99
For GrapheneOS users, what is your profile setup like? (lemmy.world)
submitted 9 months ago by to c/privacy@lemmy.ml
41 comments fedilink hide all child comments
 

Just installed GOS on my phone, really like it. I want to know how GOS users setup their profiles to learn from them. So far, i found out the followings:

  1. everything in Owner

  2. leave Owner blank. Put everything in another profile names User.

  3. leave Owner blank. Put all Google stuff in user Google. Put all FOSS app in FOSS user. Put all bank stuff under Sensitive user.

  4. use Owner as an app repo. So install Google Play, Acrescent, Fdroid. Install apps from there, but dont use them. Instead, when create new user, push those apps from Owner. This is similar to Side of Burritos on Youtube.

anything different?

you are viewing a single comment's thread
view the rest of the comments
[–] 5 points 9 months ago (1 child)

Owner profile for main use, shelter w play services for apps that need them.

I also keep a Duress pin enabled which i have written down inside the phones case, so if Anyone "finds" my phone and tries to unlock it they will just end up wiping it.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 1 point 9 months ago (1 child)

    The downside of letting someone wipe your phone is they can then sell the phone. It's a lot harder to pawn a "found" phone if it is locked.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 9 months ago (1 child)

    You can always wipe it without the duress pin

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 9 months ago* (2 children)

    Doesn't a stock android need to unlocked before it can be wiped? I doubt if GOS would remove that security feature.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 9 months ago

    GrapheneOS doesnt have FRP due to it being exclusively a google service (it requires signing in to the previously used google account that was used before the reset)

    Afaik there isnt any equivalent service available to GOS, although it probably could be technically possible.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 9 months ago (1 child)

    That is not the case in my experience. At the very least, you can wipe it from recovery without unlocking it.

    I suppose its possible it varies between manufacturers, but I would be surprised because they don't want the hardware to be useless if you forget the pin immediately after you set it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 9 months ago (1 child)

    Factory Reset Protection

    "On modern Android phones, there shouldn't be any problems as long as you choose to factory reset your phone through its settings. This will automatically remove all the associated accounts in a way that "frees" the phone from FRP. If you try to reset a phone through the bootloader, FRP will kick in, and it can't be set back up without the previous account's password.

    I assume if I tried to reset through the bootloader the phone would become a paperweight as there isn't a Google account on my phone. No password to enter. I'm just going by what android central says, haven't tried it myself. Sounds like you have more experience with this.

    https://www.androidcentral.com/factory-reset-protection-what-you-need-know

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 9 months ago (1 child)

    I was unaware of this. I have never run into that issue, but I've never used the bootloader to reset a phone that is associated with my google account.

    I would assume not having a google account associated with the phone would disable FRP making it a non-issue, but I'm clearly not an expert as I didn't know this existed

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •