Just installed GOS on my phone, really like it. I want to know how GOS users setup their profiles to learn from them. So far, i found out the followings:
-
everything in Owner
-
leave Owner blank. Put everything in another profile names User.
-
leave Owner blank. Put all Google stuff in user Google. Put all FOSS app in FOSS user. Put all bank stuff under Sensitive user.
-
use Owner as an app repo. So install Google Play, Acrescent, Fdroid. Install apps from there, but dont use them. Instead, when create new user, push those apps from Owner. This is similar to Side of Burritos on Youtube.
anything different?
Owner profile for main use, shelter w play services for apps that need them.
I also keep a Duress pin enabled which i have written down inside the phones case, so if Anyone “finds” my phone and tries to unlock it they will just end up wiping it.
The downside of letting someone wipe your phone is they can then sell the phone. It’s a lot harder to pawn a “found” phone if it is locked.
You can always wipe it without the duress pin
True but Duress is for when the opportunity to wipe is taken from you.
GrapheneOS doesnt have FRP due to it being exclusively a google service (it requires signing in to the previously used google account that was used before the reset)
Afaik there isnt any equivalent service available to GOS, although it probably could be technically possible.
That is not the case in my experience. At the very least, you can wipe it from recovery without unlocking it.
I suppose its possible it varies between manufacturers, but I would be surprised because they don’t want the hardware to be useless if you forget the pin immediately after you set it.