Buying a phone with GrapheneOS pre-installed can be safe, provided you verify it yourself when it arrives: compare the verified boot key hash shown at startup with the one GrapheneOS publishes, factory reset the phone from recovery, and set up the Auditor app. Those are the checks the GrapheneOS FAQ recommends for any pre-installed phone, and they work without trusting the seller, including us.
This page explains the real risks, then walks through each check step by step. It was written in November 2026 from the GrapheneOS FAQ and install guide; follow the official pages if anything there has changed.
What can go wrong with a pre-installed phone
- It is not really GrapheneOS. A seller could install a modified build, or another operating system dressed up to look like it. The verified boot key hash check below catches this, because only the official GrapheneOS signing key produces the published hash.
- The bootloader was left unlocked. An unlocked bootloader turns off verified boot protection. A correctly installed phone shows the yellow "different operating system" notice at startup, not the orange "bootloader unlocked" warning.
- The model is near the end of its support. GrapheneOS has asked sellers not to sell end-of-life or near end-of-life devices. Check the model against the support dates on grapheneos.org; in November 2026 the recommended models are the Pixel 8 and newer.
- It is a carrier model. On a carrier model, the carrier's settings come back if you ever return to Google's own Android, and they can stop the bootloader being unlocked again. Ask for a factory unlocked phone.
- The hardware is worn. Most pre-installed phones are refurbished or used. That is fine, but the seller should state the condition and offer a return period and a warranty in writing.
How to verify the phone, step by step
1. Compare the verified boot key hash
Turn the phone on. Because GrapheneOS is not the operating system the phone was sold with, the startup screen shows a yellow notice that it is loading a different operating system, followed by an ID. On the Pixel 6 and newer that ID is the full hash of the verified boot key. Compare it, character by character, with the hash listed for your exact model in the official install guide at grapheneos.org/install/web. If it does not match, do not use the phone.
2. Factory reset it from recovery
The GrapheneOS FAQ advises a factory reset from recovery on a pre-installed phone, so that nothing the seller did remains on it. Do this before you sign in to anything or copy any data across. To reach recovery, turn the phone off, then hold volume down while you press power until the bootloader screen appears. Use the volume buttons to choose Recovery mode, and press power. At the "No command" screen, hold power and press volume up once to show the menu. Choose Factory reset (or Wipe data/factory reset) and confirm.
3. Set up the Auditor app
Auditor is GrapheneOS's own app for hardware-based attestation: it uses the phone's secure element to confirm that the phone is running genuine, unmodified GrapheneOS with a locked bootloader. You pair it with a second Android phone that also runs Auditor by scanning a QR code, or use GrapheneOS's optional device integrity monitoring service. Repeat the check from time to time for ongoing assurance.
4. Then the everyday checks
- Install the latest system update from Settings, so you know updates arrive normally.
- Confirm the model and storage in Settings, About phone, match what you paid for.
- Set your own PIN or passphrase. A seller should never know it.
What a trustworthy seller does
- Says clearly that it is independent of GrapheneOS, as the project's trademark rules require.
- Sells a recommended model with years of support left, factory unlocked.
- States the condition, delivery time, return period and warranty in writing.
- Tells you how to verify the phone, and expects you to.
We follow these rules for the Google Pixel 9a with GrapheneOS installed we sell ($699 USD): we check the hash and run Auditor before it ships, put the results on a card in the box, and walk you through the same checks on your onboarding call if you want. You should still do them yourself. Our guide where to buy a phone with GrapheneOS already installed compares sellers.
Frequently asked questions
Is it safer to install GrapheneOS myself?
It removes the need to trust a seller, which is why GrapheneOS recommends it. If you buy pre-installed, the checks above give you the same assurance about the software. They cannot tell you about the hardware's condition, which is what a seller's return period and warranty are for.
Can a seller fake the verified boot key hash?
The hash is shown by the phone's own boot firmware, before any operating system starts, and it is derived from the key the installed system is signed with. A build signed with any key other than the official GrapheneOS key shows a different hash.
What if the hash does not match?
Do not use the phone or sign in to anything on it. Contact the seller and return it. If you have the skills, you can reinstall official GrapheneOS yourself with the web installer, provided the bootloader can still be unlocked.
Do I need a second phone for Auditor?
For local pairing, yes: a second Android device running Auditor scans a QR code shown on the phone you are checking. Without one, you can use GrapheneOS's optional device integrity monitoring service.
iTechVista is independent and is not affiliated with or endorsed by the GrapheneOS project or Google. GrapheneOS is free software from grapheneos.org.