GrapheneOS, CalyxOS, LineageOS, DivestOS — which one, and why?

The four-second answer

If you want the strongest production privacy and security platform on a phone you can actually buy in Australia: GrapheneOS on a Google Pixel. There is no second answer at the same security tier.

If you can't run GrapheneOS (your hardware isn't supported, or you need a feature it doesn't ship): CalyxOS is a good fallback for casual privacy, LineageOS if you need broader device support, DivestOS if you have an older phone Lineage has dropped.

The rest of this page is the long-form comparison so you can verify that answer for yourself.

Side-by-side comparison

Why GrapheneOS wins on the metrics that decide

Verified boot is the dividing line

Of the four alternatives, only GrapheneOS lets you relock the bootloader against the project's signing keys. The other three keep the bootloader unlocked permanently as part of running the custom OS. For any threat model that includes physical-access attacks — border crossings, evil-maid, opportunistic forensics — verified-boot relocking is not a "nice to have", it's the foundation everything else builds on. A phone with great encryption and an unlocked bootloader is one factory-image flash away from a backdoored copy of itself.

Hardened userspace, not just removed Google

"De-Googling" is the popular framing of these projects, but the security difference between GrapheneOS and the others is in the userspace hardening. Hardened malloc catches memory-corruption bugs at allocation time. The hardened bionic libc removes legacy attack surface. MTE on Pixel 8+ catches use-after-free and heap-overflow exploits at the hardware level. CalyxOS and LineageOS run essentially stock-AOSP userspace with Google removed; the hardening surface is the same as stock Android.

Sandboxed Play vs microG vs nothing

This is the practical question that decides whether your daily-use apps work. GrapheneOS uses sandboxed Google Play — the actual Google Play Services binary, but running in an isolated profile with no special privileges. To the bank app, it looks like real Google because it is real Google; to the OS, it has no more access than any other app. CalyxOS uses microG, an open-source reimplementation. It works for many apps but breaks for apps that depend on cryptographic signing of Google service responses (which is a growing fraction of banking, government, and DRM apps). LineageOS leaves the choice to the user — install Open GApps for compatibility (you're back to full Google) or run microG yourself.

When you'd choose CalyxOS instead

CalyxOS is a good choice if:

• You don't need verified-boot relocked (your threat model is consumer-grade, not state-level).
• You want a smoother install and configuration experience aimed at non-technical users.
• You like the Calyx Institute's policy positioning (they are an explicit non-profit advocacy organisation).
• You have a Pixel that GrapheneOS supports but prefer microG over sandboxed Play.

CalyxOS is genuinely a good privacy improvement over stock Android. It's just not in the same security tier as GrapheneOS.

When you'd choose LineageOS or DivestOS

LineageOS is the right pick when your phone is not a Pixel and you don't want to buy one. It supports hundreds of devices including older Samsungs, Xiaomis, OnePluses, and Motorolas. The trade-offs are: no verified-boot relock, no hardened userspace, and Google services either fully present (if you install Open GApps) or partially via microG.

DivestOS is a Lineage fork by the late security researcher Tad ("SkewedZeppelin"). It targets older devices that mainline Lineage has dropped, with selectively-backported security patches. Use it if you have a perfectly working 2018-era phone you don't want to throw away — but understand the security ceiling is determined by what the manufacturer last patched in firmware.

GrapheneOS vs CalyxOS Australia — what this means for buying

If you are searching GrapheneOS vs CalyxOS Australia because you are choosing an OS for a phone you have not yet bought: pick GrapheneOS. The GrapheneOS vs CalyxOS Australia decision is settled by verified-boot relock and hardened userspace — both available on GrapheneOS, neither on CalyxOS.

If you are buying a new privacy phone in 2026 and you have any choice of hardware: buy a Pixel and run GrapheneOS. The Pixel is the only widely-stocked Australian phone that supports the dividing-line feature (verified boot relocked) and the hardened-userspace work (hardened malloc, MTE on Pixel 8+).

If you are upgrading from a non-Pixel: don't keep the existing hardware out of sentimentality. The privacy and security improvement from a non-Pixel-on-LineageOS to a Pixel-on-GrapheneOS is the largest single upgrade you can make.

Privacy Devices ships every device with GrapheneOS pre-installed, verified boot relocked, and the Phantom Protocol operational layer pre-armed. Pixel 9a from $1,499. Pixel 10 Pro from $2,189. Same-day Australian dispatch. For the AU vendor field comparison (GhostPixel vs ThreeCats vs PrivacyPros vs PrivacyFirst vs FreedomTech vs us), see the best degoogled phone Australia 2026 page.

GrapheneOS vs CalyxOS — quick clarifications

Common follow-up questions in the GrapheneOS vs CalyxOS Australia decision:

• Does CalyxOS support Pixel 10? Not officially as of mid-2026. GrapheneOS supports it. If you want a current Pixel, GrapheneOS is the only option.
• Is microG (CalyxOS) a Google replacement? Functionally yes for many apps, philosophically no — microG re-implements Google API surfaces. Some apps detect the difference and refuse to run; others work fine.
• GrapheneOS vs CalyxOS — which has better Australian banking compatibility? GrapheneOS via sandboxed Google Play has the strongest record. CalyxOS via microG works for many but breaks for apps that strictly verify Google service signatures.
• Can I switch between GrapheneOS and CalyxOS later? Yes. Both involve unlocking the bootloader, flashing, and re-relocking. The path is well-documented. Privacy Devices does not switch customer devices to CalyxOS as a service — we sell GrapheneOS only.