Back

@ueeu @sailmates They're not alternatives until I can do banking and government authentication without Google Play.

@fsx @ueeu @sailmates You can use @GrapheneOS with Sandboxed Google Play. Nearly all apps, including banking apps, are supported. It's highly secure & private while retaining great usability.

More infos here:
https://discuss.grapheneos.org/d/8330-app-compatibility-with-grapheneos

@fxnn Same goes for CalyxOS. Can highly recommend it.

@fsx @ueeu @sailmates @GrapheneOS

@paulk @fxnn @fsx @ueeu @sailmates No, that's not the case. CalyxOS has far less app compatibility than GrapheneOS and not all app functionality will work properly. CalyxOS also isn't a hardened OS and lacks remotely comparable privacy and security. Similar to /e/OS and LineageOS, it reduces privacy and security compared to AOSP, just not as much as /e/OS does. As an example, it's missing the full March 2025 Android and Pixel security patches. Weeks or even months of patch delays isn't safe.

@paulk @fxnn @fsx @ueeu @sailmates

https://grapheneos.social/@GrapheneOS/113459782313987260 is a recent thread explaining why we use our sandboxed Google Play compatibility layer approach instead. We still reimplement Google Play functionality ourselves, but we implement it in a way that's not tied to Google Play and then expand the compatibility layer to optionally or always reroute requests to it from apps if that's needed. We have much higher standards including privacy and security for the code we're adding.

@paulk @fxnn @fsx @ueeu @sailmates

https://eylenburg.github.io/android_comparison.htm is a third party comparison between different alternate mobile operating systems. It could include many more privacy/security features but it's a good starting point. Highly recommend looking at that as a starting point to understand how extremely different they are from each other. CalyxOS is in the same space as other non-hardened OSes like LineageOS, /e/OS and iodéOS. It's a common misconception that it's similar to GrapheneOS.

@GrapheneOS Thank you for your explanation. I tried setting up e/os on my fairphone4 but that refused to happen because of a "missing update", while the phone was fully up to date. Calyx was the next I found and that installed fine.

@fxnn @fsx @ueeu @sailmates

@paulk @fxnn @fsx @ueeu @sailmates /e/OS is much more insecure than CalyxOS but CalyxOS still lags significantly behind on privacy/security patches and still somewhat rolls back the security model compared to AOSP while creating new privacy issues. They're both in a much different space from GrapheneOS.

We can't support the Fairphone 4 because it doesn't have a secure element, proper driver/firmware patches, has insecure broken verified boot and is missing important security features we use.

@GrapheneOS At least I'm at the most secure level for FP4 then it seems. Unless I slap some Linux Mobile on it.

@paulk

> At least I'm at the most secure level for FP4 then it seems.

Not really.

> Unless I slap some Linux Mobile on it.

Android-based operating systems are mobile Linux distributions. Desktop distributions are far less private and secure than the Android Open Source Project. Most of those aren't providing proper privacy and security patches either, especially for the drivers and firmware.