● Covered by 1 source · 1 reportLow impact1 neutral
GrapheneOS Details Protections Against Data Extraction from Locked Devices
Key points
- GrapheneOS uses Android 17 and Pixel hardware security features.
- Secure element implements rate limiting for unlock attempts.
- Password character limit extended from 16 to 128.
- Partnership with Motorola and Qualcomm to expand hardware support by 2027.
Enhanced Data Protection
GrapheneOS implements robust defenses against data extraction from locked devices. It leverages standard security features from Android 17 and the secure hardware available on Pixel devices. These measures are designed to protect user data from even advanced attackers.
Secure Element and Rate Limiting
A key component of GrapheneOS's security is the secure element, which enforces rate limiting on unlock attempts. Android 16 QPR2 specifies a secure element that ramps up delays, reaching 4 hours after 10 failed attempts and 41 days after 15, with a total of 20 attempts allowed. GrapheneOS only supports devices that implement this latest generation of secure element rate limiting.
The secure element also includes insider attack resistance, requiring the Owner user to authenticate before firmware updates can be applied. This prevents bypassing rate limiting through coerced firmware modifications. Pixel devices have incorporated secure elements with internal timers and insider attack resistance since the Pixel 2.
Extended Password and Biometric Security
GrapheneOS increases the password character limit from 16 to 128, enabling the use of high-entropy diceware passphrases. To maintain convenience without compromising security, an optional second-factor fingerprint PIN is available. This feature reduces allowed fingerprint attempts from 20 to 5, with incorrect second-factor PIN entries counting towards this limit, facilitating the use of longer passphrases for initial device unlock.
Future Hardware Support
Currently, only Pixel devices provide the necessary hardware security features and updates for GrapheneOS. However, GrapheneOS plans to expand its hardware support by 2027 through a partnership with Motorola Mobility and advancements from Qualcomm, aiming to make these security features available on a wider range of devices.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
Reporting from
GrapheneOS outlined its security features that prevent data extraction from locked devices, building on Android 17 and Pixel hardware. These protections include disk encryption, secure element rate limiting, and extended password character limits, aiming to secure user data against sophisticated attacks.