GrapheneOS vs CalyxOS vs LineageOS — Private Mobile OS Compared
Android is open source, but the version most people carry is buried under Google services, OEM telemetry and carrier bloat. Three well-established projects strip that back and hand you a phone you actually control: GrapheneOS, CalyxOS and LineageOS. They share the same AOSP foundation but make very different trade-offs between hardening, everyday app compatibility and the number of phones they run on. Here is how they compare.
1. GrapheneOS — The Security-Hardened Standard
GrapheneOS is the most security-focused of the three. It is built on the Android Open Source Project and then hardened aggressively: a hardened memory allocator, hardened libc and kernel, its own Vanadium browser and WebView, and Memory Tagging Extensions on Pixel 8 and later hardware. Crucially, it is the only one of the three that lets you relock the bootloader against the project’s own signing keys, restoring a full verified-boot chain.
- Pixel-only hardware — official support covers Google Pixel 6 through Pixel 10; older devices are dropped once Google stops shipping firmware patches.
- Sandboxed Google Play — the real Play Services, but installed as ordinary unprivileged apps in whichever profile you choose, with nothing preinstalled.
- Per-app controls — network and sensor (camera, microphone) toggles for every app, plus an optional auto-reboot to the locked before-first-unlock state after idle.
- Same-day patches — security updates usually land the same day as the Android Security Bulletin, and the project is funded entirely by donations.
The catch is hardware: you need a recent Pixel. If you have one, GrapheneOS delivers the strongest privacy and security posture of the three.
2. CalyxOS — The Balanced Privacy Daily Driver
CalyxOS aims for a phone that feels normal to use while keeping Google at arm’s length. It is built on AOSP with microG, an open-source reimplementation of Play Services that you can switch off entirely.
- microG compatibility — many apps that expect Play Services work, with far less data going to Google; push notifications are optional.
- Datura firewall — a system-wide, whitelist-style firewall that blocks app traffic until you explicitly approve it.
- Sensible defaults — F-Droid and Aurora Store preinstalled, Tor Browser plus free Tor and Riseup VPNs offered, and Mozilla-based network location instead of Google’s.
- Broader hardware — Pixels plus selected Fairphone, Motorola and SHIFT models, backed by the non-profit Calyx Institute.
The project is actively maintained again: after a pause in 2025 it resumed full releases in July 2026 and has since shipped Android 17 (CalyxOS 8) for most supported Pixels, including the Pixel 10a.
3. LineageOS — The Device-Friendly Freedom Option
LineageOS is the community successor to CyanogenMod and the reason most old phones get a second life. It supports hundreds of devices — far more than the other two combined — and ships with no Google apps at all.
- Unmatched device support — builds for hundreds of phones and tablets, including models the manufacturer abandoned years ago.
- Choose your Google — add nothing, install microG, or flash a full Google apps add-on; the decision is yours.
- Clean, customisable Android — a near-stock AOSP experience with granular privacy controls and no OEM bloat.
- Trade-off: less hardening — LineageOS is not a security project. It runs essentially stock-AOSP userspace and its patches can lag weeks behind upstream.
Pick LineageOS when hardware breadth or one specific unsupported phone matters most, and treat its security ceiling as “better than unpatched Android, lower than GrapheneOS”.
Which One Should You Pick?
Choose GrapheneOS if: you own or will buy a recent Pixel and want the strongest hardening, verified boot and same-day patches — and you are happy using sandboxed Google Play when an app demands it.
Choose CalyxOS if: you want privacy-first defaults with microG compatibility, a built-in firewall and a device outside the Pixel range — after confirming your critical apps run on microG.
Choose LineageOS if: your device is not a Pixel, you are reviving older hardware, or you want a lean AOSP base and full control over which Google components, if any, go on it.
The Bottom Line
All three are free and open source, and all three remove the stock-Android data funnel. The deciding factor is your phone and your threat model: GrapheneOS for maximum security on a modern Pixel, CalyxOS for a privacy-friendly daily driver with real app compatibility, and LineageOS for the widest hardware support and the freedom to build the phone you want.
Exploring self-hosted and open-source alternatives? Browse the full open source directory, or dig into our Operating Systems category. Know a tool we should list? Submit it here.