Cost: One Requires a $299 Device, the Other Requires a Pixel
If you're interested in PlugOS, the first thing you should know is that you need a physical piece of hardware, a PlugMate, and it isn’t cheap, with an MSRP of $299 (although at the time of writing, it's on sale for $199). That price gets you the PlugMate, a thin plastic case, and a card with your unique access key.
(Credit: Justyn Newman)Also in the box is an angled USB-C extension that runs the PlugMate behind your phone, making it easier to handle.
(Credit: Justyn Newman)It comes in one memory configuration with 128GB of storage and 4GB of unspecified flash memory. The site shows an additional 6GB/256GB version, but it cannot be selected.
(Credit: PCMag/TrustKernel)The PlugMate uses an octa-core MediaTek Helio G80 mobile processor and runs a virtualized, stripped-down version of Android 14. The outer shell comes in black, red, or starlight gray.
GrapheneOS, on the other hand, is a free, open-source operating system that replaces the one on your phone. You don’t have to purchase anything to get the protection it offers, but there’s a rather big caveat—you need to have a supported Pixel phone for it to work. It’s a no-brainer on the cost front if you already have a Pixel, but the PlugMate becomes more affordable if you have to buy a specific phone for Graphene.
(Credit: PCMag/GrapheneOS)As for support, Graphene is compatible with most OEM-unlocked Pixel phones and tablets starting with the Pixel 6.
Pay close attention to that OEM-unlocked criteria. Some carriers, like Verizon, restrict OEM unlocking, so make sure the device you have (or the one you plan to buy) is carrier-unlocked.
Support for Graphene is set to expand via an upcoming collaboration with Motorola. Graphene will be compatible with flagship Motorola devices in 2027, with potential support for midrange and entry-level devices down the line.
Privacy: GrapheneOS Explains Everything, PlugOS Leaves Questions Unanswered
TrustKernel, the parent company of PlugOS, has mixed privacy standards and policies. I found some good indicators of trust as well as some shortfalls. While there are no records of data breaches or security incidents involving TrustKernel’s prior products, the PlugOS platform is still new, having launched in early 2026.
The company’s security whitepaper covers its numerous security certifications and its adherence to privacy standards, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA). TrustKernel also claims to undergo third-party penetration testing from “top-tier” companies and shows proof of various certifications and awards on its compliance page. However, most of these, such as ISO certifications, are used to verify internal business processes and don’t necessarily indicate that PlugMate was involved in the testing. Without a document outlining the scope of each evaluation, you’re left taking the company at its word.
I reached out to TrustKernel for a statement regarding its audits, and a spokesperson stated that, “The security evaluation was conducted in accordance with EAL4, a widely recognized international standard for security certification,” and provided a certification from the China Cybersecurity Review Technology and Certification Center (CCRC) that you can view below:
(Credit: CCRC)I pressed further, clarifying that I was looking for a public report detailing the scope and results of either a privacy or a security audit. The spokesperson stated, “Given that our product has only recently been launched, related third‑party security and privacy audit reports are still in the process of being developed and finalized. We are in the process of commissioning assessments from other internationally recognized institutions as well. We uphold stringent cybersecurity and data protection standards and will make appropriate information public through the official website in a timely manner once the relevant audit work is completed."
As I’ve learned from testing VPNs, a company’s word doesn’t mean much in a world of frequent data breaches. Other key details, such as data retention periods, are unclear and poorly defined.
On the other hand, GrapheneOS’s documentation is comprehensive and in-depth. It’s also an open-source project, and the full technical details are available in Graphene's GitHub repository.
(Credit: PCMag/GrapheneOS)The FAQ page outlines every aspect of how the company handles data, encryption, and app access. It’s one of the most well-structured privacy documents I have read. It does get technical and dense in parts, but I highly recommend reading through it so that you know exactly how the operating system works.
It offers interesting insights into how regular Android works and the data that apps can access. There are linked guides that explain how Wi-Fi works, including data handoffs, and how permissions can funnel data to places you may never have thought of. Beyond being a good privacy policy, the document is a great place to start if you’re interested in learning about where your data goes when you use a smartphone.
The transparency difference between PlugOS and GrapehenOS is stark. PlugOS and its parent company, TrustKernel, leave a lot of important privacy questions unanswered.
GrapheneOS User Experience: A Clean Android Experience Without the Friction
Running alternative operating systems on anything can be a pain if you’re not familiar with the more technical aspects of the device in question. Graphene makes the process easy with a web-based interface that runs you through the installation process step by step.
(Credit: PCMag/GrapheneOS)All I had to do was connect my Pixel 6 Pro to my PC via USB-C and click the appropriate buttons right there on the web page. It took me about 15 minutes from start to finish to get the device up and running with Graphene. Keep in mind that this change does require a full reset of your Pixel, so make sure you backup any important files before proceeding.
(Credit: PCMag/GrapheneOS)From there, you can use GrapheneOS as you would your regular Pixel. You can run a sandboxed version of the Play Store to fetch apps from, but you have a lot more control over what permissions apps have and for how long. You can decide whether or not to allow network access to any app when you install it, which means you can run essentially any app completely offline.
(Credit: PCMag/GrapheneOS)Graphene doesn’t come with many apps. It has a privacy-focused browser called Vanadium by default, a PDF viewer, and an in-built device auditor. The auditor is a niche but useful tool that uses a second Android phone to confirm your bootloader and operating system haven’t been tampered with or compromised. You can read more about the auditor tool here.
You can expect a speedy interface, since Graphene removes much of the bloat that comes with a standard Android installation. In addition to being an immense privacy boon, Graphene is a good way to breathe new life into an older Pixel that may be slowing down due to frequent heavy updates, especially since it promises five to seven years of support for most devices.
PlugOS User Experience: PlugMate Feels Experimental—and Not Always Reliable
Getting started isn’t as plug-and-play as TrustKernel suggests. First, you must download the PlugOS app, connect your device via USB-C, and then scan your product key to get access for the first time.
(Credit: PCMag/TrustKernel)Unfortunately, I ran into several issues getting the PlugMate to work on all my devices. It wouldn't work at all on my Pixel 9 Pro. It would attempt to connect and let me go through the entire setup process before failing and shutting down. My iPhone 14 faced the same issue.
At first glance, the advertising suggests you can simply plug the PlugMate into a Windows or macOS desktop device, but that isn't the case. The host device needs to support USB On-The-Go (OTG), which significantly limits compatibility. You’ll be limited to tablets and mobile devices for the most part. Luckily, I did get the PlugMate to work just fine on my Samsung Galaxy S23 FE, but keep in mind you may also encounter compatibility issues and errors depending on your host device.
Once you have PlugOS configured, you can enter and enter the virtual Android 14 environment freely. It comes loaded with a handful of privacy-focused apps like the Veil web browser and K-9 Mail. You can also configure a customizable firewall to block or allow specific apps and services. Screenshots are blocked while inside PlugOS, so I had to take pictures externally.
(Credit: PCMag/TrustKernel)Navigation is slow. I experienced multi-minute boot-up times when I installed a few applications, so bear that in mind if you plan to store files on it. In that vein, I struggled to download anything to the device. Apps frequently failed to install completely, and I was unable to successfully download any file larger than 1GB. It took multiple attempts to get each app configured, but each one worked once I set it up.
The PlugMate gets extremely hot when downloading any app or file. According to the American Society for Testing and Materials (ASTM), safe handling temperatures for electronics shouldn’t exceed 93 degrees Fahrenheit.
(Credit: PCMag/ASTM )The PlugMate reached a blistering 122.9 degrees Fahrenheit.
(Credit: Justyn Newman)With an aluminum outer layer, it was hot enough to be uncomfortable to hold. It comes with a thin plastic case, but even that isn’t enough to protect against the extreme temperatures the device emits.
Verdict: PlugOS Has Interesting Ideas, But GrapheneOS Feels More Complete
PlugOS offers some practical advantages as a portable Android environment for devices that wouldn't normally support it. Although I ran into compatibility issues, the PlugMate can work with iOS devices, allowing you to switch between Android and iOS. It can also extend the life of older hardware by providing access to Android 14, giving aging phones support for newer apps and features. That convenience comes at a relatively high price, though.
In terms of overall performance, compatibility, and user control, Graphene delivers a much stronger experience. Even if you don’t already own a Pixel device, older Pixel models are often available for the same price—or less—than a PlugMate and can be configured with Graphene instead. If privacy is your top priority, Graphene is the better option by a wide margin.