-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathindex.html
More file actions
607 lines (528 loc) · 64.7 KB
/
Copy pathindex.html
File metadata and controls
607 lines (528 loc) · 64.7 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<title>DresOS - An Open Source Security Organization</title>
<meta property="og:title" content="DresOS - Open Source Security Organization" />
<meta property="og:description" content="Privacy focused Android builds, Magisk modules, our own secure communications app, and an upcoming Linux security distro. Build your own deGoogled Android system with the DresOS guide." />
<meta property="og:image" content="https://dresos.org/images/dres-preview.jpg" />
<meta property="og:image:alt" content="DresOS" />
<meta property="og:image:width" content="1200" />
<meta property="og:image:height" content="630" />
<meta property="og:url" content="https://dresos.org" />
<meta property="og:type" content="website" />
<meta property="og:site_name" content="DresOS" />
<meta name="twitter:card" content="summary_large_image" />
<meta name="twitter:title" content="DresOS - Open Source Security Organization" />
<meta name="twitter:description" content="Privacy focused Android builds, Magisk modules, our own secure communications app, and an upcoming Linux security distro. Build your own deGoogled Android system." />
<meta name="twitter:image" content="https://dresos.org/images/dres-preview.jpg" />
<meta name="description" content="DresOS is an open source security organization. We build privacy focused Android systems, Magisk modules, our own secure communications app, and Kali Linux tools." />
<meta name="keywords" content="DresOS, The DresOS Foundation, DresSecureComms, Android privacy, deGoogled Android, Magisk modules, DresOS WebView, InviZible Pro, open source security, Linux" />
<meta name="author" content="The DresOS Foundation" />
<meta name="theme-color" content="#00e676" />
<link rel="stylesheet" href="styles.css" />
</head>
<body>
<header>
<h1>DresOS</h1>
<p>The DresOS Foundation - Android / Linux / Privacy</p>
</header>
<nav id="tab-nav">
<button class="active" onclick="switchTab('welcome', this)">Welcome</button>
<button onclick="switchTab('updates', this)">Updates</button>
<button onclick="switchTab('distro', this)">Security Distro</button>
<button onclick="switchTab('modules', this)">Magisk Modules</button>
<button onclick="switchTab('android', this)">DresOS Android</button>
<button onclick="switchTab('projects', this)">GitHub Projects</button>
<button onclick="switchTab('tos', this)">Terms of Service</button>
<button onclick="switchTab('contact', this)">Contact</button>
</nav>
<main>
<section class="tab-panel active" id="tab-welcome">
<h2>Welcome to DresOS</h2>
<p>Hello, we are DresOS, an open source organization dedicated to enhancing security and development for Android devices, Linux machines, and the apps that run on them. Our mission is to provide privacy focused, secure and innovative tools that empower users in a digital world.</p>
<p>Click the tabs above to explore our work.</p>
<h3>What we do</h3>
<div class="card">
<ul>
<li><strong>DresOS Android</strong> - A complete guide to build your own fully private, deGoogled Android system using TWRP, Magisk, our own microG and WebView modules, and the FOSS apps that replace everything Google takes out</li>
<li><strong>Magisk Modules</strong> - 2 Magisk Modules we built for our operating system. They are DresOS WebView v2.2.1 and DresOS microG v3.1.5.</li>
<li><strong>DresSecureComms</strong> - Our own in house FOSS app. Private SMS and MMS with optional AES-256-GCM encryption, a full default dialer, and an encrypted contacts vault. Now at v1.8.1 and available on IzzyOnDroid.</li>
<li><strong>DresOS: The Defensive Security Distro</strong> - Our upcoming Linux defensive security distribution. The build starts after a short break, targeting late 2026 into early 2027</li>
<li><strong>Open Source Tools</strong> - Kali Linux tools and Android utilities, all on GitHub</li>
</ul>
</div>
<h3>Support DresOS</h3>
<div class="card" style="text-align:center;">
<p>DresOS is built by a small open source team in our spare time. Every Magisk module, every guide, and every bug fix is unpaid work. If our tools help you, drop a tip in the jar.</p>
<p>Funds go directly to test devices for module compatibility (Pixel, Samsung, Motorola, OnePlus, Xiaomi), servers, domain renewals, and developer time on the next release.</p>
<p style="margin-top:18px;">
<a class="link-btn" href="https://ko-fi.com/dresos" target="_blank">☕ Donate on Ko-fi</a>
</p>
</div>
</section>
<section class="tab-panel" id="tab-updates">
<h2>Updates</h2>
<article class="card">
<h3>August 1, 2026 - microG v3.1.5, WebView v2.2.1, and the Modules Now Update Themselves</h3>
<p>Both Magisk modules have been audited end to end and both have a release out of it. The short version: the bundled apps inside the microG module now keep themselves current without us.</p>
<p><strong>The automation is live.</strong> A pipeline runs every week against GmsCore, the microG Companion, GsfProxy, Aurora Store and Aurora Services. If any one of them has moved, the module is rebuilt, the version bumped and the release published on its own. Until now only a GmsCore change could set that off, so an Aurora update could sit there unnoticed for as long as it took someone to spot it. Every bundled app is also checked against a pinned signing key before it is staged as a system app, which previously only applied to the microG core. If a download ever comes back signed by someone else, the build stops rather than shipping it.</p>
<p>The rest is smaller. The WebView module's update check still pointed at our old GitHub account, so in-app update checks were not resolving properly; that is fixed. And a permission entry added to the microG module in v3.1.4 for Aurora Services turned out to do nothing at all, because the app never asked for those permissions in the first place, so it has been taken back out and the generator that writes that file now handles an app with no entry yet.</p>
<p><strong>What we are doing next.</strong> The WebView module gets the same treatment microG just had: an automatic build and release workflow, so when we push a new engine the module rebuilds, versions and publishes itself rather than waiting on us to remember. That is the whole point of this stretch. The Android system is finished, so the work now is making sure it stays current on its own, because a privacy system that quietly falls behind upstream is worse than useless. Between the two modules and the app, that is nearly everything we ship maintaining itself.</p>
<p>Grab them from <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/releases" target="_blank">the module releases</a>. As always, if you flash something and it breaks, tell us with your device, ROM and Android version, and it gets fixed.</p>
</article>
<article class="card">
<h3>July 30, 2026 - DresSecureComms 1.8.1, the Scan Engine, and What Comes Next</h3>
<p>Three bug reports came in from people running 1.8.0 and all three turned out to be real, so 1.8.1 is out and it is worth updating to straight away. Thank you to everyone who sent them in. This is exactly why we ask.</p>
<p><strong>Messages that only showed up in the notification.</strong> If someone's number reached you in one format and you had saved it in another, with the country code against without it for instance, Android could file the same person under two separate conversations. Your replies went into one and their messages went into the other, so what you received was nowhere to be found inside the app even though the notification showed it fine. Conversations are now matched on the number itself, so everything with that person sits in one thread whichever way it arrived, and threads that were already split show up joined back together.</p>
<p><strong>Calls.</strong> The message notification sound no longer plays just before the ringtone on an incoming call. The screen now always comes back on after you move the phone away from your ear too. That one only bit phones using virtual proximity sensing rather than a real sensor, where the screen simply stayed dark and you had to wake it before you could hang up. There is a switch under Settings, Calls if you would rather it never blanked at all.</p>
<p><strong>Sending.</strong> A message that fails to send now says so and is marked as failed, instead of sitting there looking like it went. Replies sent straight from a notification now appear in the conversation, and long ones are split properly rather than being dropped.</p>
<p><strong>The scan engine is nearly complete.</strong> Until now, if VirusTotal had never seen a file, File Scan told you exactly that and left you there, which is the most common result for anything built outside the Play Store. You can now send that file to VirusTotal yourself and have its engines analyse it. It asks every single time, it is one file at a time, and the prompt says plainly that the file leaves your phone and that VirusTotal keeps what it is sent and shares it with the antivirus companies it works with. Nothing is ever uploaded on its own, and a sweep of your installed apps still never uploads anything. You can also scan one app on its own now instead of sweeping all of them. What is left for version two is offline signature scanning, the part Hypatia is known for, and then the engine is finished.</p>
<p><strong>Automation on the module repos.</strong> The microG module already pulls the latest officially signed microG core on a schedule and bumps itself when upstream moves. We are extending that to everything else the modules carry, so every app bundled inside them stays current on its own instead of waiting on us to rebuild by hand. That work starts shortly.</p>
<p><strong>The Linux distro.</strong> Work on our defensive security distribution starts soon. We are taking a short break first. Seven months on the Android system is a long run, and the right thing to do before we point our attention somewhere else is to make sure that system is properly robust, so the next stretch goes on bug reports, fixes and keeping everything current. Then the distro build begins in earnest.</p>
<p>Get the app from <a href="https://github.com/DresOperatingSystems/DresSecureComms/releases" target="_blank">GitHub releases</a> or <a href="https://apt.izzysoft.de/packages/com.dresos.dressecurecomms" target="_blank">IzzyOnDroid</a>, and the modules from <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/releases" target="_blank">the module releases</a>. If you find something broken, tell us. It gets fixed.</p>
</article>
<article class="card">
<h3>July 23, 2026 - DresSecureComms 1.8.0, Hypatia Dropped, and microG v3.1.3</h3>
<p>This is the update that finishes what we set out to do with DresSecureComms. It now handles the malware scanning and the spam calls too, which means another two apps come out of the build and more than half of the system's core functions run on components we build and sign ourselves.</p>
<p><strong>File Scan.</strong> DresSecureComms can now check a single file, or every app installed on your device, for malware. It does it by fingerprint, so the file never leaves your phone: only a SHA-256 goes out, and it comes back checked against seventy or more antivirus engines at once. This is version one, and it is what replaces Hypatia inside DresOS. Hypatia set the bar for on device scanning and it served the system well, and offline signature scanning, the thing Hypatia is known for, is what version two adds.</p>
<p><strong>Spam Shield.</strong> Incoming calls are now screened before your phone rings. Premium rate numbers are rejected, short codes are silenced, and callers faking the first digits of your own number get flagged. You can go stricter and silence anyone not in your contacts, or reject withheld numbers outright. Saved contacts always ring through. The important part is that all of it runs on the device: no number is ever sent anywhere to be looked up, which is the whole problem with every mainstream spam blocker.</p>
<p><strong>Encryption keys are now per contact.</strong> This was the real weakness people kept pointing at, and they were right. One code shared with everybody meant anyone with the code could read everything. Now each contact gets their own code, set from the conversation menu, used only for that thread. The old shared key still covers anyone you have not set a code for, and every message you have already sent still opens.</p>
<p><strong>Fixes people asked for.</strong> The screen now turns off when you hold the phone to your ear on a call. Starting a new message suggests your contacts as you type, so you no longer have to go and look a number up first. The option to save a number is hidden once that number is already saved. And you can block or unblock any number straight from the call log.</p>
<p><strong>microG v3.1.3.</strong> The module's update and issues links now point at the current organisation, so update checks resolve properly again, and the leftover build plumbing from the retired Google signed flavour is gone. Nothing changed in what lands on your device.</p>
<p>The guide has been cut down again to match. Hypatia is out of it entirely, its section, its firewall rule and its weekly scan step, with the scanning folded into the DresSecureComms section where it now belongs.</p>
<p>Get the app from <a href="https://github.com/DresOperatingSystems/DresSecureComms/releases" target="_blank">GitHub releases</a> or IzzyOnDroid, and the module from <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/releases" target="_blank">the module releases</a>.</p>
</article>
<article class="card">
<h3>July 18, 2026 - The DresOS Android Defensive Security System Project Run Is Now Finished</h3>
<p>This has been our first ever proper project run, and it lasted 7 months altogether. Within these 7 months we gained many loyal users who now put their trust into DresOS, and we could not thank each and every one of you enough, especially everyone who sent in bug reports. Without you our job would have been 100x harder.</p>
<p>Over the past few days we put out some of our last big updates to everything to do with parts of our system, that being the build guide, the Magisk modules, and DresSecureComms. We only have one more module left to release that is part of our system, but it is not a main component. It will be released in September, when Google brings the next restriction into place around app installation, as our system solely focuses on battling Google and its data mining monopoly by bypassing each and every restriction they bring into place.</p>
<p>The reason the project run has come to an end is that we have done everything we set out to do. Continuing with the Magisk module roadmap is not a viable option, as both our microG suite and our system WebView module with our own WebView engine are enough, and the guide as a whole has been refined, debloated, and rewritten to be less convoluted. The rest of the roadmap was just covering things in the guide that can be done manually, whereas the microG suite and the WebView module were genuinely needed.</p>
<p>DresSecureComms was a recent addition we brought in over the rest of the Magisk modules, as it covers and secures core components needed for your day to day life on Android. Soon we will add our file scan engine, and after that it will be complete in full, along with one final massive change within the system: dropping Hypatia for DresSecureComms for the malware scanning.</p>
<p>Of course this does not mean we are dropping the projects. No, no, no. Each and every single one of them will be maintained and updated constantly to bring you the latest device security, and at some point in the future, when Google has calmed down, we will release a full custom ROM, starting off with the Moto G32.</p>
<p>But for now, as an organisation, we must change gears and move on to the build and release of our Linux distribution, which should elevate us to whole new heights by bringing secure solutions to both mobile phones and computers.</p>
<p>One last thing: if you enjoyed using any of our projects and love what we are doing, then please help us out by telling a friend about DresOS, shouting us out in your social media stories, posting links to our website <a href="https://dresos.org">dresos.org</a>, and/or putting a tip in the jar to go towards test devices, servers, and coffees for the devs on late night build sessions.</p>
<p><a href="https://ko-fi.com/dresos" target="_blank">ko-fi.com/dresos</a></p>
<p>Thank you guys for showing us so much love 💚</p>
<p>- DresOS / The DresOS Foundation</p>
</article>
<article class="card">
<h3>July 3, 2026 - The DresOS Foundation, dresos.org, and DresSecureComms 1.6.0</h3>
<p><strong>We are now The DresOS Foundation.</strong> DresOS has grown out of a personal GitHub account and into its own organisation at <a href="https://github.com/The-DresOS-Foundation" target="_blank">github.com/The-DresOS-Foundation</a>. The full DresOS Android guide has already made the move, and DresSecureComms and the Magisk modules follow it over shortly. Links to repositories that have moved redirect automatically, so nothing breaks while the migration finishes.</p>
<p><strong>The website has its own domain.</strong> This site is now at <a href="https://dresos.org">dresos.org</a>, and we finally have a proper contact address to match: <a href="mailto:security@dresos.org">security@dresos.org</a>. Same site, real home.</p>
<p><strong>DresSecureComms 1.6.0 is out, and it is on IzzyOnDroid.</strong> The app is now listed on <a href="https://apt.izzysoft.de/packages/com.dresos.dressecurecomms" target="_blank">IzzyOnDroid</a> and scans completely clean on VirusTotal, zero detections across every engine. 1.6.0 makes picture messaging work end to end: the crash when sending a photo or group message is fixed, and incoming photos now download automatically, appear inside the conversation, and raise a notification, with picture only conversations showing up in the message list. Your own sent messages appear in the chat instantly and stay in your history whether or not the app is the default SMS app. The in call keypad and call controls are much larger, message notifications carry a Copy action, and tapping a notification opens that conversation. Coming next: importing your own PGP, age, or SSH ED25519 keys to sign your messages. Thanks to the Fossify team, whose Messages, Phone, and Contacts apps we used as references for the MMS work. A huge thank you must also go to <a href="https://github.com/mcastillof/FakeTraveler" target="_blank">Fake Traveler</a>; our mock location components are built on references from their application. And to <a href="https://github.com/TrianguloY/URLCheck" target="_blank">URL Check</a>, just for the scan part that connects to VirusTotal; we built our scan engine from that.</p>
<p><strong>DresOS microG v3.1.1.</strong> The microG module dropped the experimental Google signed build path entirely; grafting Google's certificate onto microG's bytes is not possible without Google's private key, so the module no longer pretends otherwise. Stock ROM guidance was replaced with honest, version aware signature spoofing instructions: LSPosed (JingMatrix fork) plus FakeGApps on Android 15 and below, and on Android 16 or newer a ROM with built in microG signature spoofing is required. Everything else about the bootloop safe pure file overlay design is unchanged.</p>
<p>Get DresSecureComms from <a href="https://apt.izzysoft.de/packages/com.dresos.dressecurecomms" target="_blank">IzzyOnDroid</a> or <a href="https://github.com/DresOperatingSystems/DresSecureComms/releases" target="_blank">GitHub Releases</a>.</p>
</article>
<article class="card">
<h3>June 23, 2026 - DresSecureComms, the DresOS Secure Communications App</h3>
<p>DresOS now has its own secure communications app. <strong>DresSecureComms</strong> is a single, FOSS, fully de Googled app that brings private messaging, calling, contacts, link threat scanning, photo metadata wiping, and location spoofing together in one place, built and signed by DresOS with no Google services and no trackers.</p>
<p>It can be set as your default SMS and phone app. Messaging is a private offline SMS client with optional per message AES-256-GCM encryption, readable only by another DresSecureComms user who shares the key. The dialer is a full default phone app with its own in call screen - mute, speaker, keypad, hold, add call - plus a deletable call history and caller ID and spam screening. Contacts live in an encrypted on device vault with add, edit, and import. Threat Scan checks any link against VirusTotal and returns a clear safe, suspicious, or dangerous verdict. There is also a photo metadata wiper, a geo spoofer for mock locations, an app lock, and an app wide block screenshots mode.</p>
<p>In the DresOS Android system it consolidates several separate tools into one app, taking over URL Check, the Fossify Phone, Messages, and Contacts apps, and Fake Traveler.</p>
<p>Source and releases: <a href="https://github.com/DresOperatingSystems/DresSecureComms" target="_blank">github.com/DresOperatingSystems/DresSecureComms</a>.</p>
</article>
<article class="card">
<h3>June 19, 2026 - The Biggest DresOS Update Yet</h3>
<p>This is one of the largest coordinated updates DresOS has shipped. The whole system WebView path is now DresOS's own from source to signature, microG gained an automatic update pipeline, and the entire DresOS Android guide and security architecture were rewritten to match. Here is everything in one place.</p>
<p><strong>DresOS WebView - our own system WebView engine.</strong> DresOS now ships its own system WebView. <strong>DresOS WebView</strong> is a Chromium engine built from Cromite (Chromium 145.0.7632.120), with Google services and telemetry stripped and Cromite's privacy and security hardening throughout. It replaces the previous third party WebView engine entirely. Where that engine was someone else's build, DresOS WebView is our own, signed with the DresOS release key, so the whole WebView path is under DresOS end to end.</p>
<p>It installs the same proven way as before: the signed APK is placed in the systemless tree at <code>system/product/app/</code> via Magisk magic mount, a static RRO adds the package plus the DresOS certificate to <code>config_webview_packages</code>, and service.sh promotes it to the active provider with <code>cmd webviewupdate set-webview-implementation</code> after boot complete, verified via dumpsys. The post-fs-data bootloop sentinel and the inert mode fallback carry over, so a failed activation can never bootloop the device, and removing the module restores the stock WebView. Flashing it over the previous WebView module updates in place, with nothing to uninstall first.</p>
<p>The engine is also published on its own as a standalone signed APK, <strong>DresOS WebView v1.0.0</strong>, so it can be installed independently of the module. It is distributed through <a href="https://github.com/The-DresOS-Foundation/DresOS-WebView/releases" target="_blank">its own GitHub releases</a> only.</p>
<p><strong>DresOS microG v3.0.1 - now self updating.</strong> The DresOS microG module has been bumped to v3.0.1. A weekly GitHub Actions pipeline now pulls the latest officially signed microG core (GmsCore, Companion, GsfProxy) straight from the official microG F-Droid repo and auto-bumps the module whenever upstream changes, so microG stays current without a manual rebuild. The bundled APKs and the install logic are unchanged, and it remains the same bootloop safe pure file overlay with ROM provided signature spoofing.</p>
<p><strong>The guide and security architecture, rewritten end to end.</strong> The full DresOS Android Defensive Security guide, the SECURITY_ARCHITECTURE diagram, and the system changelog were all updated to the new WebView engine and microG v3.0.1. Step 7, the Part 3 app suite, the What You Will Need table, the Replacement Overview, and the Layer 5 WebView diagram now describe DresOS WebView and <code>org.dresos.webview</code> throughout.</p>
<p><strong>Requirements (WebView module):</strong> Magisk 29.0 or newer, Android 10 through 16, arm64. After flashing, verify with <code>adb shell dumpsys webviewupdate</code>; the active provider should be <code>org.dresos.webview</code>.</p>
<p><strong>We rely on community testing.</strong> If you flash any of this and something breaks, please open a bug report at <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/issues" target="_blank">github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/issues</a> with device model, Android version, ROM, root provider, and the logs at <code>/data/adb/modules/dresoswv/logs/</code>.</p>
</article>
<article class="card">
<h3>June 5, 2026 - DresOS microG v3.0.0 Released</h3>
<p>The DresOS microG Magisk module has been rebuilt from the ground up and released as <strong>v3.0.0</strong>, replacing the v2.0.0 design entirely. v3.0.0 is a pure file overlay: no Zygisk payload, no Xposed or LSPosed dependency, and no boot time PackageManager work, which means it physically cannot bootloop the device and it coexists cleanly with the DresOS WebView module.</p>
<p>It ships the officially signed microG suite as privileged system apps under <code>product</code>: GmsCore 0.3.15, Companion (FakeStore at <code>com.android.vending</code>), GsfProxy, DroidGuard Helper, Aurora Store, and Aurora Services, with a privapp permissions allowlist generated from the bundled manifests.</p>
<p>Signature spoofing is now provided by the ROM rather than by the module. Because the bundled microG APKs carry the official microG key, any ROM with microG signature spoofing support spoofs them automatically once they are placed in priv-app. There is no bundled hook and no Xposed framework on any ABI.</p>
<p>Aurora Services now lands as a priv-app with its own permissions allowlist, so silent prompt free installs through Aurora Store work without the standard Android installer prompt for every app. This resolves the v2.0.0 Aurora Privileged Extension issue. ROMs that already ship an upstream signed microG (CalyxOS, LineageOS for microG, iodeOS, /e/OS) are autodetected by cert match and their copy is preserved. GrapheneOS is hard refused.</p>
<p>The DresOS Android guide has been updated end to end: Step 5, Step 6, the What You Will Need table, and the SECURITY_ARCHITECTURE.md Layer 8 entry all reflect v3.0.0. The guide also gained an Aves Libre gallery, the Stratum offline 2FA app, the Tuta Calendar encrypted calendar, and a one tap DresOS HeliBoard design, and every download link was audited to a stable form.</p>
<p>Watch the full system running on a Motorola Moto g32 on the <a href="https://ko-fi.com/post/DresOS-Android-16-Motorola-Moto-g32-Video-Demo-F5R420TKRN" target="_blank">DresOS Android demo video</a>. An updated demo covering the newest build is coming soon.</p>
<p><strong>We rely on community testing.</strong> If you flash v3.0.0 and something breaks, please open a bug report at <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/issues" target="_blank">github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/issues</a> with device model, Android version, ROM, root provider, the output of the Action button on the module, and the logs at <code>/data/adb/modules/dresosmicrog/logs/</code>.</p>
</article>
<article class="card">
<h3>May 25, 2026 - DresOS microG v2.0.0 Released</h3>
<p>The DresOS microG Magisk module has been released as v2.0.0. It replaced the older manual microG plus signature spoofing framework setup in the DresOS Android guide with a single flash.</p>
<p>The module stages the full microG suite as systemless privileged apps: microG GmsCore 0.3.7.250932, microG Companion (FakeStore at <code>com.android.vending</code>), microG GsfProxy, microG DroidGuard Helper, plus Aurora Store as a user app. APKs and matching privapp permissions XML land in the same partition (<code>system/product/priv-app</code> on API 28 plus, <code>system/priv-app</code> on API 26 and 27), satisfying Android 11 plus same partition enforcement.</p>
<p>Signature spoofing is bundled as a Zygisk hook scoped to the microG process only. On arm64 and x86_64 LSPosed is no longer required. On armeabi-v7a, armeabi, x86, or riscv64 the bundled hook does not ship a prebuilt and LSPosed plus FakeGApps remains the fallback.</p>
<p>Cert identity is verified post boot by reading the X.509 SHA-256 that PackageManager itself computes via <code>cmd package dump</code>, not by hashing META-INF/*.RSA blobs which legitimately vary between build environments. ROMs that already ship a working upstream signed microG (CalyxOS, LineageOS for microG, iodeOS, /e/OS) are autodetected by cert match and their copy is preserved; only the Aurora components are staged on those ROMs. GrapheneOS is hard refused because GrapheneOS deliberately blocks signature spoofing and ships its own Sandboxed Google Play.</p>
<p>Debloat moved off systemless overlay markers onto runtime <code>pm disable-user</code>, persisted in <code>/data/system/users/0/package-restrictions.xml</code>. This ends the Android 14 plus boot loop class where overlaying a priv-app directory hid the ART OAT cache. Uninstalling the module re enables every package the module disabled.</p>
<p>The bootloop sentinel is per component: a strike for the Zygisk hook only disables Zygisk on the next boot, a strike for the priv-app overlay only disables the overlay, a strike for the debloat pass only disables debloat. The rest of the module keeps running.</p>
<p><strong>Known issue in v2.0.0:</strong> the Aurora Privileged Extension (<code>com.aurora.services</code>) does not always land as a system priv app on every device. Aurora Store itself works fine. The silent install path through Aurora Services is the affected piece, which means you will see the standard Android installer prompt for each Aurora Store install. This was resolved in the v3.0.0 rebuild.</p>
<p>The DresOS Android guide has been updated end to end. Step 5 (Install Magisk Modules), Step 6 (Set Up microG), the SECURITY_ARCHITECTURE.md Layer 8 entry, the What You Will Need table, and the Magisk Modules Roadmap all reflect the new module.</p>
<p><strong>We rely on community testing.</strong> If you flash v2.0.0 and something breaks, please open a bug report at <a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/issues" target="_blank">github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/issues</a> with device model, Android version, ROM, root provider, the output of the Action button on the module, and the three logs at <code>/data/adb/modules/dresosmicrog/logs/</code>.</p>
</article>
<article class="card">
<h3>May 12, 2026 - First Official Website Update: DresEcoVerse Archived</h3>
<p>The DresEcoVerse has been officially closed down. We now maintain this actively updated website where all our resources, guides, and announcements can be found in one place. This is easier for everyone to navigate and keeps everything centralized.</p>
<p>With our focus now on the <strong>already released</strong> DresOS Magisk Modules for our Android Defensive Security System build, and with the full app list included directly in the DresOS Android guide, there is no longer a need for the EcoVerse as a separate hub.</p>
<p><strong>Important:</strong> DresOS has no active Telegram presence. This website is the only place to verify link authenticity and official announcements.</p>
</article>
<article class="card">
<h3>April 30, 2026 - Keep Android Open</h3>
<p>Hello and we have a massive favour for you guys all open source organisations like ours need your help to keep the android world open, the world of android is starting to Look bleak but with your help we can keep the fight against google going, to find out how you can help and do your part please check the links below and lets keep the struggle going</p>
<p><a href="https://keepandroidopen.org/open-letter/" target="_blank">https://keepandroidopen.org/open-letter/</a></p>
<p><a href="https://keepandroidopen.org/" target="_blank">https://keepandroidopen.org/</a></p>
</article>
</section>
<section class="tab-panel" id="tab-distro">
<h2>DresOS: The Defensive Security Distro</h2>
<p>Work on the distro starts shortly. We are taking a short break first and using it to keep the Android system solid, since seven months of building it deserves a proper settling period before our attention moves elsewhere. Targeting late 2026 into early 2027.</p>
<p>Check the Updates tab for progress announcements and devlogs.</p>
</section>
<section class="tab-panel" id="tab-modules">
<h2>Magisk Modules <span class="badge">Live</span></h2>
<p>These are the two modules the DresOS system needs: our microG suite, which replaces Google Play Services, and our system WebView, which replaces the browser engine that hundreds of apps quietly render web content through. Between them they cover the two parts of an Android system you cannot practically replace by hand, which is why the set is complete at two rather than growing forever. Everything else in the guide is an app you install or a setting you change yourself.</p>
<p>Both are built to keep themselves current rather than drift. The microG module already rebuilds and publishes itself whenever any of the apps it bundles moves upstream, and the WebView module is getting the same workflow next.</p>
<div class="info-block">
Due to Google's restrictions on app distribution and firmware swaps, we never shipped DresOS as a custom ROM. Instead the system is delivered as a build guide with Magisk modules and standalone FOSS apps like DresSecureComms, built on top of whatever Android you already run. This lets us bypass many of Google's restrictions while continuing the fight against data mining, data selling, and surveillance.
</div>
<h3>Module Repository</h3>
<div class="link-row">
<a class="link-btn" href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules" target="_blank">GitHub Repo</a>
</div>
<h3>Released Modules</h3>
<div class="module-grid">
<div class="module-card">
<div class="module-id">dresoswv <span class="badge">v2.2.1</span></div>
<div class="module-name">DresOS WebView</div>
<div class="module-desc">
Replaces Android's system WebView with DresOS WebView, a Chromium engine built from Cromite with Google services and telemetry stripped and Cromite's privacy and security hardening throughout. The system WebView is the browser engine used internally by hundreds of apps whenever they render web content. Google's version phones home on every render. This module replaces it in a single Magisk flash with DresOS's own engine, signed with the DresOS release key.
<br><br>
How it works: a static RRO is placed in the systemless overlay partition to add DresOS WebView plus the DresOS signing certificate to config_webview_packages, the DresOS WebView APK is dropped into the systemless system tree via Magisk magic mount, and after boot complete service.sh runs cmd webviewupdate set-webview-implementation to promote it to the active provider. Activation is verified via dumpsys. Two layers of bootloop safety sit on top: a post-fs-data sentinel that auto-disables the module if a previous boot crashed, and an inert mode flag that prevents retry storms on activation failure.
<br><br>
<strong>Requirements:</strong> Magisk 29.0 or newer, Android 10 through 16, arm64. Other architectures are refused cleanly at flash time and nothing on the device is changed.
<br><br>
The engine is also available on its own as a standalone signed APK from <a href="https://github.com/The-DresOS-Foundation/DresOS-WebView/releases" target="_blank">its own GitHub releases</a>, which is the only place it is distributed. It is too large for IzzyOnDroid to accept, so it is not listed there.
<br><br>
After flashing: reboot, then verify with adb shell dumpsys webviewupdate. The active provider should be org.dresos.webview.
</div>
<div class="module-links">
<a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/releases/download/webview-v2.2.1/DresOS-WebView-v2_2_1.zip" target="_blank">Download</a>
<a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/tree/main/webview" target="_blank">Source</a>
</div>
</div>
<div class="module-card">
<div class="module-id">dresosmicrog <span class="badge">v3.1.5</span></div>
<div class="module-name">DresOS microG</div>
<div class="module-desc">
Systemless microG suite as a single Magisk flash. Replaces Google Play Services without Google's proprietary code or servers. Ships the officially signed microG GmsCore 0.3.15, microG Companion (FakeStore at com.android.vending), microG GsfProxy, Aurora Store, and Aurora Services as privileged system apps under product, with a privapp permissions allowlist generated from the bundled manifests. DroidGuard is no longer a separate app, as microG folded it into GmsCore upstream.
<br><br>
v3.1.5 keeps the same bootloop safe pure file overlay design: no Zygisk payload, no Xposed or LSPosed dependency in the module itself, and no boot time PackageManager work. It physically cannot bootloop the device and it coexists cleanly with the DresOS WebView module.
<br><br>
v3.1.5 is the release that makes the bundled apps keep themselves current. A weekly pipeline now checks GmsCore, the Companion, GsfProxy, Aurora Store and Aurora Services, and if any of them has moved it rebuilds the module, bumps the version and publishes the release on its own. Before this only a GmsCore change could trigger a refresh, so an Aurora update could sit unnoticed. Every bundled APK is now verified against a pinned signing key before it is staged, which previously only applied to the microG core.
<br><br>
v3.1.4 fixes two real bugs found from a user report on a Samsung J600F. On a stock device where Play Services had updated itself, the module only masked the first copy it found, so the copy in the system partition kept winning and every Google dependent app crash looped. It now masks every copy it finds. Because a Magisk module cannot touch the data partition at all, it also detects that case up front and stops before changing anything, telling you to uninstall the Play Services, Play Store and Services Framework updates, clear their data and reboot before flashing. The second fix is Aurora Services, which could not install apps because its allowlist was missing two permissions; the allowlist generator now reads every bundled APK rather than just the two core ones.
<br><br>
On ROMs with microG signature spoofing support the bundled official key APKs are spoofed automatically once placed in priv-app. On stock ROMs, Android 15 and below can use LSPosed (JingMatrix fork) with FakeGApps, while Android 16 and newer requires a ROM with built in microG spoofing.
<br><br>
Aurora Services lands as a priv-app with its own permissions allowlist, so silent prompt free installs through Aurora Store work without the standard Android installer prompt for every app. Cert identity is verified post boot via cmd package dump reading the X.509 SHA-256 that PackageManager itself computes.
<br><br>
ROMs that already ship a working upstream signed microG (CalyxOS, LineageOS for microG, iodeOS, /e/OS) are autodetected by cert match and the ROM's copy is preserved. GrapheneOS is hard refused.
<br><br>
<strong>Requirements:</strong> Magisk, KernelSU, or APatch. Android 8.0 through 16. Any ABI. The module bundles no Zygisk or Xposed framework; signature spoofing comes from the ROM where supported, otherwise follow the version aware guidance above.
</div>
<div class="module-links">
<a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/releases/download/microg-v3.1.5/DresOS-microG-v3_1_5.zip" target="_blank">Download</a>
<a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules/tree/main/microg" target="_blank">Source</a>
</div>
</div>
</div>
<p style="margin-top:24px; color: var(--text-dim); font-size:0.85rem;">Stay tuned, stay private, and keep building. - The DresOS Team</p>
</section>
<section class="tab-panel" id="tab-android">
<h2>DresOS Android</h2>
<p>We originally wanted to release our own system but due to all these new cyber laws and the pressure Google is putting on firmware swaps we just could never release it. So we hope our project can bring our organisation back to its core values and release an idea we had once in a different light.</p>
<div class="info-block">
The DresOS Android project has been fully merged into a single comprehensive guide. The old two repo method (Android-Degoogling and Android-opsec) is now combined into one unified system with a security architecture document and a changelog.
</div>
<h3>Confirmed Working Devices</h3>
<div class="card">
<p>DresOS is built for universal compatibility. The degoogling and OPSEC steps work on any rooted Android 10 or newer device, and the Magisk modules are written to run on any ABI and any OEM partition layout. These are the combinations confirmed working end to end so far.</p>
<ul>
<li><strong>Motorola Moto G32</strong> on LineageOS Android 15 and 16</li>
<li><strong>Motorola ThinkPhone</strong> on stock Android 15</li>
<li><strong>Motorola Moto G7 Plus</strong> on stock Android 10</li>
<li><strong>Motorola Moto G7 Plus</strong> on LineageOS Android 15</li>
<li><strong>Google Pixel 9 Pro XL</strong> on LineageOS 23.2, Android 16</li>
<li><strong>Samsung Galaxy A05s</strong> on stock Android 10</li>
<li><strong>Samsung Galaxy A02s</strong> on stock Android 12</li>
<li><strong>Samsung Galaxy J6 (J600F)</strong> on stock Android 10, One UI 2.0</li>
</ul>
<p>If you run DresOS on a device that is not listed, a confirmation report is welcome so the list can grow.</p>
</div>
<h3>Built on our own components</h3>
<div class="card">
<p>More than half of the core functions of a DresOS Android device now run on software we build, sign and maintain ourselves rather than on third party apps. That matters because the parts you touch every day, the parts that see your messages, your calls and the web pages you open, are the parts we control end to end.</p>
<ul>
<li><strong>DresSecureComms</strong> handles messaging, calling, contacts, spam and scam call screening, link threat scanning, file and malware scanning, photo metadata wiping and location spoofing</li>
<li><strong>DresOS WebView</strong> is our own Chromium engine, built from Cromite and signed with our release key, replacing Google's system WebView for every app on the device</li>
<li><strong>DresOS WebView Module</strong> installs and activates that engine systemlessly with a bootloop sentinel and an inert mode fallback</li>
<li><strong>DresOS microG Module</strong> replaces Google Play Services with the officially signed microG suite as a pure file overlay that cannot bootloop the device</li>
</ul>
<p>Every one of those started as a separate third party app in earlier versions of the guide. Each release has pulled another one in house, and each one that comes in house is one less unknown in the stack.</p>
</div>
<h3>Watch the System in Action</h3>
<p>A full walkthrough of a DresOS Android 16 device on a Motorola Moto g32, with every layer of the stack running.</p>
<div class="card" style="max-width:340px;margin-left:auto;margin-right:auto;">
<div style="position:relative;width:100%;padding-bottom:177.78%;height:0;overflow:hidden;border-radius:8px;">
<iframe src="https://streamable.com/e/rg3tsm" style="position:absolute;top:0;left:0;width:100%;height:100%;border:0;" allow="fullscreen" allowfullscreen></iframe>
</div>
<p style="margin-top:12px;">This demo shows an earlier build. An updated demo covering the newest version of the system, including the file scanner and spam shield, is coming soon.</p>
</div>
<h3>Build Your DresOS Android System</h3>
<p>Follow the unified guide below. It covers everything from unlocking the bootloader and flashing Magisk, to the full OPSEC stack with InviZible Pro and AFWall+, and every app and core component the system runs on.</p>
<div class="link-row">
<a class="link-btn" href="https://github.com/The-DresOS-Foundation/DresOS-The-Android-Defensive-Security-System" target="_blank">Full Guide</a>
<a class="link-btn" href="https://github.com/The-DresOS-Foundation/DresOS-The-Android-Defensive-Security-System/blob/main/SECURITY_ARCHITECTURE.md" target="_blank">Security Architecture</a>
<a class="link-btn" href="https://github.com/The-DresOS-Foundation/DresOS-The-Android-Defensive-Security-System/blob/main/SYSTEM_CHANGELOG.md" target="_blank">Changelog</a>
</div>
<h3>What the System Includes</h3>
<div class="card">
<ul>
<li><strong>Part 1, DeGoogling</strong> the full root method: TWRP, Magisk, the DresOS microG module, DresOS WebView via its Magisk module, Shizuku, system debloat and the FOSS app replacements</li>
<li><strong>Part 2, Operational Security</strong> the OPSEC stack: InviZible Pro in proxy and root mode with Tor, I2P and DNSCrypt, the AFWall+ kernel firewall, Tuta Mail with Duck Address aliases, and location spoofing through DresSecureComms</li>
<li><strong>Part 3, Fossify Suite</strong> the system apps nothing else covers: launcher, clock, notes and camera</li>
<li><strong>Part 4, Additional Apps and Core Components</strong> the remaining apps documented with setup, features and usage</li>
</ul>
</div>
<h3>Apps and Core Components</h3>
<div class="app-list">
<div class="app-item">
<strong>DresSecureComms</strong>
<span>The DresOS secure communications app. Private SMS and MMS picture messaging with optional AES-256-GCM encryption using a separate key for each contact, a full default dialer with in call controls and a searchable call history, on device spam and scam call screening, an encrypted contacts vault, VirusTotal link scanning, file and app malware scanning by fingerprint, photo metadata wiping, and a geo spoofer. No Google services, built and signed by DresOS. Replaces URL Check, Fossify Phone, Messages and Contacts, Fake Traveler, and a separate antivirus app.</span>
<a href="https://apt.izzysoft.de/packages/com.dresos.dressecurecomms" target="_blank">IzzyOnDroid</a>
<a href="https://github.com/DresOperatingSystems/DresSecureComms" target="_blank">GitHub</a>
</div>
<div class="app-item">
<strong>Amaze File Manager</strong>
<span>Open source file manager with built in AES-256 encryption, biometric lock, root explorer, and APK management. Replaces Fossify Files and ZArchiver Pro.</span>
<a href="https://f-droid.org/packages/com.amaze.filemanager/" target="_blank">F-Droid</a>
</div>
<div class="app-item">
<strong>IYPS</strong>
<span>Password strength analyser and generator. Completely offline, zero data collection.</span>
<a href="https://github.com/StellarSand/IYPS/releases/latest" target="_blank">Download APK</a>
</div>
<div class="app-item">
<strong>RedReader</strong>
<span>Secure, modded Reddit client with no ads or tracking.</span>
<a href="https://f-droid.org/packages/org.quantumbadger.redreader/" target="_blank">F-Droid</a>
</div>
<div class="app-item">
<strong>OONI Probe</strong>
<span>Network measurement tool that detects censorship and surveillance on your connection.</span>
<a href="https://f-droid.org/packages/org.openobservatory.ooniprobe/" target="_blank">F-Droid</a>
</div>
<div class="app-item">
<strong>InviZible Pro</strong>
<span>Tor + I2P + DNSCrypt in proxy and root mode. Runs alongside DuckDuckGo App Tracking Protection without VPN slot conflicts.</span>
<a href="https://f-droid.org/packages/pan.alexander.tordnscrypt.stable/" target="_blank">F-Droid</a>
</div>
<div class="app-item">
<strong>Metrolist</strong>
<span>Privacy focused, modded YouTube Music client. Ad free, background playback, no Google tracking.</span>
<a href="https://github.com/MetrolistGroup/Metrolist/releases/latest" target="_blank">Download APK</a>
</div>
<div class="app-item">
<strong>Arcane Chat</strong>
<span>Fully decentralized, end to end encrypted messaging built on the Delta Chat protocol over standard email infrastructure.</span>
<a href="https://github.com/ArcaneChat/android/releases/latest" target="_blank">Download APK</a>
</div>
<div class="app-item">
<strong>Aves Libre</strong>
<span>Open source gallery and photo and video manager. Local metadata, map and tag organisation, no cloud, no trackers. Replaces Fossify Gallery and Google Photos.</span>
<a href="https://f-droid.org/packages/deckers.thibault.aves.libre/" target="_blank">F-Droid</a>
</div>
<div class="app-item">
<strong>Stratum</strong>
<span>Open source offline two factor authenticator. TOTP and HOTP, encrypted backups, single permission, no internet access. Replaces Google Authenticator and Authy.</span>
<a href="https://stratumauth.com/download" target="_blank">Download</a>
</div>
<div class="app-item">
<strong>Tuta Calendar</strong>
<span>End to end encrypted calendar that syncs across devices through your Tuta account. Zero knowledge, no Google Calendar.</span>
<a href="https://f-droid.org/packages/de.tutao.calendar/" target="_blank">F-Droid</a>
</div>
</div>
<h3>How This System Protects You</h3>
<div class="card">
<ul>
<li>Removes all Google services and tracking from the device</li>
<li>Replaces system WebView with DresOS WebView via Magisk module - Cromite based hardened Chromium</li>
<li>Routes all traffic through Tor via InviZible Pro proxy and root mode</li>
<li>Encrypts all DNS queries via DNSCrypt enforced at kernel level via iptables</li>
<li>Blocks in app trackers via DuckDuckGo App Tracking Protection</li>
<li>Kernel level firewall via AFWall+ with per app rules and mobile data proxy redirect</li>
<li>Screens spam and scam calls on the device via DresSecureComms, with no number ever sent off the phone</li>
<li>AES-256 file encryption via Amaze File Manager with biometric lock</li>
<li>Scans every link before opening and every file or app for malware via DresSecureComms</li>
<li>End to end encrypted email via Tuta Mail with Duck Address aliases so your real address is never exposed</li>
<li>GPS spoofing via DresSecureComms</li>
<li>MAC address randomisation per Wi-Fi network</li>
</ul>
</div>
<h3>Wallpapers</h3>
<p>Click each image to open it full size, then save.</p>
<div class="wallpaper-grid">
<a href="images/dres-wallpaper-lock.png" target="_blank">
<img src="images/dres-wallpaper-lock.png" alt="DresOS lock wallpaper" loading="lazy" />
</a>
<a href="images/dres-wallpaper-circuit.jpg" target="_blank">
<img src="images/dres-wallpaper-circuit.jpg" alt="DresOS circuit wallpaper" loading="lazy" />
</a>
</div>
<h3>Open Source License</h3>
<p>The DresOS Android guide and all associated documentation is licensed under the <strong>Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International (CC BY-NC-SA 4.0)</strong>.</p>
<p>You are free to share, copy, redistribute, adapt, remix, transform, and build upon the material for non commercial purposes, as long as you give appropriate credit to The DresOS Foundation, provide a link to the license, and release any modifications under the same license.</p>
<pre>Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International
CC BY-NC-SA 4.0
Copyright (C) 2026 The DresOS Foundation
https://dresos.org
https://github.com/DresOperatingSystems
You are free to:
• Share - copy and redistribute the material in any medium or format
• Adapt - remix, transform, and build upon the material
Under the following terms:
• Attribution - Give appropriate credit, provide a link to the license,
and indicate if changes were made.
• NonCommercial - You may not use the material for commercial purposes.
• ShareAlike - If you remix, transform, or build upon the material,
you must distribute your contributions under the same license.
Full license text: https://creativecommons.org/licenses/by-nc-sa/4.0/legalcode
</pre>
</section>
<section class="tab-panel" id="tab-projects">
<h2>GitHub Projects</h2>
<div class="info-block">
Our work sits in two places. The DresOS Android guide, the Magisk modules and the DresOS WebView engine are in the <a href="https://github.com/The-DresOS-Foundation" target="_blank">The DresOS Foundation</a> organisation. DresSecureComms and this website stay on the original account, along with most of the older archived projects. Every link on this page points at the repository's real home rather than relying on a redirect.
</div>
<h3>DresOS Android</h3>
<div class="card">
<ul>
<li><a href="https://github.com/The-DresOS-Foundation/DresOS-The-Android-Defensive-Security-System" target="_blank">DresOS-The-Android-Defensive-Security-System</a> - The complete unified DresOS Android guide: DeGoogling, operational security, the Magisk modules, the app and core component list, security architecture, and changelog. (29 stars)</li>
<li><a href="https://github.com/The-DresOS-Foundation/DresOS-Magisk-Modules" target="_blank">DresOS-Magisk-Modules</a> - The two Magisk modules the DresOS system needs: our microG suite and our system WebView engine. Current releases: DresOS WebView v2.2.1 and DresOS microG v3.1.5. (Shell, 18 stars)</li>
<li><a href="https://github.com/The-DresOS-Foundation/DresOS-WebView" target="_blank">DresOS-WebView</a> - The DresOS WebView engine itself, our Cromite based hardened Chromium build with Google services and telemetry stripped, signed with our own release key. (Smali, 7 stars)</li>
<li><a href="https://github.com/DresOperatingSystems/Android-Degoogling" target="_blank">Android-Degoogling</a> - The original rooted degoogling guide, now merged into the unified DresOS guide. (Archived, 11 stars)</li>
<li><a href="https://github.com/DresOperatingSystems/Android-opsec" target="_blank">Android-opsec</a> - The original on device OPSEC guide, now merged into the unified DresOS guide. (Archived, 6 stars)</li>
</ul>
</div>
<h3>Kali Linux</h3>
<div class="card">
<ul>
<li><a href="https://github.com/DresOperatingSystems/Third-Party-Kali-Nethunter-Build" target="_blank">Third-Party-Kali-Nethunter-Build</a> - Our third party NetHunter build. (Archived, Python, 9 stars)</li>
<li><a href="https://github.com/DresOperatingSystems/kali-linux-private-network-setup" target="_blank">kali-linux-private-network-setup</a> - Set up Kali Linux as a private, encrypted server for your home or business network. (Archived, 1 star)</li>
</ul>
</div>
<h3>Other Projects</h3>
<div class="card">
<ul>
<li><a href="https://github.com/The-DresOS-Foundation/DresTermuxAI" target="_blank">DresTermuxAI</a> - AI assistant for Termux with coding assistant abilities. (Archived, Python, 7 stars)</li>
<li><a href="https://github.com/DresOperatingSystems/DresSecureComms" target="_blank">DresSecureComms</a> - The DresOS secure communications app. Private SMS and MMS with per contact AES-256-GCM encryption, a full default dialer, on device spam and scam call screening, an encrypted contacts vault, and VirusTotal link, file and app scanning. On IzzyOnDroid. (Kotlin, 23 stars)</li>
<li><a href="https://github.com/DresOperatingSystems/Docker-android" target="_blank">Docker-android</a> - A Docker like environment on mobile, for advanced users. (Archived, 4 stars)</li>
</ul>
</div>
</section>
<section class="tab-panel" id="tab-tos">
<h2>Terms of Service</h2>
<p>By using DresOS projects, guides, modules, applications or services, you agree to the terms below. Last updated July 2026.</p>
<h3>What we provide</h3>
<div class="card">
<ul>
<li>DresOS is a non profit open source project. Everything we publish, the DresOS Android guide, the Magisk modules, DresSecureComms and DresOS WebView, is free, open source and provided as is.</li>
<li>We are not a company and we sell nothing. Donations are voluntary and fund test devices, build machines, domains and developer time. They buy no warranty, no support agreement and no priority.</li>
<li>This website is the only authoritative source for our releases and announcements. Anything presented as an official DresOS release, statement or communication should be verified against what is published here, and treated as unofficial if it does not appear on this site.</li>
</ul>
</div>
<h3>Use at your own risk</h3>
<div class="card">
<ul>
<li>Unlocking a bootloader, flashing a recovery, rooting a device and installing Magisk modules can permanently damage your device, void your warranty and erase your data. You accept that risk entirely. We are not liable for bricked devices, lost data, voided warranties or failed banking and integrity checks.</li>
<li>Our guide tells you to take a full backup before you start. If you skip that step, the consequences are yours.</li>
<li>Our software is provided without warranty of any kind, express or implied, including fitness for a particular purpose. Our work is scanned before release, DresSecureComms was reviewed and reproducible build verified by IzzyOnDroid before it was listed, and the system is built specifically to remove Google services and the tracking that comes with them. What we cannot promise is protection against every possible threat, or that any configuration will defeat a determined, well resourced attacker who is targeting you directly.</li>
<li>If our guides, modules or applications are used unlawfully or unethically, we take no responsibility and accept no liability for the consequences.</li>
</ul>
</div>
<h3>Privacy and data</h3>
<div class="card">
<ul>
<li>We operate no accounts, no analytics, no telemetry and no tracking. We do not collect, store, sell or share personal data, and there is no server of ours for your data to sit on.</li>
<li>DresSecureComms keeps everything on your device. Its only outbound network calls are the VirusTotal scans you choose to run yourself. File scanning sends a fingerprint of a file rather than the file itself, and the file is only ever uploaded if VirusTotal has never seen that fingerprint and you then choose to send that one file, from a prompt that spells out what uploading means. Nothing is uploaded automatically and a sweep of your installed apps never uploads anything. Call screening runs entirely on the device and never sends a number anywhere. The full detail is in the app's privacy policy in its repository.</li>
<li>If you email us, we hold that message only for as long as it takes to answer you.</li>
</ul>
</div>
<h3>Security reports</h3>
<div class="card">
<ul>
<li>Report security issues to security@dresos.org rather than opening a public issue. Email reaches us immediately, whereas notifications from GitHub and elsewhere do not always get seen straight away. Please give us reasonable time to fix an issue before disclosing it.</li>
<li>We answer every email within 24 hours, provided it concerns one of our projects, repositories or the organisation itself. Sales pitches, scams and spam are not answered.</li>
<li>We publish our security posture openly, including the things we deliberately did not implement and why. Read it before assuming a behaviour is a bug.</li>
<li>Bug reports are welcome and genuinely useful. Include your device, Android version, ROM, root provider and the relevant logs, as our guide describes.</li>
</ul>
</div>
<h3>Licensing and reuse</h3>
<div class="card">
<ul>
<li>Each project carries its own licence in its repository, and that licence governs. The Android guide is Creative Commons BY-NC-SA 4.0, the Magisk modules are GPL-3.0, and DresSecureComms is Apache-2.0.</li>
<li>You may study, modify and redistribute our work within the terms of the relevant licence. Keep the attribution and licence notices intact.</li>
<li>Do not redistribute our applications under our name with modifications, and do not sign a modified build with anything implying it came from us.</li>
</ul>
</div>
<h3>Third party software</h3>
<div class="card">
<ul>
<li>Our guide recommends software we did not write. Those applications belong to their own authors and carry their own licences and terms, which you must follow.</li>
<li>We do not control them, cannot vouch for their future behaviour, and are not responsible for them. Always download them from the official sources our guide links to.</li>
<li>The same applies to services used alongside our software, including VirusTotal, F-Droid, IzzyOnDroid, GitHub and Ko-fi. Each has its own terms and privacy policy, and your use of them is between you and them.</li>
</ul>
</div>
<h3>Conduct</h3>
<div class="card">
<ul>
<li>Zero tolerance for racism, violence, harassment and CSAM. Anything of that nature will be reported to the relevant authorities.</li>
<li>Be decent to people in our issue threads, forum posts and bug reports. Harassment, bullying and deliberate disruption are not tolerated.</li>
<li>Support requests should relate to our organisation, projects or services. Unrelated messages may not get a reply.</li>
<li>Follow the rules of the platforms our work is hosted on, including GitHub, F-Droid, IzzyOnDroid and XDA.</li>
</ul>
</div>
<p style="color:var(--text-dim); font-size:0.83rem; margin-top:16px;">These terms may change. Continued use of our projects means you accept the current version.</p>
</section>
<section class="tab-panel" id="tab-contact">
<h2>Contact Us</h2>
<p>Reach us through any of the channels below. For support requests, please make sure your message is related to our organization, projects, or services.</p>
<div class="contact-grid">
<div class="contact-card">
<span class="contact-icon">✉</span>
<div class="contact-label">Email</div>
<div class="contact-value">General enquiries, bug reports, and project feedback.</div>
<a href="mailto:security@dresos.org" class="link-btn" style="margin:0 auto;">Email Us</a>
</div>
<div class="contact-card">
<span class="contact-icon">🔒</span>
<div class="contact-label">Encrypted Contact</div>
<div class="contact-value">Contact us via Arcane Chat or Delta Chat using the link to our account. End to end encrypted by default.</div>
<a href="https://i.delta.chat/#89A451307BDD8F639FAEB1F2E91439D2EC80F32E&v=3&i=i03x9F2lmw0OzvNwkIauvPkY&s=8mBOxtYPe-5X0BtJicY6Fz-m&a=eqwjjbwgd%40arcanechat.me&n=DresOS" class="link-btn" style="margin:0 auto;">Send Encrypted</a>
</div>
</div>
<div class="info-block" style="margin-top:28px;">
Response times vary. We are a small open source team and handle all support in our free time. We will always get back to you on project related questions.
</div>
</section>
</main>
<footer>
<p>Copyright © 2026 The DresOS Foundation. Licensed under <a href="https://creativecommons.org/licenses/by-nc-sa/4.0/" target="_blank">CC BY-NC-SA 4.0</a>. | <a href="https://github.com/DresOperatingSystems/DresOperatingSystems.github.io" target="_blank">Website Source</a> | <a href="https://github.com/DresOperatingSystems" target="_blank">GitHub</a> | <a href="https://ko-fi.com/dresos" target="_blank">☕ Donate</a></p>
</footer>
<script>
function switchTab(id, btn) {
document.querySelectorAll('.tab-panel').forEach(p => p.classList.remove('active'));
document.querySelectorAll('nav button').forEach(b => b.classList.remove('active'));
document.getElementById('tab-' + id).classList.add('active');
btn.classList.add('active');
window.scrollTo({ top: 0, behavior: 'smooth' });
}
</script>
</body>
</html>