Browsers, blocked
Beeswax hides every web browser on your phone, even the built-in one that can't be uninstalled.
Create a dumbphone
on Android
Beeswax blocks web browsers and newly installed apps until you enter your lock code. Give the code to someone you trust, or put it somewhere inconvenient.
Get it on GitHubBeeswax is in beta.
It has only been tested on GrapheneOS. Before you lock it, read the setup guide and keep your lock code somewhere safe. If the code is lost, the only way back is a factory reset. If something doesn't work right or you have a feature request, please open an issue.
Why Beeswax?
New apps need your code
Once Beeswax is locked, new apps you install can't be opened until you approve them with your lock code.
No easy bypass
Restarting, booting into safe mode, or connecting with ADB won't get you around it. Only the lock code or a factory reset get through.
Apps still update
Unlike blockers that use separate user or work profiles, Beeswax lets you update your apps without letting you access new ones.
Privacy and security
Beeswax collects and shares no personal data. It has no telemetry, one permission, and no network access. A list of all Android device management APIs used is in PRIVACY.md. Beeswax has reproducible builds so you can verify the source code is what runs on your device.
- Nonetwork access
- 1permission
- reproducible builds
Setup
You'll need a computer with ADB, USB debugging enabled, and no accounts or users on the phone while you set the device owner. You can add accounts back afterwards.
- 1
Install Beeswax and make it device owner with one ADB command.
- 2
Lock Beeswax and keep the lock code somewhere you can't easily reach.
- 3
Use the code whenever you want to open a browser or approve a new app.
On your computer, open a terminal (Command Prompt on Windows) and run the command Beeswax shows on its screen:
$ adb shell dpm set-device-owner org.getflourish.beeswax/.Receiver
Beeswax should now say "Device owner: active."
FAQ
Which phones does Beeswax support?
Beeswax has been tested on GrapheneOS and the stock Pixel OS.
What if I forget my lock code?
Without your lock code, you can't access new apps you install and can't access a web browser. You can still export all your data and access the apps you already have. If you need to install new apps or access a browser, you'll need to factory reset your phone.
How do I remove Beeswax?
Unlock beeswax with your code and press Deactivate. See the setup guide for more info.
Was Beeswax made with AI?
Yes, it was written and reviewed with Claude Opus 5.5. The app itself contains no AI and never connects to the internet. More reviews are welcome.
Is Beeswax secure?
Beeswax uses Android's built-in device-owner system, which is the intended way to restrict a device. It's tiny, has no network access, and only does what it says. You can confirm you have the real APK with its SHA-256 signing certificate, and that it matches the source code through reproducible builds. More details are in PRIVACY.md.
What are the risks?
Device-owner apps can be granted a lot of control by Android, so you have to trust them. Beeswax uses only the few device-management APIs listed in PRIVACY.md, and everything they do can be undone. See Risks to using Beeswax for more.
Will I always need ADB?
If GrapheneOS adds support for QR code provisioning during setup, Beeswax could be set up without a computer by scanning a QR code during initial phone setup (issue / earlier attempt, closed). You can react to the issue to show support, but please only comment if you have something meaningful to add.
Download
Verify your download with an app verifier:
org.getflourish.beeswax F5:37:A3:91:23:40:95:AC:42:53:85:D4:9E:B0:AA:43:C8:ED:84:4D:FC:84:15:F2:1C:C4:BF:63:52:86:34:54