TLDR: Projected 6 months without updates. Current users are encouraged to uninstall and wait for information. At the end of six months everyone will have to reinstall even if they keep using their CalyxOS without updates

We appreciate your valid concerns and questions around the security and safety of CalyxOS.

First, we want to assure you that we have no reason to believe the security of CalyxOS and its signing keys have been compromised.

As you know, we announced a recent leadership transition. When senior personnel have access to signing keys and leave a team, it is security best practice to update signing keys and conduct audits. So in accordance with that, we are using this transition period to update our security protocols, including updating the signing keys and taking other steps to further protect our users.

In the past, security audits have been conducted for parts of CalyxOS, such as the Seedvault project, but not for the entire project. As more and more people across the globe started using this tool, we intend to conduct a broader security audit and publish the reports for the public to review.

As mentioned in our community letter below, we estimate that this audit and the implementation of new security protocols and signing keys will take four to six months, but we will endeavor to complete this process as soon as possible. However, for the time being, current CalyxOS users will not be able to receive further security software updates until our new security protocols are in place.

Without security updates, we can only be honest that this does not guarantee the level of security we strive for, especially when global threats to privacy and human rights are at a critical moment. That is why in the meantime we have posted the recommendation that people who are running CalyxOS should uninstall the OS and follow our community channels for updates, including when the latest version of CalyxOS becomes available again.

In case you wish to migrate to another custom ROM in the meantime, we’ve now published updated guides on how to back up and restore your device using Seedvault and how to restore your device to stock.

We also understand that many community members have expressed interest in having an installation option/images for CalyxOS available again. Due to the overwhelming feedback from our community, we’ve decided to make the images publicly available once more. Please be aware that this decision is not a recommendation to migrate to CalyxOS now.

Please note that, just as current users will not receive further software updates without reinstalling CalyxOS when future updates are released, any device installing CalyxOS in the near future will also need to reinstall it. We want to ensure that all users are well informed before deciding to install CalyxOS at this time.

Again, we are very sorry for this development and we thank you for giving us—the project and more importantly the team—tremendous trust and support. We are doing our very best on our end, and are committed to keeping CalyxOS secure and this decision is a result of that commitment.

I'm trying out LineageOS. It seems to have most of the user facing stuff I care about. I did have to manually install F-Droid, then add the repo for microG and install that, then manually install Aurora, so some more manual work was required, but it seems fine. It has options to deny network access to apps, though it's a bit hidden in the network settings for each app instead of thru a "Firewall" app. It also comes with SeedVault so I was able to import my CalyxOS backup and get my apps and settings restored. My banking app (USAA) works fine too.

Try /e/OS

https://doc.e.foundation/what-s-e

I'm wondering about LOS re-locking on particular devices. DivestOS used to allow that, not sure if only on pixels, but if divestOS which was based on LOS could, I don't see how that code can not be ported over upstream LOS. Have anyone seen an effort similar to divestOS in this regard?

Nooo! D:

It is better to be forthcoming than to quietly abandon something critical

From what I can tell Calyx OS has had some rough spots. I hope the relaunch will allow for time to polish.

I really wish that Lineage OS would start supporting bootloader relocking. I get why they don't but it would be nice if they had it as an option.

:(

What was the update? Getting address not found on both calyos.org and calyxinstitute.org which doesn't bode well

Edit: came back up. Update if it's down when viewed

Update: August 27 2025

We are concerned that some users may have not seen the important message in this letter about CalyxOS’ current hiatus. Therefore, we are rolling out one last OTA update to devices currently running CalyxOS to reach as many active users as we can. You can read our post for more details about this update.

Great move. They should of done it weeks ago.

I was curious where Calyx would go after the recent Pixel/Android update issues. I'm glad they are going to try to push through and release more updates, even though it's 6 months out. Might have to switch to Lineage, but I hope I'll be coming back to CalyxOS come January

Hope they manage to pull through, the more custom ROMs the better.