones, one privacy standard
The same privacy on every model. You only choose the size, the chip and the budget.
| Feature | Pixel 10 | Pixel 10a | Pixel 10 Pro | Pixel 10 Pro XL | Pixel 9a |
|---|---|---|---|---|---|
| Display | 6.3″ OLED · 120 Hz | 6.3″ OLED · 120 Hz | 6.3″ LTPO OLED · 120 Hz | 6.8″ LTPO OLED · 120 Hz | 6.3″ OLED · 120 Hz |
| Chip | Tensor G5 | Tensor G4 | Tensor G5 | Tensor G5 | Tensor G4 |
| RAM | 12 GB | 8 GB | 16 GB | 16 GB | 8 GB |
| GrapheneOS | Yes | Yes | Yes | Yes | Yes |
| Security | Titan M2 · AES-256 | Titan M2 · AES-256 | Titan M2 · AES-256 | Titan M2 · AES-256 | Titan M2 · AES-256 |
| Updates | 7 years · until August 2032 | 7 years · until March 2033 | 7 years · until August 2032 | 7 years · until August 2032 | 7 years · until April 2032 |
| Price (incl. VAT, free shipping to NL, BE and DE) | €979 | from €819 | €1,179 | €1,399 | from €659 · limited availability |
| Order | Order | Order | Order | Order | Order |
Why a Pixel and not another brand?
Google Pixels are the only commercially available phones that GrapheneOS officially supports. Their bootloader can be locked again with a custom operating system installed, and they have the Titan M2 security chip for hardware attestation.
How does GrapheneOS compare to "regular" Android?
GrapheneOS is a hardened alternative, built on the same Android base. More extensive sandboxing, no Google services at system level, a hardened kernel and real per-app network and sensor permissions. It looks like a cleaner Android.
Will I still get updates?
Yes. GrapheneOS usually follows Google's security patches within 24 to 48 hours and adds extra mitigations. Updates are free, until the end date Google gives for your model (for our models, between April 2032 and March 2033).
Can I move my current data over?
Photos, contacts and calendar move over easily by exporting them. You install apps through F-Droid and, if you want, through sandboxed Google Play. We help you with the first installation and the move.
Is this legal?
Completely. GrapheneOS is open source and it is flashed using the bootloader procedure that Google officially supports. No grey area.
Your phone is ready
Fully configured, ready for your first unlock. Set up and shipped in 3 to 5 working days; delivery time depends on your country. Free insured shipping to the Netherlands, Belgium and Germany; €34.95 to Austria, Czechia, Sweden and Finland.