Run the install from an Android host phone with a USB-C cable.
Pixel Installer app
Turn a Pixel into a managed secure phone from another phone.
The HardenedOS Pixel Installer guides resellers through GrapheneOS installation, bootloader unlock, factory-image flashing, and Device Policy Controller enrollment over USB-C. No laptop. No command line. No hand-written fastboot steps.
Activation gated
Signed images
USB-C guided
DPC enrollment
9:41
Pixel Installer
GrapheneOS + HardenedOS
Managed
Step 3 of 5
Install GrapheneOS
Pixel 8 connected
USB-C host mode active
Ready
shibaCodename
UnlockedBootloader
78%Battery
Signed factory image
GrapheneOS 2026.07
Factory image
72%
Download
Verify
Flash
Enroll
[19:23:08] flashing product.img
This erases the target Pixel. Keep USB connected until enrollment finishes.
Requires a managed HardenedOS activation before first use.
Factory images are verified before the installer touches the target.
Install attempts and outcomes can be recorded back to the reseller panel.
Guided provisioning
Five clear steps instead of a bench full of tools.
Pixel Installer is built for field teams, resellers, kiosks, and customer handoff. The app handles the install sequence, while the platform controls who is allowed to activate and enroll the final device.
Authorize
The installer checks that the host device is activated by HardenedOS management before it can start.
Connect
Plug the target Pixel into the host phone. The wizard walks the operator through fastboot and USB prompts.
Unlock
The user confirms bootloader unlock on the Pixel with the volume and power buttons while USB stays connected.
Flash
The app downloads or accepts a factory image ZIP, verifies it, and drives the GrapheneOS flash.
Enroll
After first boot, the DPC activates, pulls policy, installs required apps, and reports into the reseller fleet.
Built for real deployments
Fast enough for a field kit. Controlled enough for a reseller program.
The installer is not a public flashing toy. It is a reseller-controlled onboarding path for Pixel hardware, designed to get devices into a managed GrapheneOS + HardenedOS state without exposing the workflow to random sideloading.
-
Activation-bound first use
The app can require a HardenedOS-managed host before initial operation. After activation, the app works normally for that operator.
-
Download or local factory ZIP
Use the latest hosted image when online, or select a preloaded GrapheneOS factory image when working from a limited network.
-
Retry without starting over
If USB drops during a bootloader prompt, the downloaded image can be kept for a faster retry after the cable or permission issue is fixed.
Install Event
Pixel provisioned
Pixel 8 · chippy@silent.sim
Device ID 3f1d699a-4443-405c
Bundle verified
OS flashed
DPC enrolled
Apps syncing
TargetPixel 8
Bundleshiba-2026.07
Signaturevalid
Policyapplied
19:23 installer.flash.started
19:28 device.activated
19:29 manifest.synced
Operational safeguards
The app is designed around the mistakes that happen during flashing.
Preflight clarity
Show the target model, expected bundle, bootloader state, and the action about to run before the device is modified.
Plain-language prompts
Operators see when to use volume and power buttons, when to keep USB connected, and when to reconnect permissions.
Managed app handoff
Once the OS boots, the management app activates, receives its manifest, installs required apps, and reports status.
Reseller branding
The phone can come out of provisioning with the reseller's app catalog, launcher layout, wallpaper, and support surface.
Provision Pixels without a laptop.
Pixel Installer turns field setup into a guided app flow: activate, connect, flash, enroll, and hand off a managed device.