Auditor

GrapheneOS

About this app

The Auditor app uses hardware security features on supported devices to validate the integrity of the operating system from another Android device. It will verify that the device is running the stock operating system with the bootloader locked and that no tampering with the operating system has occurred. It will also detect downgrades to a previous version. Supported devices:

See the supported device list for a list of devices which can be verified by using them as the Auditee.

It cannot be bypassed by modifying or tampering with the operating system (OS) because it receives signed device information from the device's Trusted Execution Environment (TEE) or Hardware Security Module (HSM) including the verified boot state, operating system variant and operating system version. The verification is much more meaningful after the initial pairing as the app primarily relies on Trust On First Use via pinning. It also verifies the identity of the device after the initial verification.

See the tutorial for detailed usage instructions. This is included as the Help entry in the app menu. The app also provides basic guidance through the process. See the documentation for a more detailed overview.

Ratings and reviews

It's mostly over my head, but it's pretty awesome to check my graphene OS on my new pixel is legitimate. It's a super easy app to use. Highly recommended!

Brilliant app that allows folks to have an out-of-band verification mechanism that their device is running an unmodified OS.

Excellent for anyone concerned about security.

What's new

Notable changes in version 77:

• update CameraX library to 1.3.0
• update Gradle to 8.4
• update Kotlin to 1.9.20
• update NDK version to 26.1.10909125 instead of using the older default set by the Android Gradle plugin

See https://github.com/GrapheneOS/Auditor/releases/tag/77 for the release notes.