A phone that answers only to you.
ArpokratOS Hardened is a de-Googled, kernel-hardened Android built on GrapheneOS. You buy the Pixel, flash it yourself, and verify every step — no phone ever passes through our hands.
Don't trust us. Verify us.
Built on GrapheneOS — not from scratch.
We didn’t reinvent hardened Android. We started from what the security community already trusts most.
ArpokratOS is a fork of GrapheneOS — the hardened Android widely regarded as the gold standard for mobile privacy. We inherit its years of security review instead of starting from scratch, then add what it leaves out: a built-in messenger, system-wide Tor, and kernel-level radio lockdown.
- A hardened memory allocator that makes many exploits far harder to land
- Verified Boot anchored in the Pixel’s Titan M2 chip, so a tampered OS won’t start
- Strong per-app sandboxing, with no Google Play services by default
GPS, Bluetooth, and NFC — gone at the kernel.
Not switched off in settings. Removed where software can’t quietly turn them back on.
On a normal phone, GPS, Bluetooth, and NFC are toggles any app, update, or malware can flip back on. ArpokratOS disables them at the kernel level — there’s no setting to re-enable and no driver for an app to reach.
- GPS, Bluetooth, and NFC disabled in the kernel — not a re-enableable setting
- USB restricted to charge-only, with no data path for a hostile cable or port
- Background radio scanning, including Wi-Fi scanning, switched off
Two ways your phone protects itself.
Some protections you trigger under pressure. Others run on their own. ArpokratOS has both.
Two safeguards guard the phone at rest. A duress PIN lets you wipe the device instantly if you’re forced to unlock it, and an automatic restart every four hours flushes your encryption keys out of memory, returning the phone to a locked, fully encrypted state until you unlock it yourself.
- A duress PIN triggers an instant, irreversible wipe — indistinguishable from a normal unlock
- It destroys the encryption keys for good; a fast wipe is also reachable by long-pressing the power button
- An automatic restart every four hours flushes encryption keys from RAM
- That shrinks the window for cold-boot and physical memory attacks, and re-locks the phone until your PIN
Arpokrat Messenger, built in.
Messaging with no phone number or account — plus a non-custodial wallet, installed and ready on first boot.
ArpokratOS comes with Arpokrat Messenger already installed: chats with no phone number, email, or account, encryption that raises the bar against ‘Harvest Now, Decrypt Later’ capture, and a non-custodial wallet whose keys never leave your device.
- No phone number, email, or account to create
- Post-quantum encryption and a built-in non-custodial wallet
- Optional one-tap Tor routing for network privacy
TorVPN routes the whole system through Tor.
The one-tap Tor from Messenger, extended to everything the phone does — optional, and off until you turn it on.
Turn TorVPN on and the whole device routes through the Tor network — not just one app — hiding your IP from the services you connect to. It’s the OS-level engine behind Messenger’s one-tap Tor, and it stays off until you choose to use it.
- System-wide Tor routing, not limited to a single app
- Hides your IP from the services you connect to
- Off by default — you decide when to route through Tor
Don’t trust us. Read the code.
ArpokratOS is built on GrapheneOS, which is fully open source — and the Arpokrat-specific additions are open source too. You don’t have to take our hardening on faith; you can read exactly what we changed. Security you can’t audit isn’t security.
Built on GrapheneOS · Open source · Auditable
Every Pixel that can run it.
One family of phones, chosen for one reason: only Pixel lets you install a custom OS and then re-lock it with Verified Boot intact.
A chain of trust you can verify at every step.
The phone never passes through our hands — and your own browser checks the software before it installs.
You buy your own Google Pixel and flash ArpokratOS yourself, so no Arpokrat-handled device ever reaches you — closing the transit-tampering gap on our side. That can’t vouch for Google’s own hardware supply chain; it only takes Arpokrat out of the chain of custody. And you don’t have to trust the download: the web-installer verifies the software in your browser before it writes anything.
- You source the Pixel yourself — no phone passes through Arpokrat to be intercepted or tampered with
- This removes our link in the chain, not Google’s own hardware supply chain
- The web-installer checks a cryptographically signed release list in your browser first — a mismatch stops everything
- Every image is verified against its published checksum before anything is written to the phone
Hardened Android, honestly compared.
ArpokratOS builds on GrapheneOS, so we don't claim to out-harden it — we credit it. Here's where each project puts its focus.
| Capability | GrapheneOS | CalyxOS | Murena / e OS | ArpokratOS Hardened |
|---|---|---|---|---|
| Hardening approach | Extreme | Moderate (microG) | Everyday / conventional | Extreme (GrapheneOS-based) |
| Built-in messenger, no phone/email/account | Not included | Not included | Not included | Arpokrat Messenger, preinstalled |
| System-wide Tor routing | Via a separate app | Via a separate app | Via a separate app | Built in (TorVPN) |
| Radio lockdown (GPS/BT/NFC) | User toggles | User toggles | Standard Android settings | Disabled at kernel level |
| Update model | Free, community-maintained | Free, nonprofit-maintained | Free OS; paid devices & cloud | One-time license · lifetime updates |
| Support | Community | Community | Community + paid options | Commercial · <24h reply · 24/7/365 |
Want strong privacy without the full lockdown?
ArpokratOS Essential is on the way for people who want serious privacy but still need GPS, Bluetooth, and NFC for everyday life. It keeps those radios available, with Arpokrat Messenger and TorVPN still built in — the same foundation, tuned for daily convenience instead of maximum lockdown.
Own a phone you can actually verify.
ArpokratOS Hardened is a one-time $349 license with lifetime updates for one device. You buy the Pixel, flash it yourself, and check every step along the way.
Get ArpokratOS — $349Requires a compatible Google Pixel (8 through 10a), which you buy separately — the phone is not included. One device · lifetime updates.
Just want the app? Get Arpokrat Messenger →
Deploying to a team? Explore Arpokrat Enterprise →