Just installed GOS on my phone, really like it. I want to know how GOS users setup their profiles to learn from them. So far, i found out the followings:
-
everything in Owner
-
leave Owner blank. Put everything in another profile names User.
-
leave Owner blank. Put all Google stuff in user Google. Put all FOSS app in FOSS user. Put all bank stuff under Sensitive user.
-
use Owner as an app repo. So install Google Play, Acrescent, Fdroid. Install apps from there, but dont use them. Instead, when create new user, push those apps from Owner. This is similar to Side of Burritos on Youtube.
anything different?
Owner profile for main use, shelter w play services for apps that need them.
I also keep a Duress pin enabled which i have written down inside the phones case, so if Anyone “finds” my phone and tries to unlock it they will just end up wiping it.
The downside of letting someone wipe your phone is they can then sell the phone. It’s a lot harder to pawn a “found” phone if it is locked.
You can always wipe it without the duress pin
Doesn’t a stock android need to unlocked before it can be wiped? I doubt if GOS would remove that security feature.
GrapheneOS doesnt have FRP due to it being exclusively a google service (it requires signing in to the previously used google account that was used before the reset)
Afaik there isnt any equivalent service available to GOS, although it probably could be technically possible.
That is not the case in my experience. At the very least, you can wipe it from recovery without unlocking it.
I suppose its possible it varies between manufacturers, but I would be surprised because they don’t want the hardware to be useless if you forget the pin immediately after you set it.
Factory Reset Protection
"On modern Android phones, there shouldn’t be any problems as long as you choose to factory reset your phone through its settings. This will automatically remove all the associated accounts in a way that “frees” the phone from FRP. If you try to reset a phone through the bootloader, FRP will kick in, and it can’t be set back up without the previous account’s password.
I assume if I tried to reset through the bootloader the phone would become a paperweight as there isn’t a Google account on my phone. No password to enter. I’m just going by what android central says, haven’t tried it myself. Sounds like you have more experience with this.
https://www.androidcentral.com/factory-reset-protection-what-you-need-know
I was unaware of this. I have never run into that issue, but I’ve never used the bootloader to reset a phone that is associated with my google account.
I would assume not having a google account associated with the phone would disable FRP making it a non-issue, but I’m clearly not an expert as I didn’t know this existed
I decided to check grapheneos.org and found out that a gos phone does not have frp.