The panic button built into your lock screen.
Set a second PIN. If you're ever forced to unlock your phone, enter the duress PIN instead. The phone instantly factory resets — designed to be permanent and unrecoverable. Whoever is holding it sees a blank, fresh device.
Locked down at the hardware level.
Every byte on your phone is encrypted by the Titan M2 security chip. Without your PIN, the data is unreadable — even if the phone is physically taken apart. No known forensic tool can bypass hardware encryption on a properly wiped device.
Walk away. It locks itself.
If your phone isn't unlocked for a set period, it reboots into a fully encrypted state. No fingerprint, no face unlock — PIN only. The most secure state the phone can be in, triggered automatically.
Your phone, your rules.
Google services are removed by default. No tracking, no telemetry, no ad profiling. If you need apps like WhatsApp or your banking app, install Google Play in a sandboxed container — it works normally but can't touch anything else.
Every app asks. You decide.
Control exactly what each app can see — camera, mic, contacts, network, storage. Block any app from connecting to the internet entirely.
Shoulder surfers get nothing.
The PIN pad shuffles its layout every time you unlock. Anyone watching you type can't memorise the pattern — because it changes every time.
One phone. Multiple vaults.
Create separate profiles on the same device, each fully encrypted and isolated. Work, personal, travel — switch from the lock screen.
Plug in to charge. That's it.
Disable USB data transfer completely. The phone charges from any cable, but no computer or tool can access data through the port.
Tamper-proof from power-on.
Every boot, the phone cryptographically verifies the OS hasn't been modified. Any tampering is detected before the phone even starts.
Always current. Always patched.
GrapheneOS pushes security patches frequently — often before Google does. You're always on the most secure version.