Two phones.
One device.
Zero evidence.

Forced to unlock, they see a normal phone. Your real data stays invisible on GrapheneOS.

Start your 48-hour trial →Buy a Deniable Phone

Explore every feature for 48 hours before your annual plan begins.

DeniableOS on Pixel, two environments, one device

What they see. What's really there.

One device. A different PIN opens each environment.

What they see. What's really there.

One device, two environments. A different PIN opens each.

Try each PIN to experience what an attacker would see.

1234Public OS9999Hidden vault0000Duress wipe

Public profile · locked

Try 1234 to reveal.

Hidden vault · locked

Try 9999 to reveal.

1234Public

9999Hidden

0000Duress

About the “Emergency” button

Android’s built-in call function. It does not protect your data. DeniableOS adds the duress PIN above for that.

Real-world pressure

When someone demands your phone.

Choose a situation. See what a normal unlock can expose, and what can stay out of sight.

Person threatened for a phone beside a car in a parking garage

Crypto holder

What if someone wants the wallet, not the password?

Visible after one unlock

Wallet access

Active session

Recovery path

Seed and backups

Holdings

Balances and accounts

Crypto holder

What if someone wants the wallet, not the password?

Visible after one unlock

Wallet access

Active session

Recovery path

Seed and backups

Holdings

Balances and accounts

Three steps.
15 minutes.

No command line. No flashing tools. No technical skills needed.

From a supported Pixel to a deniable daily driver, without a desktop app, a USB drive, or a command line. Here is the whole path.

Step 01

Install from browser

Connect a supported Pixel in Chromium. No desktop app or command line.Supported Pixel + USB-C + Chromium. Web installer flashes DeniableOS like GrapheneOS does. No desktop app needed.

Step 02

Set three PINs

Choose Public, Hidden and Duress PINs.Public PIN for visible life. Hidden PIN for the hidden vault. Duress PIN, entered under coercion, wipes the vault silently.

Step 03

Live normally

Use Public daily. Open Hidden only when you choose.Use the public environment every day. Switch to the hidden vault with your Hidden PIN. When forced to unlock, show the public one.

See install guide

Built on verifiable foundations

Three layers. One job each.

Plain-language proof, one security layer at a time.

Security architecture

01 / 03

Exploded view of a Pixel phone showing its hardware layers

GrapheneOS

Foundation

Hardened Android base

Why it matters

It reduces common attack surface before DeniableOS adds separate environments.

A security-hardened Android base for supported Pixel devices.

Security architecture

01 / 03

GrapheneOS

Foundation

Hardened Android base

Why it matters

It reduces common attack surface before DeniableOS adds separate environments.

A security-hardened Android base for supported Pixel devices.

Trust details you can verify.

Exact price, precise trial terms, guided install and account-linked support. No vague promises.

Exact price before payment

Stripe checkout shows the charge, renewal and billing period before you confirm.

Cancel before trial charge

Your 48-hour trial is $0 today. Cancel inside your account before the exact charge time.

Guided browser install

Compatibility checks run before installation. No command line is required.

Account-linked support

Ask for help from your account. We attach order context, never passwords, PINs or recovery codes.

Start with software

Protect the Pixel you already own.

Try full access for 48 hours. Annual Basic is preselected because it has the lowest monthly equivalent.

$23.25/month

Billed annually at $279/year

Save $80.88 per year, 22%

Start your 48-hour trial

Exact charge shown before confirmation.

Basic includes

Public, Hidden and Duress PIN environments
Android storage encryption
Separate protected data environment
Continuous security updates

Need a ready-to-use Pixel?

Hardware is available separately. Compare device prices after choosing your license.

See phones and full pricing →

What people ask before they buy.

Stop fearing what your phone could reveal.

Start your 48-hour trial →Talk to enterprise

$0 today. Card required. Then $279/year after 48 hours. Exact charge time appears before confirmation.

Two phones.
One device.
Zero evidence.

Forced to unlock, they see a normal phone. Your real data stays invisible on GrapheneOS.

Start your 48-hour trial →Buy a Deniable Phone

Explore every feature for 48 hours before your annual plan begins.

What they see. What's really there.

One device. A different PIN opens each environment.

What they see. What's really there.

One device, two environments. A different PIN opens each.

Try each PIN to experience what an attacker would see.

1234Public OS9999Hidden vault0000Duress wipe

Public profile · locked

Try 1234 to reveal.

Hidden vault · locked

Try 9999 to reveal.

1234Public

9999Hidden

0000Duress

About the “Emergency” button

Android’s built-in call function. It does not protect your data. DeniableOS adds the duress PIN above for that.

Real-world pressure

When someone demands your phone.

Choose a situation. See what a normal unlock can expose, and what can stay out of sight.

Crypto holder

What if someone wants the wallet, not the password?

Visible after one unlock

Wallet access

Active session

Recovery path

Seed and backups

Holdings

Balances and accounts

Crypto holder

What if someone wants the wallet, not the password?

Visible after one unlock

Wallet access

Active session

Recovery path

Seed and backups

Holdings

Balances and accounts