GrapheneOS: the private and secure mobile OS
grapheneos.org
GrapheneOS is a security and privacy focused mobile OS with Android app compatibility.

After using LineageOS for long time, I have finally moved to GrapheneOS. I use a lot of banking and financial apps which I never felt comfortable using on LineageOS due to lack of proper sandboxing, unlocked bootloader etc.

GrapheneOS works flawlessly just like Android. You don't even notice there's hardening underneath. Also it protects from Google's evil location tracking using WiFi/Bluetooth or even when the Location is turned off. I don't understand how people in general are comfortable with Google tracking all the time. You can use Google Play and Play Services in a sandbox that works just like regular installation, but without deep tracking.

If you haven't tried GrapheneOS, try it. You won't go back to regular Android.

  • ExcessShiv@lemmy.dbzer0.com
    ·
    4 months ago

    People contemplating moving to graphene, do be aware that banking etc. absolutely can be a major PITA on graphene as well. Several official apps used where i live cannot work in graphene, even with sandboxed play services installed, making day-to-day life functionally impossible with graphene. Luckily reverting to stock android is easy, although I probably wouldn't have bought a pixel phone if I was planning on using stock OS.

    • theskyisfalling@lemmy.dbzer0.com
      ·
      4 months ago

      "Making day to day life functionally impossible" is a bit drastic. I think that depends on each individual person, their needs both in terms of banking and privacy.

      My banking app doesn't work on Graphene but I also couldn't care less. I can just as easily log in to my account via my browser on my phone if I need to do something and it isn't exactly hard, it takes all of 30 seconds more than using an app.

      I realise in some other countries you don't have that option but were I in the same situation for me that would be enough to change banks, I don't want to be forced to use an app for anything.

      Everyone has different lengths they are willing to go to to protect their privacy and I'm willing to make my life slightly harder where as others may not but I think saying it makes life functionally impossible is a bit of an overstatement and it needs to be judged based on individual needs.

      There is a list of what banking apps work and what don't.I'll post it in a top level comment for visibility.

      • ExcessShiv@lemmy.dbzer0.com
        ·
        4 months ago

        The thing is, I'd need the government 2FA app (which doesn't work in graphene) when logging in to my bank on a browser as well, so that doesn't change anything.

        And I can't do anything, I can't check my digital mailbox (not email, we have something specifically for official communication with bank, government etc.), I can't log in to check messages from my kids school, I can't order a doctors appointment...you get the picture.

        • theskyisfalling@lemmy.dbzer0.com
          ·
          4 months ago

          Yeah i understand what you are saying and that is why everyone's individual needs come into play.

          I don't know what country you are in and that can obviously affect things, my banks 2FA is an SMS. I have options in terms of the other things you mentioned, where as you may not have.

    • PotatoesFall@discuss.tchncs.de
      ·
      4 months ago

      Isn't it only Google Wallet that doesn't work? I actually cancelled a bank account I had because their app only worked with Google Wallet. Some banks roll their own NFC payment thing.

      I'm on CalyxOS btw, not Graphene.

      • oscardejarjayes [comrade/them]
        ·
        4 months ago

        Some banking apps won't run without SafetyNet (technically now Play Integrity). Pure AOSP doesn't have it, and AOSP distributions with sandboxed play services or whatever usually fail the hardware attestation requirements. There are some other reasons banking apps won't work, but a lot of it is similar stuff.

      • ExcessShiv@lemmy.dbzer0.com
        ·
        4 months ago

        No that doesn't work either, but we use a 2FA app to enable mobile banking access, SS access, school communications/message board etc., basically anything that requires you to prove your identity. That app doesn't work in graphene at all, it flat out refuses and states the OS isn't secure or the app isn't installed from a valid source, so all things dependant on this doesn't work on graphene.

        Edit: a lot of other things also fail because graphene apparently doesn't pass the google play safety check either.