GrapheneOS and eSIM: How to Install a Travel eSIM Without Google (2026 Guide)

You run GrapheneOS to keep Google out of your phone. Then installing a travel eSIM turns out to involve a Google component. Most guides skip that detail or describe 2023, when the process really did require sandboxed Google Play.

This guide follows the GrapheneOS usage guide, FAQ and release notes as of October 2026. Where something is only a forum user report, we say so.

How eSIM works on GrapheneOS in 2026

• Baseline eSIM support. Always on. Any eSIM already installed on the phone works, including one you added on the stock OS before flashing GrapheneOS.
• eSIM management. Adding, removing and switching eSIMs. The GrapheneOS usage guide says this needs proprietary Google functionality and is fully disabled by default. You turn it on in Settings > Network & internet > eSIM support, and the setting persists across reboots.

The proprietary piece is Google's eUICC LPA, the app that talks to the eSIM chip and downloads profiles. The release notes call it the eSIM activation app. Since the January 2024 release (2024012600), the toggle works without sandboxed Google Play installed, and the app is isolated from non-system apps so it cannot share data with Play. The usage guide states that eSIM management never shares data with Google Play even when Play is installed, and that it will not connect to a Google service unless the carrier itself uses one.

So you run one closed Google component, without a Google account or Play Services, and without it phoning Google on its own. That is a reasonable trade for most threat models.

Which Pixels support eSIM on GrapheneOS

The GrapheneOS FAQ, last updated 9 October 2026, lists official production support for the Pixel 6, 6 Pro and 6a, the Pixel 7, 7 Pro and 7a, the Pixel Fold, the Pixel 8, 8 Pro and 8a, the Pixel 9, 9 Pro, 9 Pro XL, 9 Pro Fold and 9a, and the Pixel 10, 10 Pro, 10 Pro XL, 10 Pro Fold and 10a.

Google's own Pixel specs list eSIM on every one of those phones. US models of the Pixel 10, 10 Pro and 10 Pro XL are dual eSIM with no physical slot at all, so on those phones the eSIM toggle is not optional. The Pixel Tablet is on the supported list but has no eSIM app, and GrapheneOS hides the toggle there. The Pixel 11 was not on the GrapheneOS supported list at the time of writing.

Before you buy the eSIM

• Update first. An October 2026 firmware issue broke eSIM activation on some 9th generation Pixels. Release 2026101600 fixed NFC, eSE and eSIM firmware updates on those phones. Check Settings > System > System updates before you travel.
• Use the Owner profile. Network settings live in the Owner profile.
• Have stable internet. The profile downloads over Wi-Fi or another SIM.
• Read your plan's install rules. On many plans validity starts at install. Check before you scan.

Step by step: installing a travel eSIM on GrapheneOS

• 1. Turn on eSIM support. Settings > Network & internet > eSIM support. The phone asks for a restart. Do it.
• 2. Open the SIM menu. Settings > Network & internet > SIMs, then Add SIM and the option to set up or download an eSIM. If the SIMs entry is missing or greyed out, check that airplane mode is off and restart.
• 3. Scan the QR code. GrapheneOS stopped auto-granting the camera permission to the activation app back in 2023, so expect a permission prompt the first time.
• 4. Or enter the code by hand. If you would rather not grant the camera, or the scan fails, the setup screen offers manual entry. Paste the full activation code from your provider. It is a single line that begins with LPA:1$. On a Cypher eSIM order, the eSIM passport page shown after payment has a Copy LPA install string button next to the QR, which helps when the QR is on the same Pixel you are installing on and cannot be scanned.
• 5. Wait for the download. If it never gets past "Checking network info..." on a good connection, the official fix is to dial *#*#4636#*#* in the Phone app and enable DSDS in the menu that opens.
• 6. Set it as your data SIM. Pick the travel eSIM for mobile data and turn on roaming in its settings. Most travel eSIMs run in roaming mode, even inside the plan's own country.

If the eSIM shows signal but no data, open the Access Point Names screen for that SIM and choose Reset to default. Several forum users fixed it that way.

→ Curious what the network can still see once you are connected? Read Can an eSIM be tracked?

Should you turn the toggle off afterwards?

• Turning it off does not remove your eSIM. Baseline support keeps installed eSIMs working. Toggling needs a restart.
• The old erase trap is closed. In December 2024 a user reported that disabling an eSIM while the toggle was off wiped the profile with no warning. The March 2026 release (2026030100) changed Settings so you can no longer disable an eSIM while management is off.
• PIN-locked eSIMs are the exception. The usage guide recommends leaving the toggle on, because it lets you disable the eSIM from the lock screen if you forget the PIN. With the toggle off and the PIN forgotten, only the PUK gets you back in.

Our take: for a traveller who switches eSIMs often, leaving it on is a defensible default. Turn it off for the smallest attack surface, and accept a restart every time you add or remove an eSIM.

Pitfalls worth knowing before a trip

• The duress PIN wipes eSIMs too. GrapheneOS lets you set a duress PIN that irreversibly wipes the device, and its features page says this includes installed eSIMs.
• Reflashing usually keeps the eSIM. Forum users in October 2026 reported eSIMs surviving a reflash. A user report, not a promise.

What this setup protects, and what it does not

A GrapheneOS Pixel with a no-KYC eSIM closes two gaps: no Google account on the phone, and no passport or card behind the eSIM. Apps also cannot read the IMEI or SIM serial, which Android 10 and later reserve for privileged system apps.

• The network sees your device. Every connection presents the phone's IMEI and the SIM's identity. As the GrapheneOS FAQ puts it, connecting to a carrier means identifying yourself to it.
• The towers see your location. Cell triangulation happens whenever the radio is on. Airplane mode is the only off switch, and Wi-Fi still works under it.
• Calls and SMS are not private. GrapheneOS advises against trusting them. Use an end-to-end encrypted app.
• Your traffic exits somewhere. Travel eSIM data often exits in another country. A VPN or Tor decides what that network sees.

Do not put a no-KYC eSIM in a phone that also carries your real line. For the full setup, see the digital nomad privacy stack.

• GrapheneOS removes Google from the phone. A no-KYC eSIM removes your name from the purchase. Neither one removes the phone from the network.

Where Cypher eSIM fits

We sell travel eSIMs for 180+ countries without an account, an email or an identity check. You pay in USDT, BTC, ETH, SOL, USDC, DAI, XMR or TON, and the QR code appears on the same page, so the install is exactly the flow above with nothing extra to download. If you would rather not touch our clearnet site at all, there is a Tor mirror, and the same plans are available through the Telegram bot at t.me/cypheresim_bot.

If you need a real number as well as data, our plans with a number place and receive calls and send and receive SMS. European plans carry a French +33 number. If an eSIM does not work, the 24-hour guarantee replaces it or refunds you in the same coin you paid with. For how this compares with other ways to stay unidentified, read our guide to anonymous eSIMs.

FAQ

Do I need sandboxed Google Play to install an eSIM on GrapheneOS?

No. Since the 2024012600 release, the eSIM support toggle works without sandboxed Google Play, and the usage guide states eSIM management has no Google Play dependency.

Does GrapheneOS send my data to Google when I add an eSIM?

According to the GrapheneOS usage guide, eSIM management never shares data with Google Play and will not connect to a Google service unless the carrier itself uses one. The app is proprietary, so you trust that isolation.

Can I turn eSIM support off and keep using my travel eSIM?

Yes. Installed eSIMs keep working through baseline support. You will need to turn the toggle back on, and restart, to add, remove or switch eSIMs. If your eSIM uses a PIN, the docs recommend leaving the toggle on.

Does a no-KYC eSIM hide my IMEI?

No. Apps on GrapheneOS cannot read the IMEI, but the mobile network always sees it. A no-KYC eSIM removes your identity from the purchase, not your device from the network.