How to Install GrapheneOS on Your Pixel Phone

    A complete step-by-step guide to installing GrapheneOS on your Google Pixel using the official web installer. No command line needed.

    JDCS
    By Jordan Dickson · Reviewed by CSG Security Engineers

    Updated June 2026 · 7 min read

    GrapheneOS is a privacy and security-focused mobile operating system built on Android. It runs on Google Pixel phones and removes all Google tracking while keeping full app compatibility. This guide walks you through the entire installation using the official web installer — no terminal or coding experience required.
    Affiliate disclosure: if you sign up for a paid Proton plan through links on this page, CyberSecurityGuides may earn a commission at no extra cost to you. We only recommend tools we use and trust.
    The whole process takes about 15-20 minutes. You will need your Pixel phone, a USB-C cable, and a computer with a compatible browser.

    Good to know

    Compatible devices: GrapheneOS supports Pixel 6 and newer (Pixel 6, 6 Pro, 6a, 7, 7 Pro, 7a, 8, 8 Pro, 8a, 9, 9 Pro, 9 Pro XL, 9 Pro Fold, 9a, 10, 10 Pro, 10 Pro XL, Pixel Fold, Pixel Tablet). Carrier-locked devices may not work — use an unlocked Pixel for the smoothest experience.

    What You Will Need

    • A Google Pixel phone (Pixel 6 or newer, unlocked)
    • A USB-C cable — use the one that came with your Pixel for best results
    • A computer with at least 2 GB of free memory and 32 GB of free storage
    • A supported browser: Google Chrome, Microsoft Edge, Chromium, or Brave (with Shields disabled)
    • A stable internet connection for downloading the OS image (~2 GB)

    Important

    Important: Do not use Firefox, Safari, Incognito/Private mode, or Snap/Flatpak browser versions — they do not support WebUSB. Connect your phone directly to a USB port on your computer, not through a USB hub.

    Step 1: Initial Pixel Setup & Update

    If your Pixel is brand new, power it on and go through the minimal stock Android setup. You can skip signing into a Google account — just connect to Wi-Fi and complete the basics.
    1. Power on your Pixel and select your language and region
    2. Connect to a Wi-Fi network (required for updates and OEM unlock verification)
    3. Skip signing into a Google account — tap Skip or Set up offline
    4. Complete the remaining prompts (PIN/fingerprint can be skipped for now)
    5. Once on the home screen, go to Settings > System > System update
    6. Download and install any available updates, then restart your device
    7. Repeat until it says your system is up to date

    Tip

    Why update first? Updating to the latest stock firmware ensures the best compatibility when connecting to the web installer. GrapheneOS will flash its own firmware during installation, but having the latest stock version helps the initial USB connection work smoothly.

    Step 2: Enable OEM Unlocking

    OEM unlocking allows you to replace the operating system on your device. This setting must be enabled from within stock Android before you can proceed.
    1. Open Settings > About phone
    2. Scroll down and tap Build number seven times rapidly — you will see a message saying "You are now a developer!"
    3. Go back to Settings > System > Developer options
    4. Find and toggle on OEM unlocking
    5. If prompted, confirm with your PIN or pattern

    Important

    Note: If the OEM unlocking toggle is greyed out, your device may be carrier-locked. You will need an unlocked Pixel to install GrapheneOS. For the Pixel 6a specifically, you must update to the June 2022 release or later and factory reset before OEM unlocking becomes available.

    Step 3: Boot into Fastboot Mode

    Fastboot mode is a special boot state that allows your computer to communicate with the phone for flashing a new operating system.
    1. Power off your Pixel completely
    2. Press and hold the Volume Down button, then press and hold the Power button at the same time
    3. Keep holding both buttons until you see the Fastboot Mode screen — it shows a red warning triangle and the word "Fastboot Mode"
    4. Do not press the power button or select "Start" — leave the phone paused on this screen

    Tip

    Alternative method: If your phone is already on, you can also reboot and hold the Volume Down button as soon as the screen goes black. Keep holding it until the Fastboot screen appears.

    Step 4: Connect Your Phone & Open the Web Installer

    1. With your Pixel in Fastboot Mode, connect it to your computer using the USB-C cable
    2. On your computer, open Google Chrome (or another supported browser)
    3. Navigate to the official GrapheneOS web installer: grapheneos.org/install/web
    4. Scroll down to the "Unlocking the bootloader" section

    Important

    USB tips: Plug directly into a port on your computer — avoid USB hubs, keyboard ports, or front-panel ports on desktops. Use the USB-C cable that came with your Pixel whenever possible. Many third-party cables cause connection issues.

    Step 5: Unlock the Bootloader

    The web installer will guide you through unlocking the bootloader. This step wipes all data on your phone (which is fine for a new device).
    1. On the web installer page, click the "Unlock bootloader" button
    2. A browser popup will ask you to select your device — choose your Pixel and click Connect
    3. On your phone, use the Volume buttons to highlight "Unlock the bootloader" and press the Power button to confirm
    4. Your phone will reboot and wipe all data — this is expected
    5. The phone will boot back into Fastboot Mode automatically

    Good to know

    Don't panic: The screen may flash warnings about an unlocked bootloader — this is normal and expected. We will re-lock the bootloader after installing GrapheneOS for full security.

    Step 6: Download & Flash GrapheneOS

    Now the web installer will download the GrapheneOS image for your specific Pixel model and flash it onto the device. This is the main installation step.
    1. On the web installer, click "Download release" — this will download the correct GrapheneOS image for your device (~2 GB)
    2. Wait for the download to complete — the progress bar will show the status
    3. Once downloaded, click "Flash release"
    4. If prompted, select your device in the browser popup again and click Connect
    5. The installer will automatically flash the firmware, reboot into the bootloader, and flash the OS
    6. Do not touch your phone or disconnect the cable during this process — it takes several minutes
    7. You may need to click "Reconnect device" if the installer prompts you — this is normal as the phone reboots during flashing

    Tip

    Be patient: The flashing process involves multiple reboots and can take 5-10 minutes. Leave everything connected and let it complete. The web installer will tell you when it is finished.

    Step 7: Lock the Bootloader

    This is a critical security step. Locking the bootloader enables verified boot, which ensures that only the genuine GrapheneOS software can run on your device. Do not skip this.
    1. After flashing completes, your phone should be back in Fastboot Mode
    2. On the web installer, click "Lock bootloader"
    3. On your phone, use the Volume buttons to highlight "Lock the bootloader" and press the Power button to confirm
    4. The device will wipe data again and reboot — this is expected

    Important

    Do not skip this step! An unlocked bootloader means anyone with physical access could replace your OS. Locking it ensures full verified boot protection — one of GrapheneOS's strongest security features.

    Step 8: Complete the GrapheneOS Setup

    Your Pixel will now boot into GrapheneOS for the first time. You will see a clean setup wizard — similar to stock Android but without any Google services.
    1. Your phone will boot up with the GrapheneOS logo — the first boot may take a minute or two
    2. Select your language and region
    3. Connect to Wi-Fi
    4. Set up a PIN, password, or fingerprint for your lock screen (highly recommended)
    5. On the final setup screen, you will see a toggle to disable OEM unlocking — leave this checked (it is enabled by default) for maximum security
    6. Complete the remaining setup prompts

    Tip

    Congratulations! You are now running GrapheneOS. Your phone has no Google services, no telemetry, and full verified boot protection. Check out the GrapheneOS usage guide for tips on getting the most out of your new private phone.

    What to Do Next

    Now that GrapheneOS is installed, here are the recommended next steps to get the most out of your private phone:
    • Install apps: GrapheneOS includes the Apps app for installing open-source apps. For Play Store apps, you can optionally install sandboxed Google Play from the Apps app — this gives you full app compatibility without Google having system-level access
    • Set up a VPN: Pair your device with a privacy-focused VPN like Proton VPN for encrypted internet traffic
    • Install a password manager: Use Proton Pass or Bitwarden to generate and store strong, unique passwords
    • Switch to private email: Consider Proton Mail for end-to-end encrypted email
    • Enable automatic updates: Go to Settings > System > System update and ensure automatic updates are enabled — GrapheneOS pushes security updates promptly
    • Explore privacy settings: Check out Settings > Security and Settings > Privacy for fine-grained control over permissions, sensors, and network access

    Good to know

    Need help? If you run into any issues, the GrapheneOS community chat is very active and helpful. You can also revisit the official web installer page for troubleshooting tips.
    Tags:
    Privacy
    Device Hardening
    Getting Started
    Mobile Device Security

    Was this guide helpful?

    Know someone who needs this? Send them the guide.

    JD

    Written by

    Jordan Dickson

    Founder, CyberSecurityGuides

    Founder of CyberSecurityGuides, writing practical, jargon-free guides that help everyday people recover from and protect against online attacks.

    Reviewed by CSG Security Engineers

    More from Device Security

    No image

    How to Secure Your Google Account

    Lock down the Google account behind your Android phone: move it to a private email, set a strong unique password, turn on app-based 2-Step Verification, remove devices you don't recognise, and close the recovery back doors.

    No image

    How to Secure Your Apple ID

    Lock down the Apple Account behind your iPhone, step by step: move it to a private email, set a strong unique password, tighten two-factor, remove recovery contacts, add a recovery key, turn on Advanced Data Protection, close iCloud.com web access, and switch on Stolen Device Protection.

    No image

    How to Secure the Account That Runs Your Phone

    Your Apple ID or Google account is the master key to your phone — anyone signed in can see everything. Here's why it matters and how to lock it down, with step-by-step guides for iPhone and Android.