Notes ·
GrapheneOS Says Strong Mobile Security Is Legal and Should Remain That Way
GrapheneOS responded to the prosecution involving its duress-password feature by stating plainly that creating and using the operating system is legal and constitutionally protected in the United States.
The project also says it has no obligation to weaken its protections for law enforcement. That matters because the larger risk in cases like this is that a privacy tool becomes treated as suspicious simply because it successfully prevents unauthorized access.
GrapheneOS is more than a custom Android build maintained by a few anonymous developers. The operating system is supported by the GrapheneOS Foundation, an active Canadian federal nonprofit incorporated in March 2023 under the Canada Not-for-profit Corporations Act.
The foundation was created to collect and distribute donations, fund developers and provide a legal entity that can absorb liability and help shield individual contributors from legal attacks. The project itself remains international and open source rather than being owned by the nonprofit or tied to a particular company.
That structure is especially interesting given the project’s history. GrapheneOS previously relied on a commercial sponsor while it was known as CopperheadOS. According to the project, that relationship ended badly when the company attempted to take control of the project and seized its infrastructure and donations. GrapheneOS later rebuilt itself as an independent project and says it will not become closely tied to a single company again.
The foundation also says it does not plan to become a conventional business. Remaining nonprofit allows it to focus on privacy and security without needing to monetize user data, lock features behind subscriptions or shape the operating system around the interests of investors.
That may be one of the most important things about GrapheneOS. Strong privacy software needs more than good code. It needs funding, legal durability and an organization capable of protecting the people building it when the software becomes inconvenient to governments or large companies.