GrapheneOS Overhauls Default Apps and Launches 'Secure Paste' Privacy Feature

GrapheneOS is launching a comprehensive modernization of its bundled default applications alongside a new "secure paste" system. These updates signal a strategic shift toward providing a fully integrated, high-security user experience that reduces reliance on third-party or Google-managed services.

As part of the overhaul, the project has rewritten its Messaging app using Android Compose to deliver a new user interface. GrapheneOS also plans to integrate RCS support into the Messaging app, utilizing Messaging Layer Security (MLS) for end-to-end encryption. This move is specifically designed to lower user dependence on Google Messages. Beyond messaging, the project is entirely replacing the default keyboard and the AOSP Gallery app, which GrapheneOS described as "an awful starting point."

A New Approach to Clipboard Privacy

Central to this update is the introduction of "secure paste," a feature that fundamentally changes how the operating system handles the clipboard. Traditionally, mobile and desktop operating systems rely on API-based clipboard access, which can allow apps to scrape sensitive data—such as passwords or two-factor authentication codes—set by other applications.

GrapheneOS is replacing this model with a scoped permission system. The secure paste feature blocks applications from reading clipboard content created by other apps, although apps retain the ability to read content they have set themselves. To ensure the system remains usable, secure paste is integrated directly into keyboard shortcuts, accessibility services, input methods, and the standard selection toolbar.

Expanding the Security Philosophy

Historically, GrapheneOS focused its engineering efforts on the base operating system's sandboxing and security, leaving bundled AOSP apps largely untouched since users could install alternatives. However, the project has recently increased its investment in these tools. "We've heavily ramped up the resources we're investing into the bundled apps," GrapheneOS stated.

By extending its "Scopes" philosophy—previously applied to storage and contacts—to the clipboard, GrapheneOS is addressing a long-standing privacy flaw in mobile OS design. This transition from an open API to a restricted, permission-based model significantly hardens the device against data theft by invasive applications.

Future Outlook

Looking ahead, the project continues to prioritize the removal of outdated AOSP components. GrapheneOS confirmed that the replacement keyboard will include swipe typing to maintain modern usability standards. The project's broader goal remains the creation of a cohesive ecosystem where the bundled apps match the rigorous security and UX standards of the underlying operating system.