ArpokratOS Hardened is a de-Googled, kernel-hardened Android built on GrapheneOS. You buy the Pixel, flash it yourself, and verify every step — no phone ever passes through our hands.
Don't trust us. Verify us.
We didn’t reinvent hardened Android. We started from what the security community already trusts most.
ArpokratOS is a fork of GrapheneOS — the hardened Android widely regarded as the gold standard for mobile privacy. We inherit its years of security review instead of starting from scratch, then add what it leaves out: a built-in messenger, system-wide Tor, and kernel-level radio lockdown.
Not switched off in settings. Removed where software can’t quietly turn them back on.
On a normal phone, GPS, Bluetooth, and NFC are toggles any app, update, or malware can flip back on. ArpokratOS disables them at the kernel level — there’s no setting to re-enable and no driver for an app to reach.
Some protections you trigger under pressure. Others run on their own. ArpokratOS has both.
Two safeguards guard the phone at rest. A duress PIN lets you wipe the device instantly if you’re forced to unlock it, and an automatic restart every four hours flushes your encryption keys out of memory, returning the phone to a locked, fully encrypted state until you unlock it yourself.
Messaging with no phone number or account — plus a non-custodial wallet, installed and ready on first boot.
ArpokratOS comes with Arpokrat Messenger already installed: chats with no phone number, email, or account, encryption that raises the bar against ‘Harvest Now, Decrypt Later’ capture, and a non-custodial wallet whose keys never leave your device.
The one-tap Tor from Messenger, extended to everything the phone does — optional, and off until you turn it on.
Turn TorVPN on and the whole device routes through the Tor network — not just one app — hiding your IP from the services you connect to. It’s the OS-level engine behind Messenger’s one-tap Tor, and it stays off until you choose to use it.
ArpokratOS is built on GrapheneOS, which is fully open source — and the Arpokrat-specific additions are open source too. You don’t have to take our hardening on faith; you can read exactly what we changed. Security you can’t audit isn’t security.
Built on GrapheneOS · Open source · Auditable
One family of phones, chosen for one reason: only Pixel lets you install a custom OS and then re-lock it with Verified Boot intact.
The phone never passes through our hands — and your own browser checks the software before it installs.
You buy your own Google Pixel and flash ArpokratOS yourself, so no Arpokrat-handled device ever reaches you — closing the transit-tampering gap on our side. That can’t vouch for Google’s own hardware supply chain; it only takes Arpokrat out of the chain of custody. And you don’t have to trust the download: the web-installer verifies the software in your browser before it writes anything.
ArpokratOS builds on GrapheneOS, so we don't claim to out-harden it — we credit it. Here's where each project puts its focus.
| Capability | GrapheneOS | CalyxOS | Murena / e OS | ArpokratOS Hardened |
|---|---|---|---|---|
| Hardening approach | Extreme | Moderate (microG) | Everyday / conventional | Extreme (GrapheneOS-based) |
| Built-in messenger, no phone/email/account | Not included | Not included | Not included | Arpokrat Messenger, preinstalled |
| System-wide Tor routing | Via a separate app | Via a separate app | Via a separate app | Built in (TorVPN) |
| Radio lockdown (GPS/BT/NFC) | User toggles | User toggles | Standard Android settings | Disabled at kernel level |
| Update model | Free, community-maintained | Free, nonprofit-maintained | Free OS; paid devices & cloud | One-time license · lifetime updates |
| Support | Community | Community | Community + paid options | Commercial · <24h reply · 24/7/365 |
ArpokratOS Essential is on the way for people who want serious privacy but still need GPS, Bluetooth, and NFC for everyday life. It keeps those radios available, with Arpokrat Messenger and TorVPN still built in — the same foundation, tuned for daily convenience instead of maximum lockdown.
ArpokratOS Hardened is a one-time $349 license with lifetime updates for one device. You buy the Pixel, flash it yourself, and check every step along the way.
Get ArpokratOS — $349Requires a compatible Google Pixel (8 through 10a), which you buy separately — the phone is not included. One device · lifetime updates.
Just want the app? Get Arpokrat Messenger →
Deploying to a team? Explore Arpokrat Enterprise →