GrapheneOS protections against data extraction from locked devices

GrapheneOS provides enhanced security against data extraction from locked devices by building on Android 17's standard features, hardware security (currently limited to Pixel devices), and strong disk encryption that forces attackers to either exploit the OS or brute force credentials. The system implements advanced protections including a secure element with rate limiting that enforces increasingly long delays after failed unlock attempts (4 hours after 10 attempts, 41 days after 15), insider attack resistance requiring owner authentication for firmware updates, and support for 128-character passwords with optional two-factor fingerprint authentication. GrapheneOS plans to expand hardware support beyond Pixels through partnerships with Motorola Mobility and Qualcomm by 2027.