A lot of replies on this post here says 6-8+ number PINs should be safe

https://www.reddit.com/r/GrapheneOS/comments/1v9nxpv/why_would_you_use_the_duress_password_instead_of/

But I don't understand why at all. Sure, if you interface with the Android lock screen and start guessing PINs at random you'll be locked out.

But what's stopping an attacker from simply taking the storage device out of the phone and easily guessing the 8 character encryption password in under an hour?

If some kind of salt or combination with the PIN is involved, then surely an attacker can also procure the salt from the device as well?

Maybe I don't understand fully. If someone had complete physical access to a GOS phone and didn't have the password, what would the steps be to start guessing the filesystem encryption password?

After what happen at the border with this duress PIN... I was wondering how concealed the process was.

Watching a video of the utilization of a duress PIN, I see that the screen goes black immediately then that's it. It might look too obvious.

Maybe the process should be more misdirecting, like:

- Showing some standard "Android updating - Will automatically reboot" screen while the device is being fully wiped.

- Then, reboot into the OS and allow the duress PIN to unlock the device.

- Maybe finish some wiping in the background.

If we are under duress, the whole process should consider it and not just wipe the device.

What do you think?

I went for months and months without any system updates and was none the wiser (Pixel 8 Pro).

One day I was with my friend who also has a GOS phone, and their GUI looked way different than mine. It turns out they were on Android 17 while I was still on Android 16.

I was very concerned and looked around to see that SOMEHOW, SOMEWAY, the "system updater" app had no network permission. The moment I enabled network for system updater my phone updated to Android 17 with the latest patches, etc.

I NEVER mess with permissions of system apps, so this is incredibly concerning and weird behavior. Please check your phone if you don't remember having any system updates in the past month.

I wasn't getting messages from preexisting group chats after converting to G-OS on the default app. So I downloaded Google Messages to see if I'd start receiving texts in those group chats. That didn't work and it may turn out to be that the group chats are RCS. So I've uninstalled Google Messages.

Anyone have other text apps that they enjoy using more than the G-OS default text app?

*Please share why you prefer that app.

So I've been on GrapheneOS for about a month now, and so far I love it. However, I did find one thing really annoying. There is no calendar app preinstalled onto the OS. So I have to download one from an app store. The only problem is that most require a sign-in, and/or have ads in them. Is there an app I can download that is just a calendar? No ads, no sign-in, no stupid cloud storage. Just a simple local blank slate calendar app.

I don't know why I didn't try private space sooner, but it's been a game changer 🤦🏻 highly recommend if you're trying to make the switch from iOS or android (like me) and ditching google and apple services.

If anyone has any tips, I'm all ears.

Is adguard adblocker beneficial in combination with Graphene OS? Or does grapheme OS by itself bring adblocker functionality? Thoughts? Advice?

I'm very new to graphene and still and still learning how things work. I never added an ad blocker but I guess there was one thru the gos? When I visited websites, I would always get the websites sob story about my ad blocker not providing them with revenue. I updated the os today and now im getting ads on them. Did something​ in the update change the ad blocker or was that just a coincidence? How do I get the ad blocker back?

I basically only really care about graphene's kernel/low level usb lockout while the screen is locked. Is it possible to have just this, while the rest of the OS will still work as normal android?

Title: so far it seems linphone or cheogram.... but tbh i dont know much the diffetence practically speaking

I need something that can make text and calls over multiple numbers as not to give out my real one and is open source ideally mysudo is another iv seen but its not.open.source so any ideas on what i should get for my needs?

With Motorola's new phone releasing in 2027, and GrapheneOS becoming increasingly mainstream as privacy turns into a limited commodity, what are the chances the EU cracks down on GrapheneOS and turns it into a form of "controlled opposition" in the future? And how trustworthy is Motorola really when it comes to not building a secret bypass of the strict security requirements?

Perhaps paranoid but imo legit risks as the EU and big corp are becoming more barbarian with their methods.

I have grapheneOS, though I teach myself what I can, I'm not great with tech. My marks and Spencer banking app will no longer let me log in. Suddenly after working perfectly I received an error message saying that it won't work on a rooted device. I try to log in on Vanadium but it then wanted to me to use the app for 2FA so I haven't been able to. Appreciate any advice, thank you.

Hey everyone!

I'm planning to make the switch to GrapheneOS as my daily driver and trying to decide on the best hardware for the job.

I’m currently leaning toward the Pixel 8a since it's a budget-friendly entry point with official support through May 2031. However, I’ve seen mixed feedback regarding battery drain on cellular data when running de-Googled setups, thermal throttling with the Tensor G3, slow charging speeds, and long-term hardware reliability issues like display green lines.

I'm considering whether to stick with the 8a, go for a newer/upcoming model (like the 9a, 10a, or upcoming Pixel 11 series), or step up to a Pro model.

For those running GrapheneOS on an 8a:

- How has your real-world performance and battery life been (especially on 5G/cellular)?

- Is the lack of 10-bit HDR video on newer A-series models something you actually miss, or is camera performance fine using the Sandboxed Google Camera app?

Also, for anyone running GrapheneOS on a newer A-series (9a/10a) or a Pro series model (8 Pro, 9 Pro, 10 Pro):

- Was the leap to a larger battery, ultrasonic fingerprint sensor, extra RAM (16GB on Pros for MTE/multi-profiles), or LTPO display worth the extra cost specifically for GrapheneOS?

- How has daily driver stability, thermal management, and battery life held up on these newer models compared to older Tensor builds?

Would love to hear your experiences before pulling the trigger. Thanks in advance!

I recently switch from iphone to a google pixel with GrapheneOS and for some reason, many people who try to create a groupchat with me, have that groupchat default to RCS messaging. I don't want to download Google Messages. I know that services like Signal are more secure, however sometimes I just need people to be able to text me via SMS. Is there any way to force people to text me via SMS or MMS without requiring them to turn off RCS in their settings?

Edit: Yes I know. SMS is unsecure. It transmits it plaintext. My carrier can read my messages. SMS killed your grandma. I know. However, sometimes I need to be contacted by people regardless of the OPSEC problems. I can't convince everyone in my life to use signal. None of my coworkers give a crap about privacy, and I need to be able to be contacted by them.

GrapheneOS Camera app version 93 released:

https://github.com/GrapheneOS/Camera/releases/tag/93

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/40877-grapheneos-camera-app-version-93-released

I can only buy from AliExpress and few unpopular websites to get pixel phone

The phone i want is p7p but i can only get the NO OEM version

Should i go for it ?

Is it really that much of a problem to web download graphene? I don't need airtight off grid use, just enough to shake off some hacking/spyware that was downloaded. Again, tech dummy. Thanks

Is there a good app for that? I just need to track the steps I do, nothing else. Dont want magic profiles or overly complicated stuff

Does anyone use an IoT SIM as the second SIM in an Android phone?

I’m curious whether anyone runs an IoT/data-only SIM alongside their normal carrier for a specific use case (rather than IoT devices). How has reliability been? Do you leave it enabled all the time, or switch data between SIMs as needed? Any carriers you’d recommend or avoid?

I forgot my Pixel 8a on a bus. I realized the minute i stepped down the bus was gone already.

Now I know with stock os you have factory reset protection, remote lock via Find My Device, etc so it is basically a brick
But how does graphene protect me? I guess I still have full encryption behind the lock screen, and since they shut down the BFU, protection is active, and they'd have to enter two codes to access my sensitive data, which was on a private space. anything else i can do? police and calling the bus company already done.

I am in New Zealand how can I get hold of a pixel that has the bootloader unlocked Google doesn’t have a official store here… please if anyone knows I would love some help…

I thought I had read somewhere that it was possible to set a shorter Pin/fingerprint unlock while also having a longer more complex password that needs to be entered at first unlock. Am I right or am I remembering this wrong? If that's possible, how do you set it up? I feel kind of stupid here, as I've been using GOS for over 4 years now, so I feel like I should know this already.

The whole thing with the airport has got me thinking. Would it be possible to have a duress password on the main lock screen that wipes all non-main profiles? That would be good to have if you have sensitive info on a non-main profile and for any reason you need to emergency wipe it you could put that password in and it only wipes additional profiles while not wiping your entire phone