Comparison of Android-based Operating Systems

This is a comparison of popular Android “ROMs” (better term: AOSP distributions or Android-based OS). Please note I’m not affiliated with any of these projects and I am not giving any specific recommendation. If you think anything is factually incorrect, please let me know.

DivestOS was originally included in this comparison but it was discontinued at the end of 2024.

Comparison of Android-based Operating Systems

Last updated: 2 August 2025

	GrapheneOS	CalyxOS	IodéOS	/e/	LineageOS	“Stock” Android
Based on	AOSP	AOSP	LineageOS	LineageOS	AOSP	AOSP
Freedom
Free and open source (FOSS)?	Ja	Ja	Ja	Ja	Ja	Nein
Deblobbed?	Yes, significantly	Yes, significantly	Yes, minimal	Yes, minimal	Yes, minimal	Nein
Eigenschaften
Network controls for apps	Direct and indirect access	Direct access only	Direct access only	Direct access only	Direct access only	Nein
Network-based location (without GNSS)	Opt-in with server choice	Yes, using microG location	Yes, using microG location	Yes, using microG location	Nein	Yes, using Play Services
System-wide connection/tracker blocking	Private DNS setting, or via VPN app	Private DNS setting, or via VPN app	iode-snort app, Private DNS, or VPN	Private DNS setting, or via VPN app	Private DNS setting, or via VPN app	Private DNS setting, or via VPN app
E2E-encrypted phone backups	Yes (Seedvault)	Yes (Seedvault)	Yes (Seedvault)	Yes (Seedvault)	Yes (Seedvault)	Yes, but requires Google login
Notification forwarding from other user profiles	Ja	Nein	Nein	Nein	Nein	Nein
Duress PIN (to wipe device)	Yes, see here	Nein	Nein	Nein	Nein	Nein
Android Auto compatible	Yes (sandboxed), see here	Yes (w/ privileged permissions), see here	Yes (w/ privileged permissions), see here	Yes (w/ privileged permissions), see here	Nein	Yes (w/ privileged permissions)
Google Pay compatible	Nein	Nein	Nein	Nein	Nein	Yes (w/ privileged permissions)
Call recording	Ja	Only in selected regions, see here	Only in selected regions, see here	Only in selected regions, see here	Only in selected regions, see here	Depends on regions and manufacturer
Option to enable screenshots in all apps	Nein	Nein	Nein	Nein	Nein	Nein
Degoogling (connections to Google) COLOURS
eSIM activation	Google eUICC w/o data sharing	Google eUICC (preinstalled)	Google eUICC (preinstalled)	Google eUICC (preinstalled)	Google eUICC (preinstalled)	Google eUICC (preinstalled)
Provider for network-based location	None default, GrapheneOS, Apple, or Google	microG location	microG location	microG location	n/a	Google
SUPL (for Assisted GNSS)	GrapheneOS default, Google or none	Google default, or none	Google default, or none	None default, or Google	Google default, or none	Google
PSDS/XTRA (“Standard” depends on GPS chipset)	GrapheneOS default, Standard, or none	Standard (excl. Google) default, or none	Standard (excl. Google) default, or none	None default, or Standard	Standard default, or none	Standard
Connectivity check/captive portal	GrapheneOS default, Google, or none	Google (can be changed)	Kuketz.de (can be changed)	Murena.io (related to /e/) (can be changed)	Google (can be changed)	Google (can be changed)
DNS connectivity check	GrapheneOS default, or Google	Google	Google	Google	Google	Google
DNS server fallback	Cloudflare	Cloudflare	Quad9	Quad9	Google	Google
Network time	GrapheneOS default, or none	Google (can be changed) & carrier	NTP.org (can be changed) & carrier	NTP.org (can be changed) & carrier	Google (can be changed) & carrier	Google (can be changed) & carrier
Hardware attestation provisioning	GrapheneOS default, or Google	Google	Google	Google	Google	Google
DRM (Widevine) provisioning	GrapheneOS default, or Google	Google	Google	Google	Google	Google
Google Play Services
Implementation	GmsCompat (sandboxed Google Play)	microG	microG	microG	None by default. It’s possible to install microG manually (LineageOS supports signature spoofing for microG since 2024). Alternatively, there are ROMs with microG preinstalled or one can add Google apps during the installation process, but this is not officially supported by LineageOS.	Google Play Services
Optional?	Yes (not preinstalled)	Yes (preinstalled but opt-out)	Yes (preinstalled but opt-out)	Can be disabled via developer mode		No (preinstalled without opt-out)
Runs in standard app sandbox?	Ja	Nein	Nein	Nein		Nein
Can be limited to user or work profile?	Ja	Ja	? (TBC)	? (TBC)		Nein
Signature spoofing needed/allowed?	Nein	Only for Google signature	Only for Google signature	Only for Google signature		Nein
Push notifications via Google FCM?	Ja	Optional	Optional	Optional		Ja
Google Play Integrity?	Passes Basic Integrity only, see here	Passes Basic Integrity only	No but basic integrity expected soon	No but basic integrity expected soon		Ja
Option to mark apps as installed by Play Store?	Yes if signature matches	Done if installed from Aurora Store	Done if installed from Aurora Store	Nein	Nein	Nein
Datenschutz
Storage scopes	Yes, see here	Nein	Nein	Nein	Nein	Nein
Contact scopes	Yes, see here	Nein	Nein	Nein	Nein	Nein
Per-app sensor controls	Yes, see here	Nein	Nein	Nein	Nein	Nein
Per-connection DHCP state flushing	Ja	Nein	Nein	Nein	Nein	Nein
MAC address randomization	Per connection, see here	Per network	Per network	Per network	Per network	Per network
SUPL: IMSI or phone number sent?	Nein	Nein	Nein	Nein	Nein	Ja
Qualcomm XTRA: user agent sent?	Nein	Partially (for Qualcomm chips)	Partially (for Qualcomm chips)	Partially (for Qualcomm chips)	Partially (for Qualcomm chips)	for Qualcomm GPS chips
Closed cross-profile package leaks?	Ja	Nein	Nein	Nein	Nein	Nein
Closed device identifier leaks?	Yes, see here	Nein	Nein	Nein	Nein	Nein
Metadata stripping for screenshots	Yes, see here	Yes, see here	Nein	Nein	Nein	Nein
EXIF metadata stripping for photos	Yes, see here	Nein	Nein	Available as option	Nein	Nein
Location tagging for photos	Opt-in	Opt-in, see here for more info	Opt-in	Opt-in	Opt-in	Opt-out
Tracking through Android Advertising ID?	Not part of the system	Randomized ID	Randomized ID	Randomized ID	Not part of the system	Yes, but can be deleted in settings
Security
Verified boot (if supported by device)?	Yes, incl. system app updates	Yes, but excl. system app updates	Yes, but excl. system app updates	w/ test keys; excl. system app updates	Nein	Yes, but excl. system app updates
Hardware-based security verification	Yes, see here	Nein	Nein	Nein	Nein	Some devices, see here
System app downgrade protection	For updates and boot, with fs-verity	For updates (incomplete)	For updates (incomplete)	For updates (incomplete)	For updates (incomplete)	For updates (incomplete)
Secure application spawning?	Yes (exec)	Nein	Nein	Nein	Nein	Nein
Hardware memory tagging?	Yes, if supported by device	Nein	Nein	Nein	Nein	Nein
Android Runtime JIT compilation/profiling	AOT compilation w/o profiling	Interpreter/JIT with profiling	Interpreter/JIT with profiling	Interpreter/JIT with profiling	Interpreter/JIT with profiling	Interpreter/JIT with profiling
Dynamic code loading prevention for apps	System, opt-in for non-system apps	None	None	None	None	None
Secure TLS for SUPL?	TLSv1.2	TLSv1.1 or TLSv1.0	TLSv1.1 or TLSv1.0	TLSv1.1 or TLSv1.0	TLSv1.1 or TLSv1.0	TLSv1.1 or TLSv1.0
Fallback DNS server with DNSSEC?	Ja	Ja	Nein	Ja	Ja	Ja
Secure connection to network time server?	HTTPS via GrapheneOS server	NTP w/o NTS and carrier-based time	NTP w/o NTS and carrier-based time	NTP w/o NTS and carrier-based time	NTP w/o NTS and carrier-based time	NTP w/o NTS and carrier-based time
Can disable USB-C and pogo pins data?	Default (while locked), see here	Nein	Nein	Nein	Nein	Nein
Can disable USB-C charging?	Opt-in (after boot), see here	Nein	Nein	Nein	Nein	Nein
Can disable USB connections?	Default (while locked), see here	Default (while locked), software only	? (TBC – like Lineage or stock?)	? (TBC – like Lineage or stock?)	Opt-in, software only	Device admin API
Can auto-disable WiFi if unused?	Ja	Ja	Nein	Nein	Nein	Nein
Can auto-disable Bluetooth if unused?	Ja	Ja	Nein	Nein	Nein	Nein
Can auto-disable NFC if unused?	Ja	Nein	Nein	Nein	Nein	Nein
Auto-reboot timer for locked devices	Ja	Yes, with flaws (no proper BFU state)	Nein	Nein	Nein	Nein
2-factor fingerprint unlock	Yes (fingerprint + PIN), see here	Nein	Nein	Nein	Nein	Nein
Hardened system components	Yes, hardened memory allocator, kernel, libc, webview (Vanadium), SELinux policy, and additional hardening. See here	No (same as AOSP)	No (same as AOSP)	No (same as AOSP)	No (same as AOSP)	No (same as AOSP)
Updates
Security update speed (AOSP subset of ASB)	Usually same day	Currently no updates	2-4 weeks, sometimes longer	1-2 months, sometimes longer	1-2 weeks, sometimes longer	Depends on phone vendor
Full patches on fully supported devices	Several days	Currently no updates	Several to many months	Many months to over a year	Several to many months	Depends on phone vendor
Partial security updates (ASB) after EoL date	until 5 years from launch	Currently no updates	Several years	Several years	Several years	By definition: No
Number of Android versions supported	Usually 1 Android version	Currently no updates	Usually 1 Android version	2-3 Android versions	Usually 3 Android versions	Usually 3 Android versions
Webview update speed	<2 days	Currently no updates	<2 weeks	Several weeks/months	<2 weeks	Depends on phone vendor
Supported devices	Hardware requirements	Hardware requirements
Asus*	Nein	Nein	Nein	Older devices only	Older devices only	Yes (ZenUI)
Fairphone	Nein	Currently not available	Ja	Ja	Ja	Ja
Google	Ja	Currently not available	Ja	Ja	Ja	Ja
Motorola	Nein	Currently not available	Ja	Ja	Ja	Ja
Oneplus	Nein	Nein	Ja	Older devices only	Ja	Yes (OxygenOS)
Samsung*	Nein	Nein	Older devices only	Older devices only	Older devices only	Yes (OneUI)
Sony	Nein	Nein	Ja	Older devices only	Ja	Ja
Xiaomi	Nein	Nein	Older devices only	Older devices only	Ja	Yes (HyperOS)
* these manufacturers don’t support bootloader unlocking anymore for all or most of their new devices. “Older devices only” = no devices released since 2023.

Appendix 1: using different profiles in Android

It is possible to use different profiles to separate apps, files and other data from each other. From least to most separate from the main user profile, the options are: work profile, private space (since Android 15), and secondary users. Below is a comparison how they differ:

Appendix 2: Which other alternative mobile operating systems are there?

Besides Android and Android-based free & open source operating systems (see the table above), the only viable alternative for most people is Apple’s iOS. There have been many attempts to establish a third mobile OS, but so far none of them have been successful: The below is a non-comprehensive list of mobile operating systems, both those you can try today and those that tried and failed in the past:

• iOS
• Android, both preinstalled proprietary distributions like Samsung’s OneUI or Xiaomi’s HyperOS, and open source forks of AOSP, such as GrapheneOS FOSS or LineageOS FOSS
• Windows Mobile/Phone († 2020)
• BlackBerry OS († 2018)
• Symbian († 2012)
• Mobile Linux distributions which can run generic (desktop) Linux applications, such as postmarketOS FOSS und PureOS FOSS or mobile spins of desktop Linux distros such as Fedora, OpenSUSE, OpenMandriva, Debian (Mobian), Manjaro etc. FOSS (see here for a good list)
• Other mobile OS using the Linux kernel but unable to run generic (desktop) Linux apps so they need apps specifically developed for them (Android technically also fits in this category):
  • SailfishOS
  • Ubuntu Touch FOSS
  • KaiOS
  • FirefoxOS († 2015) FOSS
  • Tizen († 2017 – for smartphones at least, it’s still used in Smart TVs)
  • Meego († 2012) FOSS
  • Maemo († 2011)
  • webOS († 2011 – for smartphones at least, it’s still used in Smart TVs)