Updates

• Operating system security updates delivered automatically over-the-air.
• Every single build is tested before the release to avoid device malfunctions caused by bad updates.

Verified Boot

CalyxOS supports fully verified boot and bootloader re-locking to ensure that the OS has not been modified and maintain physical security equivalent to stock Android.

Bundled apps

CalyxOS comes with a list of suggested free and open-source software (FOSS) to facilitate private online access. You can choose whether to install them in the Setup Wizard. Since these apps are included in the OS, they will always be available when needed, whether you are connected to the internet or not.

• Breezy Weather: A powerful, open-source Material Design weather app.
• CoMaps: Easy map navigation - Discover more of your journey - Powered by the community
• DAVx⁵: CalDAV/CardDAV Synchronization and Client
• GCam Photos Preview: Preview photos from Google Camera
• OnionShare: Securely and anonymously share files using the Tor network
• OONI Probe: Open Observatory of Network Interference (OONI)
• Riseup VPN: Secure VPN powered by Bitmask
• Scrambled Exif: Remove the metadata from your pictures before sharing them
• Signal: Signal Private Messenger
• Thunderbird: Free Your Inbox: Thunderbird is a 100% open source, privacy focused email app.
• Tor Browser for Android: Experience real private browsing without tracking, surveillance, or censorship.
• Tor VPN: Tor-powered with per-app routing, access unblocking & network-level privacy.

Default options

• Browser default: Calyx Chromium (Chromium)
• Search engine default: DuckDuckGo

App Store

F-Droid

F-Droid Basic is the preferred app store for CalyxOS. All the apps available in F-Droid are free and open source software, and contain no trackers or advertising.

• CalyxOS’ default app store, F-Droid installs during the Setup Wizard to enable seamless app downloads on your first day running CalyxOS.
• In addition to the standard F-Droid source for apps (aka “repository”), CalyxOS includes a source for CalyxOS apps, which allows us push out out-of-band updates for various apps when needed.

Aurora Store

Aurora Store is an alternative client to the standard Google Play Store. It uses the same standard catalog of apps and installs apps directly from the Google servers.

• Aurora Store provides the option to download and install applications without your Google account.
• If you want to install paid apps, or if anonymous mode is not working, you can additionally enter your Google account credentials in the Aurora Store settings (some paid apps may not work).
• CalyxOS gives Aurora Store special privileges so that app updates can be automatically installed. New app installs and uninstalls still must be confirmed as normal.

Backup with SeedVault

SeedVault allows you to securely back up your phone. All backups are encrypted and decrypted on your device, so you are the only one who is able to read the contents. CalyxOS gives SeedVault special permissions to allow full backup and restore.

• File backup: documents, photos, all of your files are also backed up.
• Local backup: using USB Storage (recommended)
• Remote backup: using NextCloud (experimental)

Dialer

• Built-in support for Signal and WhatsApp calling options.
• Additional support for the ‘Sensitive Numbers’ feature to hide helpline numbers, such as domestic violence, child abuse, or suicide hotlines from your call log.

The Datura Firewall (Firewall)

The Datura Firewall gives you fine-grained control over how each app can access the network. You can customize each app’s access to the internet.

• Full network access control
• Background network access control
• Connecting to Wi-Fi, mobile data, or only via a VPN

App Compatibility with microG

CalyxOS uses microG, an open-source service, to enable apps and programs that need Google Play Services to function so that you can use them with privacy and anonymity.

• Location services: Positon or BeaconDB are available for replacing Google location services
• Address search powered by Nominatim.

Network

• Google DNS is replaced as fallback with Cloudflare DNS, which has been audited for privacy by a third party auditor.
• Cloudflare DNS is available as a Private DNS provider.

SIM Support

Settings

• Network & Internet
  • Internet
    • Network preferences
      • Turn off Wi-Fi automatically (Wi-Fi timeout)
  • Hotspot & Tethering
    • Allow clients to use VPNs
  • VPN
    • VPN App Settings
      • Global VPN
  • Private DNS
    • Cloudflare DNS
• Connected devices
  • Turn off Bluetooth automatically (Bluetooth timeout)
• Display
  • Font
  • Icon shape
  • LiveDisplay
    • Reading mode (Grayscale)
    • Color calibration
    • Picture adjustment
  • High touch sensitivity
• Security
  • Show Panic option (temporarily unavailable)
  • Panic option settings
  • Auto reboot
  • Restrict USB
  • Screen lock settings
    • Scramble layout
    • Quick Settings (allowing toggling quick settings on secure lockscreen)
• Privacy
  • Privacy dashboard
• System
  • Buttons
    • Show arrow keys while typing
    • Invert layout (navigation bar)
  • Status Bar
    • Network traffic monitor
    • System icons (status bar icons)
  • Gestures
    • Active Edge
    • System navigation
      • Gesture navigation
        • Navigation hint (hide bottom bar)
  • Backup (SeedVault)
  • Work Profile (to isolate app and data from your main profile)
  • microG Settings
  • System updates (OTA)
  • Developer options
    • Restrict cleartext traffic completely, globally.
    • Airplane mode radios
• About phone
  • Android version
    • CalyxOS version
    • Android security update
  • CalyxOS version

Misc

• Storage encryption is on by default