If you want to de-Google your phone with GrapheneOS, the hardware decision is made for you in one respect and wide open in another. GrapheneOS only runs on Google Pixels, but which Pixel, new or renewed, and from where, makes a real difference to what you pay and whether it works at all. Here's the honest guide.
Why it has to be a Pixel
GrapheneOS relies on hardware security features (a dedicated security chip, verified boot, proper bootloader controls) that, in the combination it needs, are really only there on Pixels today. It does not run on Samsung, iPhone, or any other Android phone you can buy right now. So step one isn't “which brand”. It's simply which Pixel.
(One thing to know for later: GrapheneOS has announced a partnership with Motorola, with the first supported Motorola phones expected in 2027. Until they actually ship, it's Pixels only.)
Which models are a good buy
The simple rule, as of September 2026: buy a Pixel 8 or newer. That's the GrapheneOS project's own advice: it “strongly recommend[s]” only the 8, 8 Pro and 8a, the 9 family including the 9a, and the 10 family including the 10a. The reason is the support window: Google promises the Pixel 8 and later seven years of security updates from launch, against five years for the Pixel 6 and 7 series.
That five-year clock matters. The Pixel 6 series reaches the end of its five years this autumn, so we wouldn't buy one now at any price. The 7 and 7a still get updates and GrapheneOS still supports them, but they're not on the recommended list. A cheap 7a is a budget option with a noticeably shorter runway, and you should know that before you pay for one.
- Best value: a renewed 8a or 9a, nearly all the phone for a good bit less money, with years of updates left.
- Longest life: a current-generation Pixel 10 or 10a, with the most years of security updates ahead of it.
- Check the support window: updates are counted from the day a model launched, not the day you buy it. A renewed phone has already used some of its years.
New vs renewed
Renewed (refurbished) Pixels are where the value is, often half the price of new, and de-Googling doesn't care about a few cosmetic marks. Two things to check: buy Grade A if you want it to look nearly new, and ask about battery health, since that's the part that ages. New makes sense only if you want the longest possible update window or a specific latest model.
The trap that ruins a cheap deal: carrier locking
This is the one that catches people out, so read it twice. Some Pixels sold cheaply by mobile networks have OEM unlocking blocked, which makes installing GrapheneOS impossible, no matter how good the price was. Always buy an unlocked Pixel, and if you're buying renewed, confirm the OEM-unlock option isn't greyed out. A bargain you can't flash isn't a bargain.
Storage and memory
128GB is fine for most people; go bigger only if you keep a lot of photos and video on the device. More memory (RAM) helps if you run a lot of apps at once, but it's rarely the thing that matters most. Battery health and the carrier-lock check matter more.
Or skip the homework
All of the above is exactly the checking we do before anything reaches a customer: unlocked, OEM-unlock confirmed, battery sound, the right model for the money. If you'd rather not wade through listings and risk a carrier-locked dud, we'll hand you a de-Googled Pixel that's already sorted. And if you do want to do it all yourself, our free guide has the full walkthrough. Either way, no markup nonsense.