Install
minutes
Flashed from your browser, no desktop app, no command line.
Web installer flashes your Pixel from Chrome or Edge. Same approach GrapheneOS uses, refined for people who aren't developers.
Flashing erases everything on the device. Back up photos, 2FA seeds, authenticator apps. Your carrier SIM keeps working, Google Pay and Play may need re-setup in the public environment.
The process
Check compatibility
Pick your Pixel model below. If it is supported, you will see a green badge.
Enable OEM unlock
Settings → About → build number (tap 7×) → Developer options → OEM unlocking.
Launch web installer
Connect USB-C. Open the installer in Chrome or Edge. Flash takes 6 to 10 minutes.
Set three PINs, boot
Public PIN for daily life. Hidden PIN for the hidden vault. Duress PIN wipes the vault under coercion.
What you need
Browser
Chrome, Chromium, or Edge with WebUSB. Firefox/Safari not supported, limitation of WebUSB.
Cable
USB-C data cable (not charge-only). Original Pixel cable works best.
Device
Supported Pixel model with 25%+ battery and OEM unlock enabled.
Supported devices
Supported on Pixel. Deliberately narrow.
We deliberately don't link to stores, buying with cash locally is part of the deniability story. Confirm your model below, then source it the way that fits your threat model.
Pixel 6 / 6 Pro
Full supportPixel 6a
Full supportPixel 7 / 7 Pro
Full supportPixel 7a
Full supportPixel 9 / 9 Pro / 9 Pro XL
Full supportPixel 9a
Full supportPixel 9 Pro Fold
Full supportTroubleshooting
When it doesn't just work.
- Device not recognized
- Check USB-C cable is data-capable, not charge-only.
- Bootloop after flash
- Connect to recovery, re-flash.
- Lost Hidden PIN
- There is no recovery phrase. If you forget the Hidden PIN, the hidden data is unrecoverable by design, that is deniable encryption, not a bug.
- Banking app refuses to load
- As on other hardened Android builds, a few banking apps that enforce strict device integrity checks may not run.