SOVEREIGN
← All guides/

Apps & compatibility

eSIM vs Physical SIM

They carry the same cellular privacy exposure. They're not identical. Here's what actually changes, and when it matters.

eSIM works natively on every GrapheneOS Pixel device, and for most people it's simply more convenient than a physical SIM. But "which SIM format is more private" is a genuinely common question, and the honest answer is more specific than a lot of privacy content online suggests.

Looking for step-by-step activation instructions for your specific carrier instead? See our eSIM setup guide. This page covers the trade-offs behind the choice, not the activation steps.

What eSIM doesn't change

Your carrier knows which cell towers your device connects to, which reveals your approximate location, continuously — regardless of whether you're on eSIM or a physical SIM. This is a property of how cellular networks work, not something either SIM format changes. In Australia, both eSIM and physical prepaid SIM activation require identity verification under the same regulation, so there's no anonymity advantage to either.

GrapheneOS's baseband protections — 2G disabled by default, which closes off IMSI-catcher and stingray attacks that rely on forcing a device down to unencrypted 2G, and hardware isolation of the cellular modem from the application processor — apply identically whichever SIM format you use.

What actually differs

Physical removability. A physical SIM can be taken out of the device entirely, which is the only way to guarantee with certainty that the cellular radio has no active subscriber identity to report. Airplane mode and disabling an eSIM profile in software are very close to equivalent in practice, but they're software states, not a physical guarantee — worth the distinction for anyone with a threat model where that matters.

Remote control by the carrier. An eSIM profile can be remotely deactivated or reissued by your carrier as part of routine account management — the same as they can suspend a physical SIM's service, but without needing anything to physically change on the device. This isn't a vulnerability so much as a different mechanism worth being aware of.

Switching speed and trail. Activating a new eSIM takes minutes via a carrier's QR code, with no physical card involved. A physical SIM swap is slower, but leaves nothing installed on the device from the process itself — some people prefer that simplicity for specific situations, like international travel with a local prepaid SIM.

Side by side

AspecteSIMPhysical SIM
Carrier and location visibilityIdentical to physical SIM — your carrier sees the same cell tower and location dataSame — this is a cellular network property, not a SIM-format property
Swapping between numbers/carriersFast — activate a new profile via QR code in under two minutes, old profile stays until deletedRequires a physical card swap; slower but leaves no digital activation trail on the device
Physical removabilityCannot be physically removed — no way to take connectivity offline except airplane mode or disabling the profile in softwareCan be physically removed from the device entirely, guaranteeing no cellular radio activity
Traceability of acquisitionActivation is tied to an online or in-app process with your carrier, typically requiring identity verificationSame identity verification requirements apply in Australia — no meaningful anonymity advantage
Remote deactivationCarrier can remotely deactivate or reissue the profile without physical access to the deviceCarrier can suspend service, but cannot remotely alter what's physically in the device
Multiple identities on one deviceMost Pixels support one active eSIM plus one physical SIM, or switching between multiple stored eSIM profilesLimited to physically swapping cards, one at a time

Switching from iPhone: what to expect

iPhone's eSIM transfer flow is sometimes tied to iCloud or a direct device-to-device handoff — neither of which is available moving to a GrapheneOS Pixel. The reliable path is to skip Apple's transfer flow entirely: contact your carrier directly through their app on another device, their website, or by phone, and request a new eSIM QR code for your existing number. This activates on the Pixel exactly like any other new-device eSIM setup, and your old eSIM on the iPhone deactivates automatically once the new one activates.

Frequently asked questions

Is eSIM more private than a physical SIM?
No — not in the way people often assume. Your carrier sees the same location and connection data regardless of SIM format. eSIM's privacy-relevant difference is that it can't be physically removed to guarantee the radio is off, and switching profiles happens digitally rather than by swapping a card. Neither format anonymises you from your carrier.
Does Australian law require ID for eSIM the same as physical SIM?
Yes. Australian carriers require identity verification for eSIM activation the same as for a physical SIM, under the same Telecommunications (Service Provider — Identity Checks for Prepaid Mobile Carriage Services) Determination. There's no anonymity advantage to eSIM in Australia.
Can someone remotely wipe my eSIM without physical access?
A carrier can deactivate or reissue an eSIM profile remotely as part of normal account management — the same way they can suspend a physical SIM's service. This isn't a security vulnerability specific to eSIM, but it's worth knowing the mechanism differs: with a physical SIM, at minimum the card itself remains in your possession.
How do I move my eSIM when switching from iPhone to a GrapheneOS Pixel?
Apple ties eSIM transfer to iCloud in some flows, which isn't available on GrapheneOS. The reliable method is to contact your carrier directly, either through their app on another device or by phone, and request a fresh eSIM QR code for your existing number — this sidesteps any Apple-specific transfer flow entirely and works the same as any other new-device activation.
Should I use eSIM or a physical SIM on GrapheneOS?
For most people, eSIM is fine and more convenient — the privacy exposure is the same either way. Choose a physical SIM specifically if you want the option to physically remove cellular connectivity from the device, which some higher-scrutiny threat models specifically require and which no software toggle can fully replicate.

Ready to activate?

See our step-by-step activation guide for Telstra, Optus, Vodafone, and the major Australian MVNOs.

Last updated: July 2026. Carrier processes and regulations may change — if you find outdated information, contact us and we'll correct it.