How To Establish Mobile Bitcoin Privacy With A Pixel 4a And CalyxOS
This step-by-step guide walks you through how to establish a privacy-enhanced mobile phone for use with KYC-free Bitcoin.
This is a step-by-step guide on how to privately purchase a Google Pixel 4a mobile phone, flash it with the privacy-enhancing website for the most up-to-date hash values.
Once you have the ZIP archive hash value verified, do not unzip it. Just leave it for now and we’re going to do a couple of other things first.
Step Four: Select And Download Device Flasher To Your Desktop
This will download the executable file that will help get the CalyxOS image file onto your phone. You can do this from Linux, Mac OS or Windows. These instructions are for Windows.
Navigate to https://calyxos.org/get/install/ and select the appropriate flasher for your desktop. Make note of the hash value on the website. On Windows, you are likely to start running into errors at this point. Your browser will probably tell you that it prevented this file from being downloaded because it is “suspicious.” If at first you do not succeed, try a different browser. I was able to get this to download with Firefox and then selecting the options to override the “security” warnings.
Once you get the file downloaded it should be called “device-flasher.exe” and it should be roughly 6.8 MB in size. Again, you will want to follow the same process as used above to verify the hash value of the flasher file.
Note: Always check the CalyxOS website for the most up-to-date hash values.
Now you want to create a new folder and put the image file ZIP archive and the flasher executable file in this folder with nothing else.
Step Five: (Only For Windows) Check Your USB Driver
You need to make sure that your computer has the appropriate USB driver installed for talking to your Pixel 4a. What worked for me was the standard MTP USB driver installed on my computer. Here is how you can verify:
If you haven’t done so already, go ahead and connect your Pixel 4a to your desktop, turn it on, do not insert the SIM card yet, step through all of the setup prompts skipping the parts where it asks you to enter personal information, and connect to WiFi. Here is a video of the whole initial set up:
Next, on your desktop, open your computer manager by right-clicking on “This PC” from your file explorer.
You should be looking at your computer management window now.
Click on “Device Manager>Portable Devices>Pixel 4a.”
Right click on Pixel 4a and select “Properties.”
Click on the “Details” tab and then from the drop-down menu choose “Driver Description.”
You want to see “MTP USB Driver” here.
If you have a different driver then you may need to update it.
To update your USB driver, you will first need to download the Google USB driver. This driver along with more detailed instructions can be found here. This will download another ZIP archive called “usb_driver_r13-windows.zip” which should be roughly 8.3 MB in size.
Save this ZIP archive to a different folder location than the folder with the CalyxOS image file ZIP archive and device flasher executable file.
Then extract the Google USB driver ZIP archive.
Navigate back to your Computer Management window.
Go back to “Device Manager>Portable Devices>Pixel 4a.”
Right click on “Pixel 4a>Update Driver,” this will launch the Update Wizard.
From the Update Wizard, it will ask you where to find the new USB driver, point it to the folder location that you extracted the ZIP archive contents to.
Then the Update Wizard should walk you through the rest of the necessary steps.
If you encounter problems with updating your USB driver through Windows Computer Management, it may be necessary to install Android Studio and then update the USB Driver with the SDK manager. I’m not entirely sure what happens after you tell the Update Wizard which driver to use since my computer already had a working driver. I imagine that you should be able to go back through the steps to check if you have the best driver installed and end up looking at a message like the one in the image above.
Step Six: Flash CalyxOS Onto Your Pixel 4a
This will use the CalyxOS image file ZIP archive and the device flasher executable file to flash the new operating system onto your Pixel 4a. You should have already connected your phone to your desktop, powered on the phone, followed the setup prompts and connected to WiFi. Your computer should also be able to talk to your phone with no issues.
Navigate to the folder where you placed the CalyxOS image file ZIP archive and the device flasher executable file. The ZIP archive should still be unzipped. If you already extracted the contents then this won’t work, so if you did that, then delete the extracted contents. The only things you want in this folder are the CalyxOS image file ZIP archive and the device flasher executable file. Like this:
Double click on the device-flasher.exe and this should initiate the process. If this fails to initiate the process then you can try to do it from the command line by hitting the Windows key and r, then type “cmd” in the dialog box that pops up.
Once the command terminal launches, you can use the “cd ..” command to change your file path all the way back to the C: drive if you need to. Then you can change directory (“cd”) to the file path which points to the folder with the CalyxOS image file ZIP archive and the device flasher executable file. Once there, enter “.device-flasher.exe” and hit enter. This should get the process started and then you should be looking at something like this:
Whether you double clicked on the device-flasher.exe or used the command line to launch it, the result should lead you to looking at the message in the image above.
Next, follow the instructions in yellow on the Pixel 4a:
- Ensure the Pixel 4a is connected to WiFi and there is not a SIM card installed.
- Navigate to “Settings>About Phone>Build Number” then tap on “Build Number” seven times to enable Developer Mode.
- Now navigate to “Settings>System>Advanced>Developer Options” then enable USB debugging and hit “OK.”
- Also from this Developer Options menu, scroll down and enable “OEM Unlocking.”
Once you have completed the four steps above, go back to your desktop keyboard and hit “Enter.”
The flashing script will start to run and then, in the terminal window, it will prompt you to unlock the bootloader from your Pixel 4a.
On your Pixel 4a, you will see a short description of some product and device information. You will notice that it indicates in green that the device status is locked:
After a moment, the message on your Pixel 4a will change to a warning about unlocking the bootloader. You should see “Do not unlock the bootloader” next to the power button.
Using the volume buttons, you can scroll through the available action options. Continue pressing the volume button until you see the action option to “Unlock the bootloader.” Then press the power button.
The Pixel 4a should now redisplay the original screen with the product and device information, but this time, you will notice that the device status is “Unlocked” in red.
The flashing script should continue automatically at this point, you should not have to press the start action with the power button on your Pixel 4a. The Pixel 4a may disconnect and reconnect to your desktop a few times, with the screen on the Pixel 4a resetting each time. This is normal. After a moment, you should see this screen:
This message should be immediately followed by the “fastbootd” screen:
The fastbootd screen should remain for a few moments while the new image is flashed. Then in the terminal window on your desktop, when the script is all finished running, it should indicate to you to exit by pressing any key.
That completes the process of flashing CalyxOS onto your Google Pixel 4a. Congratulations. You will want to be sure to lock the bootloader again when you see the screen in the image below:
Again, use the volume keys to select the action option to “Lock the bootloader.” Then press the power button to initiate this action:
You can confirm that your bootloader is now locked again by the indication in green on this screen:
You will receive a message confirming that your Pixel 4a is loading a different operating system. Then it will automatically reboot.
Once rebooted, your Pixel 4a will load and open CalyxOS and you can follow all the initial startup prompts and configure your settings how you like.
One option you will have during the initial startup process is to enable or disable MicroG. This implements Google Compatibility Services, enabling MicroG after the fact may cause certain apps to react erratically. Uninstalling and then re-installing certain apps may be required in this scenario. If you are not sure whether or not the apps you want to use will need Google Services, then just leave MicroG enabled.
MicroG is an open-source replacement for Google Play Services but without the advertising and location tracking parts. Here, you can read more about which parts of Google Play Services have been incorporated to MicroG.
The basic idea is that with MicroG you should have an easier time using more apps, getting push notifications and using maps without revealing your personal information to Google’s servers. This is a personal choice.
Step Seven: SIM Card And Carrier Services
You may be using your new Pixel 4a strictly as a secure and private device for your Bitcoin wallet or secure messaging, etc. However, you may also want to use it as your regular phone as well. In this case you will need to pay for mobile cellular services and this is where you may want to make some careful considerations. If you go to a large service provider like Verizon or AT&T then they will register your Pixel 4a with your personal information which defeats some of the privacy benefits that brought you here in the first place.
One option is to buy a prepaid and reloadable SIM card from a smaller carrier. You should be able to find these SIM cards at the same store where you bought your Pixel 4a. In this case, you can purchase the prepaid and reloadable SIM card using the same gift card you bought at BitRefill, this way there is no personally identifying information attached to your new SIM card.
Simply log on to the SIM card provider’s website and activate your new SIM card. You may be asked for your name and email address. The veracity of the information you provide is completely up to you. I recommend using a burner email address that doesn’t reveal any personal information. Then you will be asked to enter a ZIP code so the service provider can assign you a new phone number based on that area. You will also need to enter the serial number of your SIM card during the account activation. If your selected service provider has SIM locking features, utilize them.
Once your account has been activated, insert the SIM card into your Pixel 4a. You now have a fully-functioning mobile phone that is not attached to your identity in any way. Once your plan nears expiration you will need to think about how you can reload your SIM card while protecting your private information. Consider using a private debit card or alternatively, consider using an e-SIM paid for using bitcoin like the ones provided by Silent Link. Silent Link e-SIM cards are compatible with Google Pixel 4a running CalyxOS. The phone number you receive from Silent Link will be a United Kingdom (+44) phone number. This is a good option for having a private phone number that supports SMS messaging which can come in handy when needing text verification at a Bitcoin ATM for example. Silent Link services do not support legacy GSM voice calls however. So weigh your options and proceed however you see fit.
I have been using my Pixel 4a with CalyxOS for a few days now and I have been very impressed with it overall. CalyxOS comes with several privacy-focused apps pre-installed like Signal, Calyx VPN and Briar. I recommend enabling the CalyxOS VPN for encrypting your internet access. Some apps don’t work on “de-Googled” phones, I cannot install the Twitter app for example, but I can use the Chromium web interface to access it and it looks and feels just like using the app. Not all of the conveniences you may be used to will be available on your “de-Googled” phone, but the privacy benefits outweigh the cost of these conveniences in my opinion. Below I make a few recommendations on apps that you may be interested in.
- Bitcoin Wallet: Samourai Wallet
- Password manager: KeyPassDX
- Authenticator: Aegis
- Email: Tutanota
- PGP manager: OpenKeyChain
- Messaging: Telegram and RocketChat
There is also a Telegram channel where you can find support from the CalyxOS community here.
This is a guest post by Econoalchemist. Opinions expressed are entirely their own and do not necessarily reflect those of BTC Inc or BitcoinLinux.