GrapheneOS finally moving to Motorola support in 2027 changes the conversation. For years the answer to “which phone runs GrapheneOS” was “a recent Pixel and nothing else”, and for anyone unwilling to buy a Google phone that meant no privacy Android at all. With the Motorola branch coming and the sandboxed Play services model now stable, the useful question shifts from “which phone” to “which apps make a GrapheneOS install actually livable”. The best apps for GrapheneOS-compatible phones in 2026 are the ones that replace Google defaults without asking you to give up features you actually use.
We picked eight installs that cover the categories a stock phone user notices first: an app store, a browser, a keyboard, messaging, VPN, password manager, calendar, and a YouTube alternative. All are free, all work on GrapheneOS without invasive permissions, and every one has been tested on a Pixel running the current stable channel.
What to look for
An app on a GrapheneOS phone earns its slot by respecting the environment:
- Works without Google Play services or accepts the sandboxed Play install without demanding SafetyNet or Play Integrity attestation.
- Requests the narrowest permission set that gets the job done, and functions when a permission is denied.
- Ships as a signed APK from a trustworthy source (F-Droid, GrapheneOS App Store, Accrescent, or the developer’s own build server).
- Updates automatically or with one tap. A privacy phone that runs six-month-old apps has other problems.
- Does what it does offline, or over a network path you can inspect.
Quick comparison
| App | Best for | Platforms | Free plan | Starting price | Rating |
|---|---|---|---|---|---|
| F-Droid | Open-source app catalog | Android | Yes | Free | 4.6 |
| Aurora Store | Anonymous Google Play downloads | Android | Yes | Free | 4.5 |
| Molly | Hardened Signal fork | Android | Yes | Free | 4.7 |
| Vanadium | GrapheneOS’s default hardened browser | GrapheneOS only | Yes | Free | 4.7 |
| ProtonVPN | Audited VPN with a free tier | Android, cross-platform | Yes | About 5 USD/mo | 4.6 |
| Bitwarden | Cross-device password manager | Android, cross-platform | Yes | About 1 USD/mo Premium | 4.7 |
| NewPipe | YouTube frontend without accounts | Android | Yes | Free | 4.8 |
| Fossify Calendar | Google Calendar replacement | Android | Yes | Free | 4.6 |
1. F-Droid, best open-source app catalog
F-Droid is where the entire GrapheneOS ecosystem starts. Every app in the catalog is open-source, built by F-Droid from source, and signed by F-Droid. The 2026 client fixed the historically slow update path by shipping incremental repository fetches, and the new privileged installer that GrapheneOS supports skips the extra tap per install.
Where it falls short: the F-Droid build pipeline lags behind upstream releases by days or weeks for some apps. If you need a security fix the moment it lands, use the app’s own APK first and let F-Droid catch up.
Pricing:
- Free: unlimited, no account.
- Paid: no paid tier.
Platforms: Android.
Download: f-droid.org or GrapheneOS App Store
Bottom line: the first thing to install after GrapheneOS itself.
2. Aurora Store, best for anonymous Google Play downloads
Aurora Store is a Google Play client that lets you install and update Play-store apps without signing into a Google account. On GrapheneOS it slots in alongside the sandboxed Play services install and covers the apps not on F-Droid: banking, ride-hailing, and the handful of proprietary tools you cannot avoid.
Where it falls short: anonymous accounts sometimes get rate-limited and the retry loop is manual. Some apps that check Play Integrity will still refuse to run, though most banking apps in 2026 accept the sandboxed setup.
Pricing:
- Free: unlimited, open-source.
- Paid: no paid tier.
Platforms: Android.
Download: auroraoss.com or via F-Droid
Bottom line: the pragmatic bridge to Play-store apps that never left the Play store.
3. Molly, best hardened Signal fork
Molly is a Signal fork with a locking timer, additional at-rest encryption using SQLCipher, and an optional Molly-Socket UNIFIED-Push build that removes the Google FCM dependency Signal still carries. On GrapheneOS it pairs perfectly with the sandboxed Play services setup, or with UNIFIED-Push if you avoid Play services entirely.
Where it falls short: the FOSS build lacks push notification unless you self-host or trust a public UNIFIED-Push server. Every Signal contact still sees you as a Signal user, so the messaging privacy floor is Signal’s.
Pricing:
- Free: unlimited, open-source.
- Paid: no paid tier.
Platforms: Android.
Download: molly.im or via F-Droid
Bottom line: the pick when you need Signal but want the encryption-at-rest and FOSS notification path Signal upstream refuses to ship.
4. Vanadium, best hardened browser
Vanadium is GrapheneOS’s own Chromium fork, patched for tighter site isolation, network partitioning, and safer JIT. It is the system WebView too, so an update to Vanadium fixes every in-app browser on the phone at the same time. In 2026 it added a proper reader mode and per-site DNS-over-HTTPS overrides.
Where it falls short: it is GrapheneOS-only, so a switch back to another ROM means a switch to another browser. No cloud sync of history or bookmarks.
Pricing:
- Free: bundled with GrapheneOS.
- Paid: no paid tier.
Platforms: GrapheneOS only.
Download: ships with GrapheneOS; updates via the GrapheneOS App Store.
Bottom line: the default browser and the system WebView. Keep it as the default, add Firefox or Mull if you want extensions.
5. ProtonVPN, best audited VPN with a free tier
ProtonVPN has one of the shortest audit trails in the VPN industry (public no-logs audits, open-source clients on every platform) and its free tier is one of a very small number that carries no bandwidth cap. On GrapheneOS it installs from F-Droid or Aurora, and its Android client supports the platform’s per-app VPN switch.
Where it falls short: the free tier limits you to servers in three countries. The paid Plus plan is not cheap unless you catch a two-year offer.
Pricing:
- Free: unlimited data, three countries, one connection.
- Paid: about 5 USD per month on a two-year plan for Plus.
Platforms: Android, iOS, Windows, macOS, Linux.
Download: protonvpn.com or via F-Droid
Bottom line: the pick when you want a VPN that will not add another logs-in-Panama scandal to the news cycle in 2027.
6. Bitwarden, best cross-device password manager
Bitwarden is the pragmatic password manager for a GrapheneOS setup where the desktop is a Mac or Linux box. Open-source client, optional self-hosted server (Vaultwarden runs on a Raspberry Pi in an evening), 2026 build supports passkeys stored on the phone.
Where it falls short: the free plan skips a couple of MFA options and the file-attachment upload cap. Autofill on GrapheneOS needs the accessibility permission granted, which is a friction point people forget.
Pricing:
- Free: unlimited passwords and devices, TOTP, passkeys.
- Paid: about 1 USD per month for Premium (advanced 2FA, file attachments, emergency access).
Platforms: Android, iOS, Windows, macOS, Linux, web, browser extensions.
Download: bitwarden.com or via F-Droid
Bottom line: the choice when you want a password manager that syncs everywhere without giving your vault to a proprietary cloud.
7. NewPipe, best YouTube frontend without accounts
NewPipe streams YouTube (and PeerTube, Bandcamp, SoundCloud) without a Google account or the YouTube app. Background playback, downloads, subscriptions stored locally, no ads, no telemetry. On a GrapheneOS phone with no Play services it still works because it uses public YouTube endpoints directly.
Where it falls short: YouTube changes its API periodically and NewPipe breaks briefly until the maintainers ship a patch. Sponsorblock-style features live in the fork NewPipe Sponsorblock, not the mainline app.
Pricing:
- Free: fully free.
- Paid: no paid tier.
Platforms: Android.
Download: newpipe.net or via F-Droid
Bottom line: removes the last real reason to sign into Google on a GrapheneOS phone.
8. Fossify Calendar, best Google Calendar replacement
Fossify Calendar is the actively maintained fork of the discontinued Simple Calendar Pro. It supports CalDAV sync (pair with Nextcloud or Radicale for a self-hosted calendar), local backup, and recurring events with proper timezone handling.
Where it falls short: no shared calendars natively, though a CalDAV server behind it supplies that. UI is functional rather than modern.
Pricing:
- Free: fully free, open-source.
- Paid: optional donation on Play Store.
Platforms: Android.
Download: fossify.org or via F-Droid
Bottom line: the calendar to install once you decide to walk away from Google Calendar completely.
How to pick the right one
The GrapheneOS install matters more than any one app choice. From there:
- Install F-Droid with the privileged extension first. Everything else follows.
- If you need proprietary apps (bank, ride-hail, work), add Aurora Store and use it for those specific installs only.
- For messaging, Molly with the sandboxed Play services build handles Signal and gets you FCM push. Switch to Molly-FOSS with UNIFIED-Push when you drop Play services entirely.
- Keep Vanadium as the default browser and system WebView. Add Firefox or Mull only for extensions.
- Sign up for ProtonVPN free first, upgrade only if you actually hit the country limit.
- Bitwarden for passwords across every device. Self-host Vaultwarden when the trust model matters.
- NewPipe for YouTube, Fossify Calendar for calendaring, and you have a phone that does not touch Google outside the sandboxed Play services install.
FAQ
Do I need Google Play services on GrapheneOS?
Not always. The sandboxed Play services install is optional and runs as a regular app with no special permissions. If your must-have apps do not need it (Signal via Molly and UNIFIED-Push, plus most F-Droid apps), skip it entirely.
Will my banking app work on GrapheneOS?
Most 2026 banking apps work with the sandboxed Play services setup. A small number that require Play Integrity’s strongest attestation still refuse. The GrapheneOS wiki tracks known-good and known-bad apps.
Can I install regular Play Store apps on GrapheneOS?
Yes, via Aurora Store (anonymously) or the sandboxed Play services install signed into a Google account. Both approaches keep the app isolated in a normal user profile with no elevated privileges.
Is F-Droid safe?
F-Droid rebuilds every app from source and signs it. The tradeoff is a delay behind upstream releases, occasionally days for a security update. For fastest updates on critical apps, install the developer APK directly and use F-Droid as a fallback.
Will GrapheneOS work on the new Motorola phones?
Support is planned for 2027. The Motorola branch will follow the same relockable-bootloader security model that keeps GrapheneOS on Pixel today. Older Motorola phones without that guarantee will not be supported.
What is the best VPN for GrapheneOS?
ProtonVPN and Mullvad are both trusted picks. ProtonVPN has the free tier; Mullvad is anonymous-account only. Both are open-source clients that install cleanly from F-Droid or the developer site.
