Just installed GOS on my phone, really like it. I want to know how GOS users setup their profiles to learn from them. So far, i found out the followings:
-
everything in Owner
-
leave Owner blank. Put everything in another profile names User.
-
leave Owner blank. Put all Google stuff in user Google. Put all FOSS app in FOSS user. Put all bank stuff under Sensitive user.
-
use Owner as an app repo. So install Google Play, Acrescent, Fdroid. Install apps from there, but dont use them. Instead, when create new user, push those apps from Owner. This is similar to Side of Burritos on Youtube.
anything different?
Everything in owner because I don’t understand the implications well enough to do otherwise (so thanks for the thread).
Same. I need to step my game up! Profiles don’t look that hard, just something to learn 🙂
I have everything in Owner profile (including Sandboxed Google Play)
Everything in Owner and a secondary phone for all proprietary work and communication apps. The secondary phone is powered off or at least disconnected once I leave work. Google stuff and banking through a computer browser whenever possible.
If I were forced to use only one phone, the secondary phone’s contents would be on a secondary profile. This used to be my setup but switching between profiles throughout the day wasn’t my thing.
You might also consider the new private space feature depending on your needs: https://www.youtube.com/watch?v=G94V5I2xH1E
Owner profile for main use, shelter w play services for apps that need them.
I also keep a Duress pin enabled which i have written down inside the phones case, so if Anyone “finds” my phone and tries to unlock it they will just end up wiping it.
The downside of letting someone wipe your phone is they can then sell the phone. It’s a lot harder to pawn a “found” phone if it is locked.
You can always wipe it without the duress pin
Doesn’t a stock android need to unlocked before it can be wiped? I doubt if GOS would remove that security feature.
GrapheneOS doesnt have FRP due to it being exclusively a google service (it requires signing in to the previously used google account that was used before the reset)
Afaik there isnt any equivalent service available to GOS, although it probably could be technically possible.
That is not the case in my experience. At the very least, you can wipe it from recovery without unlocking it.
I suppose its possible it varies between manufacturers, but I would be surprised because they don’t want the hardware to be useless if you forget the pin immediately after you set it.
Factory Reset Protection
"On modern Android phones, there shouldn’t be any problems as long as you choose to factory reset your phone through its settings. This will automatically remove all the associated accounts in a way that “frees” the phone from FRP. If you try to reset a phone through the bootloader, FRP will kick in, and it can’t be set back up without the previous account’s password.
I assume if I tried to reset through the bootloader the phone would become a paperweight as there isn’t a Google account on my phone. No password to enter. I’m just going by what android central says, haven’t tried it myself. Sounds like you have more experience with this.
https://www.androidcentral.com/factory-reset-protection-what-you-need-know
I was unaware of this. I have never run into that issue, but I’ve never used the bootloader to reset a phone that is associated with my google account.
I would assume not having a google account associated with the phone would disable FRP making it a non-issue, but I’m clearly not an expert as I didn’t know this existed
I decided to check grapheneos.org and found out that a gos phone does not have frp.
I have all of my open source apps in my main profile, a Shelter profile for proprietary apps (which I hardly use nowadays), a user profile for apps needed for my university, and another user profile for apps needed for a certain gig I’ve been involved with
Thank you. I can’t inform a response, but your question is very helpful for me with limited / low level ideas and poised to jump to GOS.
One profile. No Google sandbox stuff. All open source programs.
On my work Pixel tablet I have a home profile as owner with Aurora store just to be able to load it on the other profile. Then a secondary “work” profile with all the bloat
Currently everything in owner, with banking apps in my private space.
I was tempted by the idea of owner as an app repo but the private space is only available in the owner profile.
Someone else in this thread mentioned they were using another device for their app repo and sideloading from there. That’s an intriguing idea for keeping even sandboxed Google off my owner profile. An idea for the future maybe.
do you use a different Google account to download the bank app? or no Google at all in private space, and instead push an app downloaded from main?
A different google account in the private space.
Owner has everything as open source/de-googled as possible. User 2 has YouTube/twitch for my video game communities. User 3 is work mode with pretty much Outlook for work. (And apps that work wants)
Users 2 and 3 have play services enabled just to reduse headaches in the future
All you people with multiple profiles better have insane backup strategies and love doing it often and it’s a removed. You have to backup each profile and restore individually once booted back up starting with owner then one after another. It’s a nightmare.
You also cannot use a single drive to backup each profile as the backup reading process that distinguishes each profile does not understand.
Meaning the same drive cannot even be partitioned to have a save of each profile. It requires different drives entirely. The absolute simplest process for backups are having a flash drive for each profile. Graphene os is very cumbersome to backup and DOES NOT backup all data. Once you restore from a backup you’ll understand all the pains I say, including the data you have to restore separately. A good backup is only good if you know you can restore and it works.
Hope this helps people refine their profile strategies. Most people avoid owner usage. I think there are pros and cons to that strategy. Like no pop up messages, notification delays, many other lacking options outside of owner profile like certain settings are unavailable to tweak. Including dev mode.
I’ve used graphene for years, across multiple pixel generations. It’s not the white knight made out to be. Their project is very silo’d in security and lacks the true polish of a complete OS. I still use it and think it has great merit just note the drawbacks are many. There’s so much more to add. It is late in my timezone. Hope this helps someone.
I think after testing multiple strategies that the best is to main owner, business and Google stuff 2nd, sketchy apps and things you don’t care if they get lost to delete the phone back to factory. Backup 1 and 2 only. 3 or more are throwaways. You have far more threats to lose your data from theft or social engineering by friends or family etc. than you do someone hacking multiple encrypted browsers with sandboxes of apps and then across encrypted profiles. Most of those scenarios are too complex but your imagination makes them appear big and real because of movies or TV.
Reality is the true threats are often much easier and simple. Bad actors tend to be least effort to get their goal. Nor are most Jason Bourne.
I have a work profile for my work stuff. All my personal stuff is on Owner.
Default.
I installed Shelter into the owner profile to enable the work profile. All the googly stuff gets installed in that work profile. I only unpause the work profile when I need a specific app and pause it again when I am done. Open source and apps that do not require play services are allowed to run directly in my owner profile.
One profile on a 6a. If I had a Google account, I would likely have a second profile.
Most apps come from Github through Obtainium, I also use F-Droid, and a few get updated from Aurora Store.
I noticed a month ago that some apps aren’t being updated in Accrescent - Fdroid had a more up-to-date version for a few apps. I heard they have a funding issue which is probably why. Just something to be aware of.
The apps I have on board, that aren’t privacy respecting, either have their network access blocked or are disabled until I need them. These are Amazon Shopping, Roamless (data esim), and Sound Connect (Sony BT headphones).
No Google account but I do run Sandboxed Google Play for the notifications. Only two apps use the notifications through SGP - Signal and Protonmail but of which have taken steps to conceal the contents of the message from Google.
I have a Duress pin set. If being brute forced, the pin I set will likely be entered before my real pin and wipe the phone.
I mostly use a fingerprint for unlock so no one can see my pin while in public spaces. I also avoid unlocking if anyone is too close to me.
Phone stays in airplane mode most of the time to avoid cell tower triangulation. Using a voip phone service makes it possible to make and receive phone calls without cell towers being involved. My voip provider is very kyc but I do plan on switching to JMPChat soon.
Reboot is set for 8 hours.
If I disable the microphone I can never enable it quick enough to answer an incoming call so don’t turn it off system-wide but do deny for apps that don’t need it.
Disabling the camera permission system-wide has forced me to wait a very long time, after enabling the permission, before I can take a photo. I leave this permission on and just deny for apps that don’t need it.
I typically connect to public and home wifi so I leave this on.
My headphones are bluetooth (I can’t stand using a cable) so BT stays on.
Global PS is an incoming signal so I leave this on. GOS is transmitting a ton of data to Google so I don’t see the risk. Doesn’t seem to drain much power. Only really needed for my map app.
