← All Guides

GrapheneOS Setup Guide

A complete walkthrough for setting up your Privacy Devices phone running GrapheneOS. From first boot to daily use — every step explained.

First Boot

When you power on your device for the first time, GrapheneOS will guide you through initial setup. Unlike stock Android, there is no Google account sign-in. The OS is fully functional without any cloud accounts.

You will be asked to set a screen lock. Use a strong PIN (6+ digits) or passphrase. Biometric unlock can be enabled after the initial lock is configured.

Connect to a trusted Wi-Fi network during setup to receive any pending system updates.

System Updates

GrapheneOS ships its own update channel — independent of Google. Updates are delivered over-the-air and install automatically in the background. Your device reboots to apply them.

Check for updates manually via Settings > System > System update. Keep your device updated — GrapheneOS patches are often ahead of stock Android.

App Installation

Your device comes with essential apps pre-installed. For additional apps:

• F-Droid / Aurora Store — open-source app stores, no Google account required
• Sandboxed Google Play — if you need specific apps (banking, MyGov), Google Play can run in a sandboxed environment with no special privileges
• Direct APK install — download APKs from trusted sources (Signal, Mullvad, etc.)

Network Configuration

Your device ships with Mullvad VPN pre-configured. Enable it via the Mullvad app or use the system VPN settings for always-on protection.

Private DNS is configured to block trackers at the DNS level. You can adjust this in Settings > Network > Private DNS.

The included global eSIM is pre-activated. For local SIM, insert your physical SIM card — the device supports dual SIM (eSIM + physical).

Privacy Settings

Key settings are pre-configured on your device, but worth reviewing:

• Sensors off — Quick Settings tile to disable all sensors (camera, mic, accelerometer)
• Network permissions — Per-app network access control (unique to GrapheneOS)
• Storage scopes — Limit which files apps can access
• Contact scopes — Share only selected contacts with specific apps
• Auto-reboot — Device reboots automatically after inactivity (configurable timer)

Daily Use Tips

GrapheneOS works like standard Android for most tasks. A few differences to be aware of:

• Notifications may behave differently without Google Play Services — apps using their own push systems (Signal, Threema) work normally
• Banking apps generally work in the sandboxed Google Play profile
• Camera and phone apps are included — no Google apps needed for basic functions