For those who use GrapheneOS, is it worth it? Do you like it?
My backups are done, all that is left is the final choice to wipe my whole phone.
For those who use GrapheneOS, is it worth it? Do you like it?
My backups are done, all that is left is the final choice to wipe my whole phone.
If you could tell me the logic behind using the different securities… I’m working on figuring out graphene and using it as a daily driver. Currently I’ve got my owner profile which is the one with Google Play. I’ll just push the apps to my daily driver…
What would you suggest?
@pinball_wizard@lemmy.zip was correct: Even a single GOS profile is already much better than normal Android. You can read up all the security stuff GOS offers in Settings/Security and Privacy. A lot of those features are already much better than stock Android, e.g. strict control over USB c, spawn app securely, wifi/BT auto off…etc.
As to your question about logic in using diff securities, GOS is the only OS that allows you to have many profiles. These profiles are completely isolated from each other. You have your own keylock, user for each profile. That is much more powerful that stuff like Peivate Space (stock Android has) or even Samsung Secure Folder. So I want to make the best use for these features…
That and we have too much personal and sensitive stuff on our phones nowdays. I’m not talking about normal stuff like emails and photos. I meant online banking apps, identity card app that each country for some reasons force citizens to install…And everything else, literally everything has an app.
Anyway…
Initially i went with: 1 owner profile (the one you started originally), 1 media profile, 1 bank profile and 1 daily profile. You know like completely compartmentalize your life.
This works BUT there is a lot of inconvenience. .E.g. if i see an article in Vanadium in daily and want to share it to whatsapp/viber/signal which live in media, i cant.
So I then went with: 1 owner profile and 1 sensitive profile…So all the things that are very important to me like banks, IC app I put in sensitive. .Everything else I put in owner. Note: in sensitive profile, I do not user fingerprint; I set a long password for that.
Hope that helps.
Not OP, but here’s an answer for your consideration.
Assuming you are not currently being hunted by well resourced scary people…
It seems to me that even using a single user profile on GrapheneOS already provides dramatically better security and privacy outcomes than any other mobile device option, anyway.
I don’t think I’m being hunted or resourced… But realistically speaking I’m just tired of not having control of my data.
I’m more just trying to figure out the most effective setup. Because I am going to need certain apps I’m going to get from the Google store. I don’t need them all the time, what I really need to understand is which profile should I have the Google Play store on. Should I have it on a secondary profile or the owner profile.
I don’t intend on using the profile with Google Play on it daily.
another solution for you is no profiles, just the main + Private Space. In main you dont use any Google stuff. In your private space (setup with a different unlock method from your screenlock), you sign in and get your Google stuff. I havent tried it but it sounds ok…Not sure about transferring files though. E.g. what if I have a news article in Vanadium in mainland and want to share it to my contacts in Private Spac? Or the reverse: I got a pdf from whatsapp in Private Space and want to store it in my main’s folder?
I haven’t even realized there’s a private space…