Hardened OS for Pixel

Hardened OS.
Nothing to leak.

A degoogled Pixel OS with verified boot, RAM zeroing, hardware-backed keys and identity shielding at the radio boundary. The full suite and the panic kit are built into the OS; policies come from the same portal as iPhone and Android.

Defence in depth

Hardened from the bootloader up.

Each layer is independent. Compromise one and the next still holds, and the panic kit is always one gesture away.

L5
Suite + MDM policySecure Messenger, Vault, Secret, Connect VPN, Protect, Secure Keyboard, Device, all from the Anonymous Appstore. Policy enforced.
L4
Guard panic kit, OS levelPanic buttons, remote wipe by secret code, inactivity wipe, brute-force wipe, USB wipe.
L3
Identity shieldingIMEI, IMSI, MEID, ICCID and serial rewritten before they reach any app or network query.
L2
Degoogled, hardened OSNo Google services or accounts, hardened memory allocator, sandboxed everything, RAM zeroing on lock and reboot, our own update channel.
L1
Verified boot + secure elementLocked bootloader, hardware attestation, keys never leave the chip.
Identity shielding

The network sees a different phone.

IMEI, IMSI, MEID, ICCID and serial are replaced before they ever reach an app or a tower query. Values rotate per profile; the real identifiers stay in the secure element.

Radio boundary
IMEI35 420911 ·······→86 7731 02 ······IMSI204 08 ·········→234 15 ·········ICCID8931 ··········→8944 ··········Serial3A0B1 ·······→9FC7E ·······
rotates on profile switch · real values never exported
Stealth · hidden apps

One gesture. A stock Pixel.

In normal mode you see Secure Messenger, Vault, Signal, Molly, WhatsApp and the rest. Enter stealth and the launcher shows only the standard apps anyone expects. The suite is gone from recents, search and settings until you bring it back.

18:06Normal
Secure Msgr
Vault
Guard
Connect VPN
Signal
Molly
WhatsApp
Secret
Protect
Device
Camera
Settings
Gmail
Maps
YouTube
Chrome
Photos
Calendar
Drive
Clock
Camera
Phone
Messages
Settings
RAM zeroing

Lock it and the memory is gone.

Keys and decrypted data live in RAM only while the device is unlocked. On lock, on reboot and on any panic trigger, that memory is overwritten before anything else happens, so a seized phone has nothing left to read.

On lockOn rebootOn panicCold-boot resistant
Locked
keys ........ zeroed
vault cache . zeroed
messenger ... zeroed
clipboard ... cleared
Guard · built in

Panic kit at the OS level.

On Hardened OS the panic kit isn't an app that can be killed. It hooks the power button, lock screen, modem and USB port. Wipe destroys the keys first, then factory resets.

Panic buttonsRemote wipe · secret codeInactivity wipeBrute-force wipeUSB wipe
Hold 3 seconds
Keys destroyed, then factory reset. Cannot be undone.
Cancel
Wiping device
ram zeroed ........... ok
keys destroyed ....... ok
vault ................ ok
user data ............ ok
factory reset ........ ok
Cannot be cancelled
Device erased
RAM zeroed · keys destroyed · factory reset complete
Secure Keyboard

Default keyboard, no exceptions.

Hardened OS ships with Secure Keyboard as the only input method. No network permission, no telemetry, local dictionary, clipboard guard, and it's zeroed with the rest of RAM on lock.

Input methods
Secure Keyboardoffline · default · locked by policy
Active
Other keyboardsinstallation blocked by MDM
Blocked
Flash · QR · done

Flashed in the browser. Set up by a QR.

Flash from the web installer over USB, lock the bootloader, scan the QR from your partner. The phone boots with panic, network and stealth settings pre-installed and the Anonymous Appstore ready; the user downloads everything else themselves.

Hardened OS installer
Pixel · connectedUSB
Unlock bootloader
Flash slot a + b
Install Hardened OS build 2026.10
Lock bootloader
Scan QR · policy, Guard, VPN, stealth pre-installed
Anonymous Appstore ready
sha256 a91f…c04e · matches published
Which package

Secure iOS, Secure Android or Hardened OS?

Capability
Hardened OS for Pixel
Full suite incl. Secure Keyboard
Yes
Yes
Yes
No app stores, no Apple/Google accounts
Yes
Yes
Yes
MDM policy enforcement
Supervised
Device owner
OS level
Stealth
Dual profile
Hidden apps
Hidden apps
Panic buttons, remote & inactivity wipe, brute-force protection
Yes
Yes
Yes
USB
Restrictions
USB wipe
USB wipe
RAM zeroing
—
—
Yes
Identity shielding (IMEI/IMSI)
—
—
Yes
Keep your own device
iPhone
Yes
Pixel

Hardened OS for Pixel. Through a partner.

Flashed by your partner, set up by one QR, apps from the Anonymous Appstore. Nothing to sign in to.