Notes ·
GrapheneOS Is Finally Getting Hardware Designed for GrapheneOS
GrapheneOS says Motorola is actively porting GrapheneOS to future devices, with official support expected on Motorola flagships in 2027.
This is a huge deal for GrapheneOS.
Until now, officially supported GrapheneOS phones have effectively meant buying a Google Pixel. That was not because GrapheneOS only wanted Pixels. Its hardware requirements are unusually strict, and other manufacturers have not provided the combination of hardware security, firmware updates and support for alternative operating systems it requires.
Motorola is taking the opposite approach:
Instead of asking GrapheneOS to support existing Motorola hardware, Motorola is changing future hardware so GrapheneOS can support it properly.
Motorola officially announced the long-term partnership at Mobile World Congress in March, saying the companies will collaborate on future devices engineered for GrapheneOS compatibility, along with joint research, software improvements and new security capabilities.
GrapheneOS has been more specific about where this is heading.
The project says the first supported devices are expected to be 2027 flagships similar to the current Motorola Signature, razr fold and razr ultra, because those future models are expected to meet its update and hardware memory-tagging requirements. At least one flagship is expected first, with other flagship variants becoming much easier to support once that work is complete.
Motorola has not formally announced those 2027 product names yet, so I would treat the exact lineup as GrapheneOS's expectation rather than a finished Motorola product announcement.
This is much deeper than an unlocked bootloader
GrapheneOS does not consider "you can flash another ROM" sufficient hardware support.
Its requirements include:
- hardware memory tagging
- verified boot with rollback protection for both firmware and the operating system
- a hardware-backed StrongBox keystore
- hardware key attestation
- isolated cellular, Wi-Fi, Bluetooth and other components
- A/B firmware and OS updates
- long-term firmware, driver and HAL security updates
- hardware-level USB data controls
- full hardware security functionality while running an alternative operating system
GrapheneOS says there is substantial work involved in bringing its production-quality hardware memory-tagging support from Google's Tensor platform to Snapdragon, and that it is working with both Motorola and Qualcomm on the hardware needed to meet those requirements.
The current Motorola Signature shows where this is heading. Motorola already ships it with a Snapdragon 8 Gen 5 and promises up to seven years of Android OS and security updates. The 2026 hardware still does not satisfy all of GrapheneOS's requirements, particularly hardware memory tagging, which is why the project is waiting for the 2027 generation rather than weakening its standards to support today's phone.
That is exactly what I want to see.
GrapheneOS also gets something it has never really had
A hardware manufacturer willing to work with it.
GrapheneOS has said the Motorola devices will support unlocking and then securely relocking the bootloader with another operating system installed. It also expects access to substantially cleaner device-support code and the ability to produce hardened firmware and driver builds rather than extracting proprietary components from Motorola's stock operating system.
That could give GrapheneOS influence below Android itself.
Hardware.
Firmware.
Drivers.
The Linux kernel.
The secure element.
Those layers matter just as much as the operating system when the goal is defending a phone against sophisticated exploitation.
It also reduces one of the project's biggest structural risks: GrapheneOS no longer has to depend entirely on Google's willingness to keep making Pixels that permit secure alternative operating systems.
Motorola gets something valuable too. Instead of treating alternate operating systems as something enthusiasts hack onto unsupported phones, it can sell hardware explicitly engineered to support one of the strongest security-focused Android distributions available.
And the partnership is nonexclusive. GrapheneOS says it remains free to work with other manufacturers if they are willing to meet the same standards.
That may eventually be the bigger story.
GrapheneOS spent years proving what a hardened Android operating system could look like on hardware designed by somebody else.
Now a major phone manufacturer is changing its hardware because GrapheneOS told it what a secure phone needs.
That is a very different relationship.
Read the latest GrapheneOS update.