--- title: The Government's War On GrapheneOS | daily.dev description: GrapheneOS, a security-hardened Android-based OS for Google Pixel phones, has become a significant obstacle for law enforcement attempting to extract data from... canonical: https://daily.dev/posts/the-government-s-war-on-grapheneos-s1c6cr9hy twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: The Government's War On GrapheneOS | daily.dev og:description: GrapheneOS, a security-hardened Android-based OS for Google Pixel phones, has become a significant obstacle for law enforcement attempting to extract data from... og:url: https://daily.dev/posts/the-government-s-war-on-grapheneos-s1c6cr9hy og:image: https://api.daily.dev/og/posts/S1C6cr9HY.png og:image:alt: The Government's War On GrapheneOS og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # The Government's War On GrapheneOS **[Mental Outlaw](https://daily.dev/sources/mentaloutlaw)** · 13 min read · 20 upvotes · 3 comments ## Summary GrapheneOS, a security-hardened Android-based OS for Google Pixel phones, has become a significant obstacle for law enforcement attempting to extract data from seized devices. Key features include auto-reboot to Before First Unlock (BFU) mode every 18 hours, disabled Google services, restricted USB data access, and support for pins up to 128 characters. A leaked Cellebrite support chart confirms that current GrapheneOS builds are largely resistant to their extraction tools. Real-world cases are examined: an Australian criminal network selling GrapheneOS-loaded Pixel phones for $2,000 each, and a US case where an activist used GrapheneOS's duress PIN to wipe his device at a border crossing, resulting in a 'destruction of property' charge. The piece argues that using effective privacy tools is increasingly being treated as suspicious or criminal behavior in itself, creating a circular logic where strong security implies guilt. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What does GraphenOS's auto-reboot feature do to protect against phone forensic extraction? GraphenOS includes a default-enabled auto-reboot setting that puts the phone into before-first-unlock (BFU) mode every 18 hours, and this interval can be shortened, even to every hour. In BFU mode, encryption keys needed to read private data are not yet released, making forensic extraction tools unable to pull data without cracking the PIN, unlike after-first-unlock (AFU) mode where keys remain loaded and extraction is much easier. _daily.dev surfaces deep dives like this for developers weighing mobile OS security trade-offs._ ### What is the duress PIN feature in GraphenOS and how was it used by Samuel Tunic during a border search? The duress PIN is an alternate unlock code that, instead of granting access, wipes all phone data and any eSIMs installed. Atlanta activist Samuel Tunic used it in early 2025 when customs agents demanded phone access at the border; entering it wiped the device, and he was later charged with destruction of property to prevent seizure rather than any crime tied to the phone's contents. _developers researching device security features can track real-world cases like this through daily.dev._ ### Did a leaked Cellebrite support chart show that Cellebrite forensic tools can crack GraphenOS phones? A leaked Cellebrite support chart showed that older GraphenOS builds had some support for extraction, but working methods stopped at older security patch levels, meaning current patched GraphenOS phones no longer have the exploited security hole. This forces police to rely on alternative methods like cloud data requests or carrier records instead of direct device extraction. _daily.dev helps developers follow leaks and disclosures affecting tools like Cellebrite and GraphenOS._ ## Community discussion Top comments from developers on daily.dev. **@starfallcodes** · 1 upvotes > "if its private we want it down" ahh **@henbomb** · 1 upvotes > Privacy is starting to become a luxury... ## Similar posts on daily.dev - [GrapheneOS is finally ready to break free from Pixels, and it may never look back](https://daily.dev/posts/grapheneos-is-finally-ready-to-break-free-from-pixels-and-it-may-never-look-back-tig5yxuji) · Hacker News · 26 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#android](https://daily.dev/tags/android), [#encryption](https://daily.dev/tags/encryption) [View this post on daily.dev](https://daily.dev/posts/the-government-s-war-on-grapheneos-s1c6cr9hy) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"The Government's War On GrapheneOS","url":"https://daily.dev/posts/the-government-s-war-on-grapheneos-s1c6cr9hy","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/the-government-s-war-on-grapheneos-s1c6cr9hy"},"datePublished":"2026-07-29T21:44:41.190Z","dateModified":"2026-09-13T19:17:40.892Z","description":"GrapheneOS, a security-hardened Android-based OS for Google Pixel phones, has become a significant obstacle for law enforcement attempting to extract data from...","image":"https://i.ytimg.com/vi/eDQtUwad5vg/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/eDQtUwad5vg/sddefault.jpg","isAccessibleForFree":true,"articleSection":"Mental Outlaw","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Mental Outlaw","logo":"https://media.daily.dev/image/upload/s---3xRV5E---/f_auto/v1712315214/logos/mentaloutlaw","url":"https://daily.dev/sources/mentaloutlaw"},"commentCount":3,"discussionUrl":"https://daily.dev/posts/the-government-s-war-on-grapheneos-s1c6cr9hy","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":20},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":3}],"keywords":"security,android,encryption","timeRequired":"PT13M","video":{"@type":"VideoObject","name":"The Government's War On GrapheneOS","description":"GrapheneOS, a security-hardened Android-based OS for Google Pixel phones, has become a significant obstacle for law enforcement attempting to extract data from...","thumbnailUrl":"https://i.ytimg.com/vi/eDQtUwad5vg/sddefault.jpg","uploadDate":"2026-07-29T21:44:41.190Z","duration":"PT13M","url":"https://api.daily.dev/r/S1C6cr9HY","embedUrl":"https://www.youtube.com/embed/eDQtUwad5vg"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Mental Outlaw","item":"https://daily.dev/sources/mentaloutlaw"},{"@type":"ListItem","position":3,"name":"The Government's War On GrapheneOS"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/the-government-s-war-on-grapheneos-s1c6cr9hy","comment":[{"@type":"Comment","text":"“if its private we want it down” ahh","datePublished":"2026-08-03T06:36:01.469Z","url":"https://daily.dev/posts/S1C6cr9HY#c-DnxYb28KJ","author":{"@type":"Person","name":"Starfall :D","url":"https://daily.dev/starfallcodes","image":"https://media.daily.dev/image/upload/s--4xoTqFbk--/f_auto/v1786806197/avatars/avatar_ecPDW57nUVRidLxwsxruz?_a=BAMAMicg0"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1}},{"@type":"Comment","text":"Privacy is starting to become a luxury…","datePublished":"2026-07-31T18:29:18.119Z","url":"https://daily.dev/posts/S1C6cr9HY#c-7z5OFT17S","author":{"@type":"Person","name":"HΣn","url":"https://daily.dev/henbomb","image":"https://lh3.googleusercontent.com/a/ACg8ocKLNWeTt8UQp94l8luT61tFyG5vL9jh6dONvB-LwB76203P8uVo=s96-c"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1}}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/the-government-s-war-on-grapheneos-s1c6cr9hy#faq","mainEntity":[{"@type":"Question","name":"What does GraphenOS's auto-reboot feature do to protect against phone forensic extraction?","acceptedAnswer":{"@type":"Answer","text":"GraphenOS includes a default-enabled auto-reboot setting that puts the phone into before-first-unlock (BFU) mode every 18 hours, and this interval can be shortened, even to every hour. In BFU mode, encryption keys needed to read private data are not yet released, making forensic extraction tools unable to pull data without cracking the PIN, unlike after-first-unlock (AFU) mode where keys remain loaded and extraction is much easier. daily.dev surfaces deep dives like this for developers weighing mobile OS security trade-offs."}},{"@type":"Question","name":"What is the duress PIN feature in GraphenOS and how was it used by Samuel Tunic during a border search?","acceptedAnswer":{"@type":"Answer","text":"The duress PIN is an alternate unlock code that, instead of granting access, wipes all phone data and any eSIMs installed. Atlanta activist Samuel Tunic used it in early 2025 when customs agents demanded phone access at the border; entering it wiped the device, and he was later charged with destruction of property to prevent seizure rather than any crime tied to the phone's contents. developers researching device security features can track real-world cases like this through daily.dev."}},{"@type":"Question","name":"Did a leaked Cellebrite support chart show that Cellebrite forensic tools can crack GraphenOS phones?","acceptedAnswer":{"@type":"Answer","text":"A leaked Cellebrite support chart showed that older GraphenOS builds had some support for extraction, but working methods stopped at older security patch levels, meaning current patched GraphenOS phones no longer have the exploited security hole. This forces police to rely on alternative methods like cloud data requests or carrier records instead of direct device extraction. daily.dev helps developers follow leaks and disclosures affecting tools like Cellebrite and GraphenOS."}}]} ```