GrapheneOS: getting started guide (EN)

31 pages. 24 chapters. 3 levels. Available in English, Russian and French.

🟢 BEGINNER: the basics, no tech skills

• What GrapheneOS changes, and what it doesn't
• First boot: unlock code, private DNS, updates
• The essential apps: Signal, SimpleX, Proton, KeePassDX, Mullvad, Syncthing…
• What you should never do
• Beginner checklist

🟡 INTERMEDIATE: built-in features and settings

• Per-app network and sensor permissions
• Vanadium, the hardened browser with built-in ad blocking
• Encrypted offline backups with Seedvault
• Duress PIN: one code that wipes everything
• User profiles and Private Space
• Sandboxed Google Play: keep the apps you need, without giving Google the keys

🔴 ADVANCED: verification, hardening, borders

• Verify your install: boot screen, key fingerprint, Auditor attestation
• BFU vs AFU: why you power off, not just lock
• Biometrics: why a code beats your finger
• The SIM: what GrapheneOS can't hide
• Full border crossing protocol and checklist

No magic. No paranoia theater. Just a phone that works for you, not on you.

🔍 Every PDF ships with its SHA-256 hash. Check it before you open it.

🔸 Trust none. 🔸 Verify everything.