HomeVideos

Install GrapheneOS Before Your Phone Becomes the Checkpoint

Now Playing

Install GrapheneOS Before Your Phone Becomes the Checkpoint

Transcript

438 segments

0:00

So, in this video, I'm going to show you

0:01

what Graphene actually does, why people

0:03

are moving to it, and how to install it

0:05

on a Pixel phone before your phone

0:07

becomes the checkpoint. And there you

0:09

go, we've now got Graphene installed on

0:12

this phone. When you buy a new phone, do

0:14

you own it, or does the government own

0:16

it? Your phone, unfortunately, is

0:18

becoming the checkpoint. Notice what

0:20

this phone is displaying. We have age

0:22

verification on this phone. This phone

0:25

is registered in the UK, and I'm told

0:27

that I have to confirm that I'm 18-plus.

0:30

UK law requires you to confirm you are

0:33

an adult to change content restrictions.

0:36

I try and click that now, and it doesn't

0:39

work because I'm not connected to the

0:41

internet. So, I'll connect to the

0:42

internet, and I'll try that again. By

0:45

continuing, your ID or credit card may

0:47

be used to confirm that you are an

0:49

adult.

0:50

So, Apple are restricting what I can do

0:54

on the phone that I have purchased, and

0:56

they say it's the UK law. However, I

0:59

don't think they're being totally

1:00

honest. This is from Big Brother Watch.

1:03

Apple's new iPhone update is restricting

1:05

internet freedom in the UK. They talk

1:08

about multiple issues, including the

1:10

fact that this isn't required by UK law.

1:13

Now, think about this.

1:15

I have an iPhone that I've paid for, but

1:18

Apple are now restricting what I can do

1:21

on this phone. They are a US company.

1:24

I'm based in the UK. They are telling me

1:27

what I can and cannot do on my phone.

1:30

Despite what the update suggests, the

1:32

system is not required by UK law. Laws

1:35

like the Online Safety Act 2023 apply to

1:38

websites and online services, not to

1:40

entire phone operating systems. In a

1:43

similar way, other acts set standards

1:45

for protecting children online, but do

1:47

not mandate ID checks for all device

1:50

users. This is a voluntary decision by

1:53

Apple, not a legal obligation. So, this

1:55

is a phone that I purchased with my own

1:58

money, but Apple are going to restrict

2:00

what I can and cannot do on this phone.

2:03

Now, you might say, "Well, this doesn't

2:05

apply to me because I'm not based in the

2:06

UK. I don't care what the UK is doing."

2:09

But, this stuff is coming everywhere. In

2:11

California in the US, they want to

2:13

implement a law that all operating

2:15

systems have to verify your age. Now,

2:17

there's been huge pushback about this,

2:19

so Linux may be excluded, but we shall

2:22

see what happens there. We've got

2:24

Australia banning under 16s accessing

2:26

social media. The same thing is

2:28

happening in the UK. They are talking

2:30

about forcing social media companies to

2:32

promote certain official news sources,

2:36

such as the BBC, etc. This has been

2:38

rolled out in the states. It's affecting

2:40

many of us around the world. Now, love

2:42

what the Graphene team have said.

2:44

Graphene will remain usable by anyone

2:46

around the world without requiring

2:49

personal information, identification, or

2:51

an account. GraphenOS and our services

2:54

will remain available internationally.

2:57

If Graphene devices cannot be sold in a

2:59

region due to its regulations, so be it.

3:02

And I think that's the right stance

3:04

about this from a privacy point of view.

3:07

Do you really want to submit your iden-

3:09

-tification information and your facial

3:11

scans to some unknown third-party

3:14

website where your data can be leaked,

3:16

as has already happened with say Discord

3:18

and other websites? So, if you're

3:20

laughing because you don't have an

3:21

iPhone, laws are coming around the world

3:24

forcing age verification on operating

3:27

systems, iOS as well as Android. So, you

3:30

can be part of that world where you're

3:31

monitored, tracked, and age verified, or

3:34

you can have the freedom and privacy and

3:37

security of an operating system like

3:39

Graphene OS. What are you going to

3:41

choose to use today? I want to thank

3:43

DeleteMe for sponsoring this video.

3:54

You are the product and your data is

3:56

being sold. This is big business. It's

3:59

very sad to see that in today's world,

4:01

car companies are collecting and selling

4:03

your data. Websites are collecting your

4:05

data and selling it and this list just

4:07

goes on and on and on. Your data is

4:11

being collected on mass and sold. In the

4:14

good old days we used to say that if

4:15

it's free, you are the product.

4:17

Unfortunately, in today's world it looks

4:19

like you will buy something and they'll

4:22

still collect and sell your data. Now in

4:24

a perfect world, we wouldn't need

4:26

someone like DeleteMe to delete our

4:28

personal data or PII from the internet.

4:31

Unfortunately, that's not the world that

4:33

we live in. There are an estimated 5,000

4:36

data broker companies which operate

4:38

worldwide in what has become a 270

4:42

to 290 billion-dollar business in 2025

4:47

and some experts expect it to reach 473

4:50

billion by 2032.

4:53

It just seems crazy to me that data

4:54

brokers can legally collect your data

4:56

and sell it on. Your very personal

4:59

information such as your home address,

5:01

your phone number, details of your

5:03

relatives and way, way more. This can

5:05

lead to stuff like scams, phishing,

5:08

harassment and doxxing. I've experienced

5:11

this myself where people have used my

5:13

personal data to try and doxx me or to

5:16

try and scam me. This kind of stuff

5:18

happens all the time. Unfortunately. Now

5:21

you can manually go and remove your data

5:23

if you want to, but I just don't have

5:24

the time to do that continuously. That's

5:27

why I use DeleteMe. It's a hands-free

5:29

subscription service that removes your

5:31

personal information from hundreds of

5:33

data broker and people search websites.

5:36

Now DeleteMe doesn't promise to solve

5:38

all your privacy concerns, but by

5:40

removing this kind of exposed PII

5:42

information from the public internet,

5:44

you are making one of the most direct

5:46

concrete steps to reduce your attack

5:49

surface.

5:50

That's the core value of what DeleteMe

5:52

provides. And it's not like it's just,

5:54

"Trust me, bro." They verify that your

5:56

information is actually on a data broker

5:58

site before they submit removals, and

6:01

you get reporting that shows what was

6:02

found and what was removed. Here's an

6:04

example of the kind of report that

6:06

you'll receive from DeleteMe. Now, to

6:08

get 20% off DeleteMe's consumer plans,

6:11

you can go to joindeleteme.com/bumble

6:15

and use promo code bumble at checkout or

6:17

use a QR code on screen. That's

6:19

joindeleteme.com/bumble,

6:22

code bumble.

6:23

Age verification may sound harmless, but

6:25

once your phone has to prove who you are

6:28

before you can use an app or visit a

6:30

website or send a message, the question

6:32

changes. It's no longer just, "Are we

6:34

protecting children?" It becomes, "Who

6:37

makes sure the people in power don't

6:40

abuse this power that they have?" And

6:42

yes, Spider-Man was right.

6:44

>> With great powers comes great

6:46

responsibility.

6:48

>> But governments are not superheroes.

6:50

Power needs limits. Power needs

6:53

oversight, and power needs technology

6:55

that does not automatically trust the

6:57

people asking for more of it. Now, just

6:59

to be clear, this is not about breaking

7:01

the law. It's not about trying to hide.

7:04

This is about owning the device that you

7:06

have purchased and making decisions

7:08

about what you can and can't view online

7:11

yourself. In the UK, they already

7:13

restrict websites that you are allowed

7:16

to visit. So, as an example, these

7:18

websites are sanctioned in the UK. ISPs

7:21

are currently required to take

7:23

reasonable steps to prevent people in

7:25

the UK from visiting these websites. As

7:27

well as these websites, there's a whole

7:30

range of websites that are blocked in

7:32

the United Kingdom. The government can

7:35

decide which websites you're allowed to

7:37

visit and which websites you're not

7:39

allowed to visit. Graphene doesn't claim

7:41

to make you totally invisible, but it

7:43

gives you a phone that trusts Google

7:46

much, much less than stock Android. It

7:49

shares uh less information by default

7:51

and puts more control back in your

7:53

hands. So, in this video, I'm going to

7:54

show you what Graphene actually does,

7:56

why people are moving to it, and how to

7:58

install it on a Pixel phone before your

8:00

phone becomes the checkpoint that stops

8:03

you from accessing certain websites on

8:06

the internet where governments could

8:07

decide what you can and can't read

8:10

online which websites you're allowed to

8:12

visit. So, what do you need to get

8:13

started? You need a computer running a

8:15

supported operating system. That could

8:17

be Windows, macOS, or various

8:19

distributions of Linux. In this example,

8:21

I'm going to use a Windows computer to

8:22

install GrapheneOS. A lot of people

8:24

shout at me when I use Windows. The only

8:26

reason for doing that is because a lot

8:28

of people use Windows rather than macOS

8:31

or Linux, but those operating systems

8:33

are once again also supported. You need

8:35

a modern web browser that supports

8:36

WebUSB. That would be Chrome, Edge,

8:38

Brave, or and others. A good quality USB

8:42

to USB-C cable. In our tests, dodgy

8:45

cables will result in things not

8:47

working, so make sure that you use a

8:49

good cable. And it takes about 30 to 45

8:51

minutes to install the operating system.

8:54

Currently, GrapheneOS only runs on Pixel

8:57

phones because Pixels are the phones

8:59

that meet its hardware security

9:01

requirements. In other words, it has an

9:02

unlockable bootloader, full verified

9:04

boot, and long-term security updates.

9:07

Always make sure that you go to

9:08

grapheneos.org

9:10

/faq for the live list before buying,

9:12

but here's a list at the time of this

9:14

recording. Now, if you're not sure which

9:16

one to buy, the best phone to get is

9:19

Pixel 10 Pro. It has the newest hardware

9:21

and the longest update window. Best

9:24

value is the Pixel 8 series. The best

9:27

cost-to-support ratio for most people.

9:29

And a budget phone would be a Pixel 7a

9:31

or 8a. This is cheaper, well supported,

9:35

and you can get great second-hand

9:36

versions of this phone. Now, the big tip

9:38

here is to buy the longest supported

9:40

phone that you can afford. GrapheneOS

9:43

support ends when Google ends firmware

9:45

support for that device. So, look at

9:46

your budget and try and get the phone

9:49

that will be supported the longest.

9:50

Don't just necessarily get the cheapest

9:52

phone. So, I'll go to grapheneos.org

9:56

and I'm going to click on install

9:57

GrapheneOS. We're told here that there

9:59

are two officially supported

10:01

installation methods. You can use the

10:03

web USB based installer, which is

10:06

recommended for most users, or the

10:07

command line installation guide, which

10:10

is aimed at more technical users. So,

10:12

I'm going to select the USB based

10:14

installer. Prerequisites are shown here,

10:16

including the operating systems that are

10:17

supported. I'm using Windows 11, but

10:20

again, you could use macOS or you could

10:22

use various versions of Linux. Here are

10:25

the officially supported browsers. So,

10:27

I'm using Brave in my example, and I've

10:30

disabled shields, as they say here,

10:34

we need to make sure that the shields

10:37

are disabled.

10:38

Now, scrolling down, we need to enable

10:40

OEM unlocking. So, what we're going to

10:43

do is go to settings. I'm going to

10:45

scroll all the way down, go to about my

10:48

phone, scroll all the way down, and now

10:51

on the build number, we need to press

10:53

that repeatedly until developer mode is

10:58

enabled. So, I'll keep pressing that,

11:00

and you can see we are now a developer.

11:03

So, we then need to go to settings,

11:05

system, developer, and toggle the OEM

11:08

unlocking setting. So, I'm going to go

11:10

back. System is just above about phone

11:13

in my example.

11:15

I'm going to go down to developer

11:18

options,

11:20

and we should see OEM unlocking, which

11:23

we do, so I'll select that option and

11:25

allow the bootloader to be unlocked. We

11:27

have now enabled that option. So, the

11:29

next step is to boot into the bootloader

11:32

interface. So, the easiest approach is

11:34

to reboot the device and begin holding

11:36

the volume down button until it boots up

11:38

into the bootloader interface. Okay, so

11:41

now we need to reboot the phone, but

11:42

while I'm doing that, I'm going to press

11:44

the power button down and then press

11:46

restart. So, I'm going to keep holding

11:48

the volume down button. We are now in

11:49

the bootloader interface. Now, per the

11:52

documentation, they say that that's the

11:53

easiest way to do this. Otherwise, you

11:55

can turn off the device and then turn it

11:57

on while holding the volume down button.

12:00

We told that the step is not complete

12:01

until we see the red triangle and we see

12:04

the words fastboot. So, now we need to

12:07

connect the device to a computer. So,

12:09

I'll connect that to my Windows

12:11

computer. That's now connected and we

12:13

can press the button here to unlock the

12:16

bootloader. So, we can see that the

12:18

Pixel 10A has been discovered. So, I'm

12:21

going to click connect and there you go.

12:24

At the moment, it says do not unlock the

12:26

bootloader. We want to change that to

12:27

unlock the bootloader. So, we're going

12:29

to select that option and then accept

12:32

it.

12:33

So, as you can see here, the bootloader

12:35

has been unlocked. We now need to

12:37

download the Graphene OS factory image.

12:40

So, I'm going to click download release

12:41

to start the download. You can see the

12:44

software is now downloading. This

12:46

process, once again, is really simple

12:48

because I'm basically just connecting

12:51

the device to my computer, doing a few

12:53

changes to it, and then Graphene is

12:56

doing all the work to download the

12:58

correct release of software for my

13:00

phone. Okay, so the download has

13:02

completed, so we can now flash the

13:04

image. This will replace the existing OS

13:07

installation and wipe all existing data.

13:09

So, make sure that that's what you want

13:11

to do. I'm happy to do that, so I'm

13:13

going to click flash release to flash

13:15

the phone. Now, what's great about this

13:17

is, again, Graphene have made this

13:19

really easy. We just need to wait for

13:22

the flashing process to complete. It

13:24

will automatically handle flashing the

13:26

firmware, rebooting into bootloader

13:29

interface, and flashing the OS. So, as

13:31

you can see here, we get an update of

13:32

what's happening, but we are told to

13:35

avoid interacting with the device until

13:38

the flashing script is finished. Then,

13:40

we can proceed to locking the bootloader

13:42

before using the device

13:44

as locking wipes the data again. Okay,

13:46

so I'll speed up the video at this point

13:48

because all we're going to see is the

13:50

writing of the software.

13:56

Okay, so the image is now being flashed

13:58

to the device. Now, we need to lock the

14:00

bootloader.

14:01

This is important as it enables full

14:04

verified boot. Verified boot will detect

14:06

modifications to any of the OS

14:08

partitions, and it will prevent reading

14:10

any modified or corrupted data. Okay, so

14:13

I'll click lock bootloader. I'm going to

14:15

press the volume button to select lock

14:18

the bootloader,

14:20

and then I'm going to choose that

14:22

option. Now, if you don't do that, and

14:25

you simply boot with an unlocked

14:26

bootloader, Graphene will warn you. You

14:29

can see the bootloader here is locked,

14:31

so we can start the device. So, device

14:34

is now booting up.

14:36

We can see a Google icon, and there you

14:38

go. We've now got Graphene on screen.

14:41

So, we are now booting into Graphene OS.

14:44

Okay, welcome to Graphene OS. I'll

14:46

choose start.

14:49

I'll select Wi-Fi.

14:53

I'll select next.

14:54

I'll choose the default date and time.

14:58

I'm not going to enable location. Notice

15:00

we can enable various options here like

15:02

geolocation, Wi-Fi scanning, network

15:06

location, etc. to harden the device or

15:08

make it less hardened. I'm going to turn

15:10

off all of those options and press

15:12

start. I'll select a PIN and press next.

15:15

I'll confirm my PIN.

15:18

I'm not going to use biometric.

15:20

Remember, in certain countries like the

15:21

US as an example, they are allowed to

15:24

unlock your phone by using biometric

15:26

information about you, but they're not

15:28

allowed to do that with a PIN code. So,

15:30

I'd rather just use a PIN code.

15:32

Now, you can get security preview

15:34

releases. I'm going to do that. You

15:36

might not want that.

15:38

I'm not going to restore data.

15:41

And I'm going to skip

15:43

this introduction.

15:45

Make sure that you leave this option

15:47

checked. So, don't change that. We want

15:48

to disable OEM unlocking and press

15:51

start. And there you go. We've now got

15:53

Graphene installed on this phone. So,

15:56

congratulations. You're now running

15:57

GrapheneOS. A phone that starts from

16:00

less trust, shares less by default, and

16:02

answers to you instead of an ecosystem.

16:05

Now, if you found this video useful,

16:06

please consider subscribing to my

16:07

channel. I'll cover setting up sandboxed

16:10

Google Play app recommendations and

16:12

hardening tips in another video. Links

16:14

to everything, including the official

16:15

Graphene install guide, are in the video

16:17

description. So, hopefully you enjoyed

16:19

this video. Hopefully you learned

16:20

something. Graphene is my recommended

16:22

operating system if you want a secure,

16:25

privacy-focused operating system where

16:27

you get control of your device rather

16:30

than a company in the US, like Google or

16:32

Apple, or a government controlling your

16:34

device. But, let me know your thoughts.

16:36

Do you use GrapheneOS? Do you recommend

16:38

something else? What do you use to make

16:40

sure that you have a privacy-respecting

16:43

and security-focused operating system on

16:45

your phone?

Interactive Summary

This video examines the growing trend of device-level restrictions, specifically age verification and content control, which the creator argues are increasingly imposed by governments and tech companies. The creator emphasizes the importance of privacy and personal autonomy over one's purchased hardware, advocating for GrapheneOS as a secure, privacy-focused alternative to mainstream operating systems. The video also features a guide on how to install GrapheneOS on a Pixel phone and discusses the role of data broker services in maintaining personal privacy.

Suggested questions

4 ready-made prompts