It just keeps getting better! Thanks for this - I'd overlooked these improvements even though I did. see 'Storage Scopes', I assumed it was something I had not previously noticed. Now using Scopes. If only GrapheneOS was available on a Pixel with hardware switches. Dream on! The notifications improvement is brilliant. 😄
You're welcome! That was one of the reasons I put out this video. Two highly important features that might get lost in the background. Hardware switches would be handy, but the toggles in Android 12+ have been a nice middle ground.
The dev of this os was no simple task. It takes a huge amount of time to sort through the security and privacy issues and then program all of them...and that is some intense thinking!
wow thank you for this, i'm still learning about the privacy world and have watched many of your videos and your topic, u dont know how easy it is for me since you make this kind of stuff accessible :D. I have bought myself a pixel 3a, i think this solidifies my intention in trying out grapheneOS. also, one thing i note is that you always end ur videos abruptly, a quick simple outro imo could make it a bit better ahaahah
You're welcome, glad to hear my videos have been useful! I try to make it as straightforward as possible. It's absolutely worth trying out, I don't think you'll be disappointed. Haha, I've debated on it. Not that it matters a ton for a smaller channel, but abrupt endings are better for the "algorithm" because it can increase your % watch time as people don't click away when the outro starts. I do agree though, it would be a bit nicer of a transition :)
Great video! I read the changelog when the update was released, but didn't quite understand Storage Scopes and what it does exactly, but you did a great job in this video explaining its usage.
Can you please make a video explaining how you are using profiles to promote android security? I depends heavily on WhatsApp, google translate, TikTok, IG, amd more many dirty apps. If i put those apps on the secondary profile what security am I afforded?😅
How portable are the profiles? In a PC situation I usually live within VMs. This way if I upgrade machines I can easily get up and running by downloading my VM to the new system. Can androids profiles be used similarly?
Seedvault, which is the only working backup option I know of at this point will back up additional User Profiles. So if you move to a new device and restore the seedvault backup, your profiles will also be restored.
Im a gen-x who stumbles filling out on-line PDF forms ,but with your videos i was able to install, troubleshooting, and have a base understanding of GrafineOS
just now getting into the de-google scene, but this video was quite helpful in explaining Graphene OS features. Thank you! I was curious what your thoughts were on having these "doors" you can open and shut between user profiles for notifications? In a different video, I remember you warned of using apps that functioned similarly because the app can be compromised thus compromising the isolation of profiles. I assume this Graphene feature is from a more reliable source, or is there a larger difference that I am missing?
Hi! I'm a new subscriber, your channel has Nicholas Henkey's vibes. So by the way, shall you talk about VOIP? After watching Naomi Brockwell's video about it, that method is not actually private but actually helps hiding your real cell number (It preserves your anonymity, specifically pseudonymity). Looking forward to your opinion!
Welcome! I've considered making a video on the topic. There's a lot that goes into VOIP to set it up yourself, but there are a few apps that make it easy if you just need a 'burner' number. Either way it's not secure communication, but like you said, it can help preserve your anonymity a bit. Thanks for the idea!
Again, great content and the type of clear, understandable deep dive we need. Thank you! Just set mine up with a secondary user as I have a work app that requires GPS. The notification across user profiles works great. After using LOS for years I'm so glad I made the switch. I'm liking Graphene so much better and these videos have made the process painless. Eggplant...LMAO!
Thank you! Great job on making the switch, it is a very seamless experience. Once you get the hand of using secondary profiles it works well not with the cross user profile notifications. 🍆🤣
You can't, but you can give your second user profile access to apps you downloaded in the settings. You also can't give your second profile access to saved photos and videos, as that would negate the purposed of separate user profiles. That being said, using syncthing you can do a setup that would allow access.
1:25 An option to enable content of notifications would be useful as well. Otherwise, you can't tell if notification is important enough to switch to another user :( If someone knows if there's any place to bother the developer to add this change, please let me know
Thank you for a great video! I have a question regarding encryption between the user profiles: is the burner profile/data encrypted if im logged on to the main profile but still have the burner activly running in the background (for push notification purpose). If so does this also mean you can use the profile switching as an additional layer or security being that it would be harder to extract information from burner profile thats solely active in the background?
You're welcome! Here's an excerpt taken from - grapheneos.org/faq#encryption "Sensitive data is stored in user profiles. User profiles each have their own unique, randomly generated disk encryption key and their own unique key encryption key is used to encrypt it." I would say yes, to your second question. Having a separate user profile with a different PIN could make it more difficult. While apps are sandboxed in a user profile, having a separate user profile would help avoid any mistakenly granted permissions or access on your main profile you use daily. Human error is a major vulnerability. My thinking is if I can protect myself from myself, that's a win.
Thanks for informative video :), I just bought pixel 6 (because it cheaper now :p), I have a question about play service. Is this possible my Google services (from Android auto to maps, etc..) can work on second profile and main profile will be clean. Like second profile normal phone and main profile is eggplants
You're welcome, and congrats on getting the pixel 6 for GrapheneOS! It is possible to use it in that manner. You could have maps on the second profile where play services are and use it there. It's worth noting that Android auto doesn't work regardless if you have play services or not. From what I understand, Android auto is integrated at system level and not an application, so it's not included. Everything else will work as expected. Great analogy with the eggplants 🤣
@@sideofburritos thanks, last time I used graphene os on pixel 1(sailfish), and really want to try on fresh device. What are other features are not working so I made my mind as well as find some alternative. Mainly I need for translation of Google and maps because opensource apps will not work in my location :( . Thanks for making videos, it really helps new guy to understand (love the f-droid one) :)
@@sideofburritos I tried to turn on location for maps but failed, I was unable to find this option "Reroute location requests to OS APIs", if you have any idea that will be huge help for me. Thanks for reading this and keep up the good work
Ahh, I had that left over from the camera comparison video I made - ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-MSvHKf9hxao.html. My burner profile could use some clean up, since it's a burner I don't take as good of care of it as I should, haha.
It works, you need to enable "exploit compatibility mode". Details are here - discuss.grapheneos.org/d/3387-cod-mobile. TLDR - this is because the app has a bug that the security features on GrapheneOS are finding and thus stopping the app from launching. Exploit compatibly mode allows this app to run - grapheneos.org/usage#bugs-uncovered-by-security-features
It's likely you're trying to install an older version on the other user profile. Android will not allow you to install an older version of an app across profiles. Try installing the most recent version on both, and it should work.
Hello Side of Burritos! I just recently installed Graphene OS. I tried doing this, but it does not work unfortunately :( I did as you said. I did turn off Background on the secondary profile, does that matter?
Hii, thank you for your videos and support man! I have a problem, when Im on my second profile, I do recive notifactions if I get message on my head profile, but not the other way. I do not get notifications from the second profile. I have set send notifications ON, on all user.
Hmm, that's an odd one. I would disable and enable the notification setting for your owner profile and see if that fixes it. settings -> system -> multiple users -> toggle "send notifications to current user"
Oh Sunshine (LOL), you have almost convinced me that I could be BRAVE enough to configure "Social" Burners on separate Users; that's taking Dedicated Isolation Browsers to a whole new level! IYO is it even conceivable that you might share a Yubikey with a Pixel you also use on a PC; or would you just make a new profile, if at all?
Haha! ☀️ The profiles work great, they're easy enough to create and delete if you want to test them out before fully utilizing them. There would be no downside to using a YubiKey you use on your PC to use with your pixel.
If a person doesn’t know how to install and create this, but wants a phone already set up for it, how do you go about getting it? I see they sell them on pre owned phones on eBay, but is that the only way?
You could go the eBay route, but the installation is very straight forward. Buying an unlocked phone from Google and installing it yourself would be my first suggestion - grapheneos.org/install/web I also have a video on the process - ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-ro5OsVk8OfE.html
Hi Alex, I responded on your other comment, on the original video you asked about this. The pinned comment on there explains what to do with the zip file - ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-FFz57zNR_M0.html
"Google Android (stock Pixel OS) and other certified Android variants" is listed as one of the supported operating systems for the web installer - grapheneos.org/install/web#prerequisites
Took me a year to buy a pixel8a and i installed GrafineOS ,going through your videos now to see the best apps to install befor i do a full SIM card swich @@sideofburritos
Hey, nope, it should work just fine. What app are you trying to use it with? Make sure the app has location permission and you enable "location" in the slide down menu
@@sideofburritos thanks man, yeah it doesn't work with any app that uses it. Even using the sat checking app it just doesn't show up any sats! Pixel 4a....and yeah of course the GPS is on and permission enabled. Maybe I'll try and reflash?
Hello i really appreciate your work 👍 I would like to ask your opinion about a configuration of profiles: I would like to have my sensitive data in a separate profile where all traffic is over tor, can I set it not in owner profile? I have some limitation with new profiles? Thanks
@@marcot5607 It just depends on which one you prefer to use. With a new user profile you can use the end session option and terminate it. The owner profile is always active when you boot up the device
No, that is not possible. Android security model assumes that a single device can be used by multiple different users. That is exactly why user profiles feature exists. This post has some additional details on the topic - discuss.grapheneos.org/d/261-lock-screen-bugs
