DivestOS, the lightweight and secure ROM to revive your forgotten mobile phone

  • DivestOS extends the life of abandoned mobile phones with privacy and security improvements based on LineageOS.
  • It integrates system hardening, SELinux enforcing, default encryption, and privacy-focused FOSS apps like F-Droid, Silence, and Hypatia.
  • Compared to alternatives like GrapheneOS, CalyxOS or Replicant, it offers a balance between security, compatibility and broad device support.
  • It's a particularly interesting option for Android users who want more control and updates on phones without official support.

What is DivestOS?

If you have a somewhat old phone, with abandoned updates and getting slower all the time, you've probably wondered if there's a way to give it a second life, for example, flashing a ROM step by step without giving all your data away to Google. This is where [the solution/tool] comes in. DivestOS as a lightweight ROM, focused on privacy and securityIdeal for those phones that the manufacturer has abandoned but that can still perform very well.

Furthermore, when compared to other alternatives such as GrapheneOS, CalyxOS, LineageOS, or even more radical projects like ReplicantIt's normal to feel confused about which system to choose, which phones are compatible, and to what extent convenience is sacrificed for privacy. Let's break all this down calmly, highlighting the advantages of DivestOS, its approach, how it compares to other ROMs, and what to consider if you're coming from the Android or even iOS world.

What is DivestOS and why has it become so interesting?

DivestOS is a alternative mobile operating system based on LineageOSCreated as a "soft fork," it adds its own layer of security, privacy, and extended support to devices abandoned by manufacturers. It's not a corporate project, but rather the work of a single developer, Tad (known as SkewedZeppelin), who has maintained it almost entirely by hand since 2014.

The main objective of DivestOS is extend the lifespan of discontinued phones, reduce dependence on Google, and harden the system in the face of known vulnerabilities. The project starts from a very pragmatic premise: it does not aim to achieve absolute perfection or total freedom from proprietary blobs, but rather opts for an "80% solutions" approach that provides real improvements to the average user instead of getting stuck on the ideal.

SP Flash Tool
Related article:
SP Flash Tool: How to flash the ROM step by step

The developer himself acknowledges that the Devices supported by DivestOS are not 100% free In the strict sense of free software, because they still rely on proprietary firmware and blobs for certain components (modem, GPU, etc.). Even so, the project is distinguished by its scope—it supports many older models—and by its persistence in releasing patches, hardening the kernel, and improving privacy where possible.

Origin and evolution: from CyanogenMod to DivestOS

To understand where DivestOS fits in, it's worth remembering that it's based on LineageOS, the successor to CyanogenModCyanogenMod marked an era as the most popular custom ROM for Android, until the company behind the project closed and the community continued the code under the name LineageOS.

DivestOS began its public journey on December 31, 2014, with custom images based on CyanogenMod 12 for just five devices. A few days later it was already offering versions based on CyanogenMod 12.1. Over time it migrated along with the evolution of Android, and currently modern builds are based on LineageOS 18.1 and later versions, also taking advantage of Android 11 and higher as a base.

The philosophy has always been the same: Take the solid foundation of LineageOS/AOSP and reinforce it. with hardening measures, privacy adjustments, removal of unnecessary proprietary components, and expansion of security support for mobiles that no longer receive official manufacturer patches.

Key features of DivestOS: security, privacy, and support

One of DivestOS's greatest strengths is that it doesn't just offer a clean ROM, but also incorporates concrete security measures and well-thought-out privacy improvementsAmong its most prominent features are the following.

How to configure DivestOS

1. LineageOS Smooth Forking with FOSS Focus

DivestOS is a unofficial fork of LineageOSThis means it inherits device support and many features from this project, but introduces its own changes. The system aims to use [unspecified features] as much as possible. Free and open-source software applications and components (FOSS)reducing the presence of proprietary tools and replacing them with open alternatives where feasible.

2. System and kernel hardening

One of the areas where DivestOS's work is most noticeable is in the operating system and kernel hardeningThis includes stricter security configurations, patches for known vulnerabilities (CVEs), improvements to how the system manages memory and permissions, and a consistent policy of keeping SELinux in enforcing mode.

Furthermore, whenever possible, Encryption is applied by default on the deviceThis protects user data from unauthorized access if the phone is lost or stolen. It doesn't include root support by default, precisely to reduce the attack surface, although those who need it can find advanced methods outside the official ROM.

3. Proprietary blob management and verified boot

DivestOS includes mechanisms for automatically remove unnecessary owner blobs that come pre-installed on many ROMs. The idea is to keep only what's essential for the hardware to function, thus reducing opaque code that could introduce security or tracking risks.

On devices that allow it, the ROM offers the possibility of relocking the bootloader After installation, use a verified boot system. This combines the advantages of a custom ROM with a level of protection similar to that of the official ROM against malicious system modifications.

4. Updates and ongoing support

The project is committed to a cycle of monthly updates with integrated security patches and recommendations for recognizing Symptoms of a corrupted ROM and how to actIt also incorporates differential OTA updates (Delta OTA), which reduce the size of downloads when updating, and a rather curious option: the possibility of receiving OTA updates through the Tor network.

This last feature is especially interesting for those who want hide their update patterns and prevent metadata leaks by checking new versions, something that almost no other mobile system offers as standard.

5. Pre-installed privacy-focused apps

Instead of filling the phone with bloatware, DivestOS opts to include a small set of well-chosen apps with a focus on privacyAmong the most notable are:

  • F-Droid pre-installed, for easy access to free software repositories for Android.
  • A privacy-focused web browser based on Firefox, with adjustments aimed at minimizing tracking.
  • La app Silence, a fork of Signal designed only for encrypted SMS, which replaces the default SMS application in AOSP.
  • Hypatia, an open-source real-time malware scanner designed for Android.

With this package, DivestOS aims to ensure that the user already has good privacy tools ready to use from the first startup, including options such as Most secure VPNs for Android devicesavoiding dependence on closed or highly invasive data alternatives.

DivestOS versus other privacy-focused mobile systems

To assess whether DivestOS is the ideal operating system for your mobile phone with limited support, it's worth comparing it with other popular alternative ROMs and systems focused on privacy and security. Each has its niche and its commitments.

GrapheneOS: maximum security, but only for Pixel

One of its distinctive features is that It only provides official support for Google Pixel devices. (from models like the Pixel 5a to the Pixel 9 family, plus the Pixel Fold and the Pixel Tablet). Developers focus on these phones because they require the fewest modifications to run a hardened AOSP and because Google offers very robust firmware and security patch support, with up to seven years of updates for the Pixel 8 and later.

GrapheneOS allows the installation of the Official versions of Google Play Services as normal appsWithout special system privileges, Google Play functions like any other application, without access to the system kernel or excessive permissions, preventing it from running intrusively in the background. For those who want to completely do without Google, it's possible to use the phone without these services.

The system introduces improvements such as enhanced memory encryption, unique keys per user, baseband isolation to run WiFi and Bluetooth in separate processes, advanced restrictions on app network connections, and very detailed security settings (e.g., Exploit Detection, periodic forced restarts, USB-C port blocking, automatic WiFi/Bluetooth shutdown, etc.).

The main drawback of GrapheneOS is twofold: on the one hand, It only works for Pixel.On the other hand, it sacrifices many specific Google features, such as the AI ​​capabilities of Pixel phones, Google Photos with its native integration, and the Google Camera with all its processing power. These apps can be reinstalled, but some of the added privacy the system offers is lost.

CalyxOS, /e/, crDroid, LineageOS and Replicant

Besides GrapheneOS, there are other projects that are often included in the comparison when someone is looking for a more privacy-friendly ROM than the factory ROM.

Calyx OS It's another Android-based ROM, with a balanced approach between security and usability. One detail that really stands out is that integrates microGIt's a free implementation of Google Play services. This allows you, for example, to use banking apps that require Google Play Services without having to install the official Google services, which is very attractive if you need mobile banking but don't want to give your data to Google.

On the other hand, crDroid It is a ROM known for being highly customizableDesigned for those who want to tinker with the interface, advanced settings, and every corner of the system. While it also incorporates some privacy and performance improvements, its focus isn't as obsessively on hard security as in the case of GrapheneOS or DivestOS.

/e/OS (formerly Eelo) It presents itself as an Android ecosystem without Google, with its own cloud services, an app store with privacy ratings, and a fairly user-friendly desktop. It's an interesting option if you're looking for something more. “turnkey” with integrated services, although it sometimes lags a bit behind in terms of patches and support for specific models.

At a more radical extreme we find Repeat, which pursues the objective of being as free as possible in terms of softwareIt replaces as many proprietary components as possible with open-source alternatives, but this comes at a significant loss of features: many models lose hardware support (camera, Wi-Fi, modem) or become severely limited. It's ideal if your absolute priority is software freedom and you don't mind giving up much of the usual smartphone functionality.

Lastly, LineageOS remains the reference ROM for many users They want a relatively clean Android experience, more frequent updates than those from the manufacturer, and certain extra freedoms. However, its approach isn't as aggressive in privacy and security as DivestOS or GrapheneOS; we could say it's a middle ground between a stock ROM and these more extreme alternatives.

SP Flash Tool
Related article:
SP Flash Tool: How to flash the ROM step by step

The ecosystem of free and open mobile operating systems

DivestOS and GrapheneOS are part of a much broader picture of alternative operating systems for mobile phonesThese range from Android variants to GNU/Linux-based or hybrid platforms. Among the best-known options are:

  1. /e/OS (Eelo), a distrusted Android with its own ecosystem.
  2. AOSP (Android Open Source Project), the free base on which many ROMs are built.
  3. Calyx OS, privacy-oriented with microG integration.
  4. Graphene OS, ultra-secure and restricted to Pixel devices.
  5. Kaios, system for feature phones, only partially open source.
  6. LineageOS, the most widespread community ROM successor to CyanogenMod.
  7. MoonOS (WebOS), community successor to WebOS for some devices.
  8. MobianDebian adapted for mobile phones.
  9. Plasma MobileKDE Plasma mobile environment on GNU/Linux.
  10. postmarket OSAlpine distribution designed to extend the life of phones.
  11. PureOS, Purism's offering for mobile phones and computers, based on Debian.
  12. Repeat, the strictest option regarding free software on Android.
  13. Sailfish OS, hybrid system with Linux base and layer compatible with Android apps.
  14. TizenSamsung's system for wearables, TVs and some mobile phones.
  15. Ubuntu Touch, a mobile version of Ubuntu maintained by the community.

In this lineup, DivestOS stands out for Focus specifically on Android phones with limited support and strengthen privacy and security without completely abandoning compatibility. nor does it require very specific hardware as in the case of GrapheneOS.

Android vs iOS: General context of security, performance and support

When someone considers switching to DivestOS, GrapheneOS, or any other ROM, they almost always come from the Android world, but It's worth seeing how these options stack up against the classic Android-iOS duo. that dominates the mobile market.

Android is an operating system developed by Google and licensed to numerous manufacturersiOS, on the other hand, is owned by Apple and is only distributed on iPhones and other Apple devices. This means that, in practice, you can't install iOS on an Android phone or vice versa; the system is tied to the hardware you buy.

In terms of basic security, both Google Play Store as the App Store They perform checks on applications to reduce the presence of malware, although they are not infallible. Even so, it is important to only download apps from reputable sources. reliable sources and known developersBecause malicious applications can always slip through, especially if external APKs are installed on Android.

Android offers a a wider variety of apps and many more free optionsHowever, Android phones typically receive fewer years of updates than iPhones, increasing the risk of security vulnerabilities in the medium term. This is precisely what ROMs like DivestOS aim to address, extending the lifespan of phones that the manufacturer no longer updates.

In terms of customization, Android wins hands down: It allows you to change the appearance of the interface, widgets, and launchers. and fully configure the visual and sound experience of games and apps. iOS, on the other hand, opts for a more closed design, with fewer customization options, but a very carefully crafted aesthetic consistency.

In terms of performance and battery life, iOS usually comes out on top because Apple designs both the hardware and the software simultaneously.This optimizes the entire system. This results in very smooth phones with good battery life, even with less RAM compared to many Android devices. iPhones are generally durable and reliable, although repairs and component replacements tend to be more expensive and complex.

In the Android world, quality depends a lot on the manufacturer and the model: There are very cheap mobile phones with shorter lifespans. and other high-end models that rival or surpass iPhones in certain aspects. The advantage is that component repairs are usually more affordable, and there are more technical service options outside of the official brand.

Ultimately, both Android and iOS are mature and competent systems; the decision usually comes down to What do you value more: the openness and variety of Android, or the integration and polish of iOS?For those who prioritize privacy, device control, and extended support, entering the world of ROMs like DivestOS is a way to take Android a step further.

DivestOS: ideal for mobile phones with limited support and users who value their privacy

If you have a mobile phone like a A slightly older Lenovo, a Moto G4 Play or a Xiaomi Mi A2 Since it no longer receives official updates, DivestOS is positioned as a very attractive option. It allows you to continue using perfectly good hardware with an updated, robust, and privacy-friendly system.

Compared to alternatives such as CalyxOS or /e/OS, DivestOS is situated at a very interesting pointIt maintains a strong focus on security (hardening, SELinux enforcing, default encryption, blob removal) but without making you give up a relatively familiar Android experience and without tying you to a specific brand like Pixel.

For those who need apps that rely on Google services—like banking apps, work platforms, or push notifications— DivestOS may require some additional setup work — for example, to secure your apps— or even consider systems like CalyxOS with integrated microG. But if your absolute priority is minimizing tracking and extending your phone's lifespan, DivestOS offers a very attractive balance.

What is Fastboot mode on Android for?
Related article:
What is Fastboot mode, what is it for, and how to disable it on Xiaomi and Android?

Ultimately, choosing between DivestOS, GrapheneOS, CalyxOS, LineageOS, or even sticking with the stock Android ROM depends on Your mobile phone model, your tolerance for technical complexity, and the weight you give to privacy versus convenienceFor the average user with an unsupported phone, who wants a lightweight, secure, and straightforward system, DivestOS fits particularly well as that sensible middle ground that restores dignity to a phone that the manufacturer had already written off. Share this expert guide with other users and help them learn about the topic.


Update Rom without data loss or installed applications
You might be interested in:
How to update Rom without data loss or installed applications
Follow us on Google News