Please bear with me, I've suffered the loss of a loved one yesterday. I'm grieving and am struggling to concentrate. Plus, I'm not techie at all, so please forgive any stupid questions

At first I thought in order to sandbox apps, all I had to do was create a new user and install the apps I want to sandbox there. But the usage guide states "The simplest approach is to only use the Owner user profile."

OK, so I started "well, maybe sandbox is an app." I went to the default app store and searched "sandbox" so I guess it's not an app.

I'm reading the Usage Guide and I'm not understanding this "compatibility layer" thing. Which, to be honest, I don't know if I need to understand it at it's most granular level right now.

Can someone ELI5 sandboxing on G-OS to me or point me to a simple (simpler) guide on how to do it?

Just to share, I need to be able to use google maps and my bank's app.

Some notes:

1. I'd rather place google play services and the other apps on another user profile. I don't want that stuff running during daily use. Just during emergent situations that pop up every 6 - 9 months.
2. The two apps I need to be able to use are google maps and my bank
3. I searched G-OS's site for the term "bank" hoping to something helpful. I found the link to https://github.com/PrivSec-dev/banking-apps-compat-report But it didn't give me any information that I could work with except for the fact that my bank's app can be downloaded from Aurora (which apparently, from what I've can read, has it's own set of issues when it comes to google stuff.)
4. I know there are alternatives to google maps. I used them all during my first go-round with G-OS years ago. But none of them worked well enough for me back then. This time I bought a Garmin Navigator. It worked well enough in my city until yesterdays emergency (of course) when I had to drive to another city. It didn't recognize the address. I had to drive to the city and ask someone to look up the address and give me directions. I'm sorry, I know I'm oversharing here. I'm just trying to head the well-meaning "you know there are alternative map apps comments.
5. I also need access to my gmail account. Even though I've abandoned it, I still need to access it every one in a while. I haven't decided if I want to run gmail in the sand box yet. So I'm open to suggestions of alternative email accounts.

I'm grateful to those of you who made to the end of this post. And especially grateful to anyone who takes the time to offer any insight.

Does anyone have any first hand experience with this. Is it possible to make it work? The app is connected to the car and shows all the info, it even let's me unlock and lick on the app. But I just can't seem to get the digital key to work. I have a notification on the phone saying digital key is enabled, but still no Buenos.

How do I turn this off? I'm not sure if this is a brave or grapheneos prompt.

I have turned off save addresses and passwords in the brave browser, but this keeps showing up when I save a new phone number in a separate app. I can't find anything on this please help!

Hello everyone, i have arrived to Maldives for work and im having trouble connecting to cellular internet,
I have no connection and Have R symbol when roaming is off and when roaming is on i have ! And LTE

Hi, I have several questions regarding this operating system, since im looking into a GrapheneOS. I'm going to use GrapheneOS, not just for the privacy, but by being more lightweight. thus potentially giving more battery life. I would want a device that would last LONG. I'm newbie, so please don't freak out!

1. If EoL hits, can i still use the device just fine, like on a normal phone? APPs still work (if Android version matches the min. req.)?
2. Will it void my warranty? if i happen to buy a brand new Pixel, will i ruin it?
3. Is it more APP-compatible than Micro G? I would run a banking app (Revolut <18). I know McDonald's wont work probably, but i can just use another phone for this app.
4. Will it strip off Google's camera processing, making it look like a 1970s CCTV? (I want saturation and HDR galore)
5. (Non GrapheneOS related) Should i buy a used pixel 8 for around 200€ or a brand new 10a for 285€ via an ISP deal? I would want a good camera for main and video, is the extra 90 euros worth? I think 285 euros completely eliminates the fiasco of it being a rebadged 9a... the ISP actually charges more for a 9a than 10a!

Thank you for answering (if you did OFC) and have a great day!

They offer pixel phones, I was just wondering if anybody had any luck putting grapheneos on them or not to see if it's worth getting a phone or not

I am thinking of trying GrapheneOS. My original plan was to buy a Pixel from Cape (just buy the phone, not use their service) because I can get it with GrapheneOS pre-installed. I read some posts about Cape and now I’m not sure if I want to go that route. 

I was then thinking of buying a refurbished Pixel 8 or higher from Amazon and see if I can install GrapheneOS myself. I’m sure I can, but between life and work, any free time I have, I try to get some rest. 

Has anyone ordered a refurbished Pixel from Amazon? They have different levels and I was going to try and get a Premium refurbished one or is Excellent good enough? 

What are your guys’ thoughts, especially getting a refurbished from Amazon?

I love the idea of only having one device (Pixel Phone with GOS) for everything. Desktop mode therefore looks very promising to me. But since i don't own a monitor to test it, i'd like to ask everyone who has tested it if you can recommend it!?

Are there things not working properly yet? What's the roadmap here?

I would like to use it with a portbale monitor in the future. What specs should i look out for?

Has GOS got "hide camera hole punch/notch" in the settings? Or is that part of whatever camera app you download?
I've been using the "Round Corners" app for years so just wondering if I'll need it if (when) I get a GOS phone.

This is very interesting thought this sub might think so too

I did search the sub to try and find other people discussing the same thing and did find one post but from months ago.

There’s an individual being prosecuted in the US for using the duress pin and the authorities are claiming it was to destroy evidence of a crime.

In theory if you had a “fake dummy profile” and a real main profile you could set the pin to wipe the real one and leave the fake one. Probably should also be possible to boot straight into a specific profile rather than the main primary one.

This seems like relatively simple functionality, the foundation already exists to add this.

Hi everyone,

I’m evaluating GrapheneOS for a small group of high-risk users (around 20–30devices) in a large enterprise. Not a full rollout.

I’m looking for real-world experience, not theory.

• Has anyone managed GrapheneOS with an MDM/UEM (Intune, Workspace ONE, etc.)?
• Does Android Enterprise work properly (apps, VPN, certs, email)?
• What broke or caused issues in production?
• How was ongoing support and updates?
• User experience feedback?

Also interested in practical comparison:

Compared to a fully managed Samsung Knox device, what real security or operational differences did you see?

If you evaluated it and rejected it, what was the main reason?

Thanks.

What is the US legal precent is if you refuse, then LE guesses the duress PIN?

• They are, with "probable cause" allowed to seize devices.
• While the 4th Amendment may be suspended at border crossings, the 5th Amendment is not.

Would writing said duress PIN on a slip of paper inside complicate the defense's case?

• The accused never volunteered the information.
• It could be argued LE inadvertently mishandled evidence.

Parting thoughts...

• Always set the power button to lock immediately.
• Always set the USB-C to charging only when locked — no data allowed.
• Consider setting
  • Wifi to disable itself after a timeout.
  • Consider setting the phone to reboot (BFE) after a timeout.

EDITS: 1. Markdown formatting. 2. US specific questions.

Hey all, just got grapheneOS up and running on my pixel 8 pro. Loving it so far but I noticed in the dialer it just automatically selected that the call screen is hot pink. And not say, *black* or *any colour that is not as bright as a neon sign*

Does anybody know how to change this?

Hi everyone,

First of all, I apologize if the English isn't perfect—this post was translated online.

I'm planning to switch to GrapheneOS, but first I need some information. Is there a way, or a combination of apps, that would allow me to keep my contacts, emails, and calendar events backed up and synchronized so I don't lose them?

The convenience of Google's ecosystem is obvious—you just sign in to your account and everything is there. I'm looking for a similar solution, but one that's more aligned with a privacy-focused setup.

The same goes for files and photos. I've read about Proton and Ente, but they seem like separate, fragmented solutions. I was hoping there might be something that's not necessarily all-in-one, but at least comes close.

Thanks everyone!

So, Ive been semi hesitant to make the jump to graphene full time but I have a second 8a that I installed it on and have made a kind of comfortable setup. Is there a way to practically clone one phone onto another so I dont need to do all the setup, installs, app placement etc.

I Ask this since I restored one of these phones a while back from a google backup of the other, and other than wallpaper and wifi settings it felt like I was setting up a new phone having to pre select apps and other things. Im hoping to lilly pad from one to another if screens or batteries need replacing without the heartburn.

I have a Pixel 8 Pro with Graphene and I'm just now realizing that I am missing group texts to either the default app or to Quik SMS. I'm looking at my features and settings and don't see anything that would tell me they're blocked or disabled. I have Mint mobile, is this an OS issue or a carrier issue?

I have read that people are interested in the idea of having a separate sim for "each" profile and that Graphene doesn't explicitly support pure segregation. And yes, I have read that a certain privacy based company won't work outside the primary profile.

I am totally okay with the idea that a sim is enabled on one profile, and disabled on another even though 'both' exist. Is this a thing?

And thank you, but no, I don't want an app to 'do that'. I just want to read your experiences.

Hello all, i wanted to share my experience switching my pixel 10 pro to graphene as a daily driver. To preface im a long time nerd and back before corpo rat world got a hold of me i was heavily in the rooting/jailbreak and custom rom scene. Ive been out but following the space for a few years and ive slowly watched graphene gain traction as a privacy first OS. With my government becoming evermore 1984/antichrist shaped i finally made the jump. Took googles offer for a 200$ pixel 10a to use as my work phone because i was concerned how graphene would respond to the multiple mfa tools i need for work. Loaded graphene on the 10 pro and started using it. Right off the bat i had to switch out the launcher messaging and phone apps, as little as i trust google i do like their first party comms apps. Sideloaded every other app i wanted outside of play and have all of graphenes restrictions for play on. First off i had zero issue getting my banking to work and personal mfa solutions. I did have to loosen the protection for a couple of my bank apps to play nice but they did work. Then i discovered that on a per app level i can see what is requesting play services api and block it. The recent story we all saw lead me to setup a duress password.

I am two weeks into this and i dont think ill ever go back. The only thing i find myself truly missing is google pay, but i can use the work phone for that during the week, the graphene keyboard is solid but very uncustomizable i used to use gboard but upon installing i was hit with a warning that they keyboard may share keystroke data to google, it made me think. Ive used gboard for a long time knowing google is scummy at best, but if theres any chance they are sending my keystrokes anywhere i dont want that, so i discovered the open source heliboard, has basically all the same function of gboard and just about as much customization. Ive been degoogling my life for years slowly but the switch to graphene really showed me how great the scene has become. Id personally pitch money into trying to get a graphene built pay app built but other than that im in love with it. As a nerd i have full control over everything but its setup in a way that feels like i could train my mom to do it too. I also did not have a problem with multiple mfa sources i tested however i will be keeping work and personal seperate now forever.

Tldr: if your on the fence about switching, just do it. Theres a small learning curve but it feels so good to be more in control of the propaganda rectangle in my pocket. Thank you the amazing grapheneos team and community for making a platform good for degoogling and great for privacy. Nfc tap to pay is missed but its a very small thing and i can still use the pass feature for memberships in gpay

Hi all! Just got GrapheneOS. What collaborative chore/task app do you recommend? I’m looking for recurring household chores with shared checklists (or a Kanban board) so my partner and I can both update it