Best Site for Degoogled Android
Summary
The best degoogled Android is GrapheneOS — Pixel-only, by far the most security-hardened, used by serious threat-model defenders. CalyxOS is the user-friendly alternative on Pixel and Fairphone with microG (a free reimplementation of Google Play Services) for app compatibility. /e/OS (Murena) is the broadest device-support option and sells preloaded Fairphone and refurbished Pixels — the easiest way to buy a degoogled phone without flashing it yourself. LineageOS is the community baseline that powers many of the others but does not degoogle on its own — you must add MicroG or skip Google apps manually. iodéOS is the smaller EU-focused option with good Pixel support. Note: DivestOS announced project end-of-life in late 2024 — no longer a recommended path.
Top 5 at a glance
| # | Site | Best for | Price |
|---|---|---|---|
| 1 | GrapheneOS | Maximum security hardening on Pixel hardware | Free, requires a supported Pixel (Pixel 6 / 7 / 8 / 9 family) |
| 2 | /e/OS (Murena) | Buying a degoogled phone preinstalled without flashing it yourself | Free flash; Murena sells preloaded Fairphone and refurbished Pixels at retail price |
| 3 | CalyxOS | Friendlier middle ground between GrapheneOS hardening and /e/OS ease | Free, supported on Pixel and Fairphone |
| 4 | LineageOS (with microG or no Google apps) | Broadest device support including older phones that nobody else covers | Free |
| 5 | iodéOS | EU-focused degoogled Android with strong Pixel support and built-in tracker blocker | Free flash; iodé sells preloaded phones (mostly EU market) |
Detailed rankings
GrapheneOS
Maximum security hardening on Pixel hardware
The default for users who want the strongest security on Android. The Pixel-only requirement is a feature, not a limitation — it is the consequence of requiring proper verified boot.
Pros
- Significantly hardened beyond stock Android: hardened malloc, scudo allocator, hardened kernel, exec-spawning, etc.
- Sandboxed Google Play option — install GMS as a regular app with no system privileges
- Verified boot with hardware-backed attestation
- Storage Scopes and Contact Scopes for granular per-app data access
- Active development with rapid security-patch turnaround
- Used and recommended by Edward Snowden and many security professionals
Cons
- Pixel-only — no other manufacturers supported, by design (other devices lack proper verified boot)
- Requires flashing — not preinstalled by any retailer at scale
- Sandboxed Play Services means push notifications and some banking apps need configuration
- GMS-dependent apps with attestation requirements (banking, some games) may detect non-stock OS
Price: Free, requires a supported Pixel (Pixel 6 / 7 / 8 / 9 family)
Sources: grapheneos.org, grapheneos.org
/e/OS (Murena)
Buying a degoogled phone preinstalled without flashing it yourself
The default for non-technical users who want a degoogled phone working out of the box. Pay the markup for the convenience.
Pros
- Sold preinstalled — Murena ships Fairphone 4/5 and refurbished Pixels ready to use
- microG built-in for app compatibility without real Google services
- Broadest device support of the major degoogled options
- Cloud bundle (Murena Cloud) for users wanting non-Google sync
- Maintained by a French non-profit-adjacent foundation
Cons
- Security hardening well below GrapheneOS
- Bundled cloud is opt-in but the integration pushes toward it
- Some users report slower security-patch cycles than CalyxOS or GrapheneOS
- App-compatibility for attestation-checking apps weaker than GrapheneOS's sandboxed Play
- Murena hardware markup over buying the same phone and flashing yourself
Price: Free flash; Murena sells preloaded Fairphone and refurbished Pixels at retail price
Sources: murena.com, e.foundation
CalyxOS
Friendlier middle ground between GrapheneOS hardening and /e/OS ease
The right pick when you want a friendlier Pixel experience than GrapheneOS or you specifically want Fairphone support.
Pros
- microG preloaded for app compatibility
- Datura firewall for per-app network blocking
- Pre-included F-Droid and Aurora Store
- Verified boot maintained on supported devices
- Maintained by Calyx Institute, a US non-profit
- Fairphone support is unique among hardened options
Cons
- Security hardening below GrapheneOS
- microG model means a less precise Google-app sandbox than GrapheneOS's sandboxed Play
- Update cycle has slowed at points in the project's history
- Some app compatibility issues with attestation-checking apps
Price: Free, supported on Pixel and Fairphone
Sources: calyxos.org
LineageOS (with microG or no Google apps)
Broadest device support including older phones that nobody else covers
The right pick when your device is not supported by any of the hardened options and you accept the lower security baseline. Install LineageOS for microG for one-step setup.
Pros
- Largest device list of any custom ROM
- Long-running community project — descendant of CyanogenMod
- Foundation for most other custom ROMs
- Restores updates to phones long after manufacturer support ends
- Active community support across forums
Cons
- Not degoogled by default — you must install LineageOS for microG or skip Google apps manually
- Security hardening level well below GrapheneOS or CalyxOS
- Verified boot is broken on most devices because the bootloader has been unlocked
- Build quality varies device-to-device — some are official, others community
- Update lag varies by maintainer
Price: Free
Sources: lineageos.org, lineage.microg.org
iodéOS
EU-focused degoogled Android with strong Pixel support and built-in tracker blocker
The right pick for EU users who specifically want a French/EU project and like the built-in tracker blocker. Smaller-project sustainability risk applies.
Pros
- Built-in iodé app for system-wide tracker and ad blocking
- Supports Pixel, Fairphone, and Sony Xperia
- Verified boot preserved on supported devices
- Maintained by a French team — EU-jurisdiction operator
- Sells preloaded phones at retail similar to Murena
Cons
- Smaller project — fewer contributors than CalyxOS or GrapheneOS
- Security hardening below GrapheneOS
- Less community/support content in English than the bigger projects
- Future viability less certain than the major options
Price: Free flash; iodé sells preloaded phones (mostly EU market)
Sources: iode.tech
How we chose
- Security hardening beyond just degoogling — sandboxing, attestation, kernel hardening.
- App compatibility — sandboxed Play Services or microG for apps that need GMS.
- Device support — Pixel-only vs broader hardware coverage.
- Update cadence — security patches lag is the common failure mode of small projects.
- Buy-preloaded option — most users will not flash their own.
- Project sustainability — DivestOS ended 2024, sustainability matters.
Frequently asked questions
Will my banking and 2FA apps work on GrapheneOS?
Most do via sandboxed Google Play, which GrapheneOS installs as a regular app with no system privileges. Apps that perform Play Integrity attestation (some banking, some games, Pokémon Go) detect that the OS is not stock and may refuse to run. The GrapheneOS site maintains a community-tracked compatibility list — check before flashing if a specific bank app is essential. Some banks have whitelisted GrapheneOS after community pressure; others have not.
What about iPhone for privacy?
iPhone running stock iOS gives strong end-to-end encryption, hardware security, and a private-by-default app model — better than stock Android but Apple still has substantial telemetry and ties your identity to an Apple ID. iPhone is not degoogled (Apple is the equivalent vendor) — that is a different tradeoff. GrapheneOS removes Google entirely; iPhone replaces Google with Apple. Choose based on which company you trust more and which apps you need.
Why is GrapheneOS Pixel-only?
Pixel phones expose proper verified boot to third-party operating systems — the OEM keys can be rotated to the new OS's keys so Android's full chain of trust still applies after flashing. Almost no other manufacturer permits this. Samsung, OnePlus, Xiaomi, etc. break verified boot when you unlock the bootloader and never restore it. Without verified boot, you lose the foundation that defends against persistent malware and physical tampering. GrapheneOS will not support devices that cannot offer this — by design, not by limitation.
Does this stop tracking by my carrier and apps?
Partially. Degoogled Android removes Google's first-party tracking. Apps you install still track you if they are designed to (Meta apps, TikTok, ad-supported apps) — GrapheneOS's Storage Scopes and Contact Scopes give you tooling to reduce this. Your mobile carrier still sees your IMSI, IMEI, and location at the tower level — see [[privacy-sim]] for that layer. Degoogling is one layer of several, not a full privacy solution.
What about LineageOS-based forks like DivestOS?
DivestOS announced project end-of-life in late 2024 — no longer recommended. The pattern reflects the difficulty of maintaining custom ROMs as a small team. Sustainability is a real selection criterion: GrapheneOS, CalyxOS, /e/OS, and LineageOS all have non-trivial backing, while smaller forks face higher failure risk. Choose accordingly.