in

How to install GrapheneOS on Google Pixel 6 (Pixel 6 Pro) | DeGoogled Phone



The Google Pixel 6 (GP6) is the most secure phone in 2022. With five years of security upgrades and the most layers of hardware security, the Pixel 6 and Pixel 6 Pro are the most secure Pixel phones yet. The Google Tensor system on a chip (SoC) hardware and new Pixel-first features in the Android operating system combine to make this the first Pixel phone with Google security from the silicon to the data center. Pixel’s security has also been proven through transparency and external certification by multiple dedicated security teams.

With Google Tensor, Google has put user data protection and transparency at the forefront of hardware security. The main processors in Google Tensor are Arm-based and use TrustZone technology. TrustZone is an important aspect of the security architecture for general safe processing, but Google Tensor includes security enhancements that go beyond TrustZone.

The Google Tensor security core is a custom-built security subsystem focused to user privacy protection. It has a specialized CPU, ROM, one-time-programmable (OTP) memory, crypto engine, internal SRAM, and protected DRAM, and is not just logically but physically independent from the application processor. The security core’s principal use cases for the Pixel 6 and 6 Pro include securing user data keys at runtime, hardening secure boot, and interacting with Titan M2.

Secure hardware is only as secure as the operating system it runs on, and the Pixel 6 and Pixel 6 Pro run on Trusty, an open source trusted execution environment. The safe OS utilized in TrustZone and the Google Tensor security core is Trusty OS.

The new Titan M2, a distinct security chip conceived and developed entirely by Google, is included with the Pixel 6 and Pixel 6 Pro. The Pixel now features an in-house created RISC-V processor with increased speed and memory, making it even more resistant to advanced attacks with this next-generation device. An independent, accredited evaluation lab has assessed Titan M2TM to the most stringent vulnerability assessment standard, AVA VAN.5. The Titan M2 supports Android Strongbox, which securely creates and saves keys used to safeguard PINs and passwords, and works in tandem with the Google Tensor security core to protect user data keys while they are in use in the SoC.

GrapheneOS is a non-profit open source project that focuses on privacy and security in mobile operating systems with Android app compatibility. It focuses on privacy and security technology research and development, including significant advancements in sandboxing, exploit mitigation, and the permission model.

From the ground up, GrapheneOS increases the OS’s privacy and security. It employs technologies to mitigate entire classes of vulnerabilities while also making exploiting the most frequent sources of vulnerabilities much more difficult. It increases the security of both the operating system and the programs that run on it. The app sandbox and other security barriers have been strengthened. With its privacy and security features, GrapheneOS attempts to minimize the impact on the user experience. The functionalities should ideally be intended to be always enabled, with no negative impact on the user experience and no added complication in the form of setup options. It’s not always possible, thus GrapheneOS includes toggles for things like Network permission, Sensors permission, and limits when the device is locked (USB peripherals, camera, fast tiles, and so on), as well as more advanced user-facing privacy and security features with their own UX.

//SUPPORT THE CHANNEL:
☕ There’s no obligation, but if you want to support the channel and what I create, click the link below to buy me a coffee, so I can stay awake while researching topics for future videos.

//COMMANDS AND LINKS IN VIDEO:
https://sideofburritos.com/blog/how-to-install-grapheneos-on-pixel6/

//NEWSLETTER SIGNUP:
https://sideofburritos.com

//CONTACT:
For all subscribers, please use this email: hi(at)sideofburritos.com
PGP Key: https://sideofburritos.com/contact/

//VPS PROVIDER:
Digital Ocean – https://m.do.co/c/5d8c108285a6

//CHAPTERS:
Intro – 00:00
Installing grapheneOS – 00:15
Supported OS and Browsers – 00:58
How to enable OEM unlocking on Google Pixel 6 – 01:29
How to install grapheneOS as non-root – 03:12
How to boot into the bootloader interface – 03:50
Connecting the phone via USB – 04:40
Unlocking the bootloader – 05:13
Download grapheneOS – 06:08
Flashing grapheneOS – 06:38
Relocking the bootloader – 07:24
GrapheneOS initial setup – 08:24
Disabling OEM Unlocking – 09:31
Disabling Developer Options – 10:00

//DISCLAIMER:
Links included in this description might be affiliate links. If you purchase a product or service with the links that I provide I may receive a small commission. There is no additional charge to you!

This video is for educational purposes only.

#grapheneOS #Pixel6

Share this: