GrapheneOS adds secure paste and call recording, and works around a Pixel-only Android 17 QPR1

GrapheneOS adds a lot in its latest updates: it shipped eight releases between early September and early October 2026, and together they add two features people have asked about for years: a way to stop apps reading your clipboard, and call recording built into the phone app. In the background, the project also had to work around a change on Google’s side that kept the newest Android update for Pixels out of the open-source code. Everything here comes from the official GrapheneOS release notes and the project’s own posts.

Secure paste: apps can’t read your clipboard unless you paste

Release 2026091700 added a per-app toggle that blocks an app from reading the clipboard, plus a global switch that makes blocking the default for every app. With it on, an app only gets what you copied when you actively paste: through the text selection menu, your keyboard app, a keyboard shortcut or an accessibility service.

This matters because a copied password, two-factor code or address sits on the clipboard where any app in the foreground can quietly read it. Stock Android shows a “pasted from clipboard” notice, but by then the app has already read it. GrapheneOS calls the feature secure paste; the code was merged on September 13 (pull request #435).

Details that help day to day:

• The built-in keyboard gained a paste chip that offers your last copied item, so pasting stays one tap.
• Keyboard apps keep clipboard access, so clipboard sync in a keyboard still works.
• It’s opt-in and per app. If an app like KDE Connect needs to read the clipboard, you switch secure paste off for that app only.
• Release 2026091900 cut the “clipboard read blocked” notice from once a minute to once every 6 seconds, and you can turn the notice off per app.

Call recording, built into the Dialer

Release 2026090500 added automatic call recording to GrapheneOS’s Dialer, with a per-call switch to stop recording and an on-screen notice while a recording runs. Release 2026091000 added the option to record calls with every contact by default, with a list of excluded numbers. Release 2026091700 then made that exclusion mode the default for anyone turning automatic recording on for the first time.

A practical warning that no software setting fixes: recording laws differ by country and US state. In many places you must tell the other person, or get their consent, before you record. Check the rules where you and the other caller are before you turn this on.

Google kept Android 17 QPR1 Pixel-only

The bigger story is behind the scenes. Google released Android 17 QPR1 for Pixels on September 15 but didn’t publish it to the Android Open Source Project (AOSP), the public code that GrapheneOS and every other alternative Android is built on. GrapheneOS called it “the first release since Android Honeycomb (3.x) adding new APIs for app developers without a release to the Android Open Source Project” (GrapheneOS, Sep 16).

GrapheneOS says it had finished porting QPR1 before release but couldn’t ship it without the public source. Instead it took a workaround:

1. 2026091700 backported the Pixel cellular modem firmware from QPR1.
2. 2026091900 backported QPR1’s carrier settings to fix carrier problems the modem update caused.
3. 2026092500 brought Pixel kernel drivers, firmware and hardware support code fully to the QPR1 level, while the operating system itself stays on the public Android 17 base.

In practice, a GrapheneOS Pixel gets QPR1’s hardware fixes without waiting for Google to publish the code. GrapheneOS expects other phone makers to receive these changes with Android 17 QPR2 in December 2026.

The QPR1 stutter fix, and a VPN leak closed

QPR1 brought a regression in Google’s Pixel kernel that causes “stuttering, lag and outright freezes under memory pressure.” Because GrapheneOS had pulled in the QPR1 drivers, it was affected too, and it fixed the problem in release 2026100200 by restoring the earlier memory read-ahead behavior (GrapheneOS, Oct 2). According to the project, the stock Pixel OS had no fix when it posted.

The same release turned off unprivileged hardware keepalives, which GrapheneOS found could leak traffic outside a VPN.

Smaller changes worth knowing

• Private Space: apps inside a locked Private Space no longer show up in Launcher search, and Settings now warns that Android’s “hide Private Space” option is only cosmetic and can be detected.
• SIM PIN scrambling: the toggle that shuffles the SIM PIN keypad is back, in the new Protect SIM card screen.
• Storage: on 10th-generation Pixels, GrapheneOS reclaims storage the stock OS reserves for preloaded AI models.
• Messaging app: a new in-house team took the Messaging app from version 13 to 16 during September.
• Security patches: the current release, 2026100600, carries the full 2026-10-05 patch level and October Pixel firmware; we covered it in our October bulletin story.

How to get these features

If you already run GrapheneOS, these arrive as normal over-the-air updates on every supported Pixel, from the Pixel 6 through the Pixel 10a. Secure paste is a per-app toggle with a global default switch, and call recording is part of GrapheneOS’s own Dialer app.

If you’re new to it, our browser install walkthrough takes about 20 minutes, and the Pixel 9a specs and OS page is a good starting point for picking a phone.