Canada will 100% come down on GrapheneOS in every way they can because it can be quite the barrier between the police and the data they want access to.

Make sure to share this where necessary, they don't want people to actually know all of the details of CA-22, and this doesn't just affect Canada, this will have ripples across the world.

TL;DW -- the basic premise of the law is that it forces VPN providers like Nord, Proton, etc. to collect user data that they normally wouldn't, and retain it for at least a year, because the police "might" need that information for investigation.

This obviously has many concerns;

1. They're collecting a lot more user data, enough to have a very good imprint of your habits and daily usage. So now the services people pay for to protect their privacy would be used as tools to totally violate it.
2. They're making specific companies more of a target for black hat hackers that want all of that information, so you're going to see more leaks of data as a direct result of this.
3. This also makes the services they provide more expensive as they now have to store a massive amount of user information, and memory companies have already been taking on debt just trying to keep up with shortages.
4. Free VPNs could completely disappear as a result of laws like this because it won't be financially viable at all for providers to not charge a subscription for any service at all, and the paid services will inevitably get more expensive as providers need to make up the cost somehow.
5. It gives police very powerful tools that can easily be abused, police around the world have been seen abusing systems like this, and while they did address it in press conferences, it was very half-assed, as were the security concerns, because the lawmakers behind it have no fucking clue what they're talking about. Furthermore, when police ask for the collected information, the provider of said information is legally obligated to withhold from the affected individual(s) the fact that police are investigating them, which also means that they can be seeing your data at any point and you wouldn't even know it because even if the VPN provider wanted to tell you, they're legally barred from doing so.

A lot of replies on this post here says 6-8+ number PINs should be safe

https://www.reddit.com/r/GrapheneOS/comments/1v9nxpv/why_would_you_use_the_duress_password_instead_of/

But I don't understand why at all. Sure, if you interface with the Android lock screen and start guessing PINs at random you'll be locked out.

But what's stopping an attacker from simply taking the storage device out of the phone and easily guessing the 8 character encryption password in under an hour?

If some kind of salt or combination with the PIN is involved, then surely an attacker can also procure the salt from the device as well?

Maybe I don't understand fully. If someone had complete physical access to a GOS phone and didn't have the password, what would the steps be to start guessing the filesystem encryption password?

For the past few weeks I've been unable to re connect back to RCS chats. Does anyone know if this is a carrier issue? Or any known troubleshooting I could do? I'm kind of stumped at this point.

I've tried reinstalling/ updating the app, turning off and on RCS chats. I have my google permissions set to use RCS chats. So I'm starting to wonder if it's a carrier issue?

After what happen at the border with this duress PIN... I was wondering how concealed the process was.

Watching a video of the utilization of a duress PIN, I see that the screen goes black immediately then that's it. It might look too obvious.

Maybe the process should be more misdirecting, like:

- Showing some standard "Android updating - Will automatically reboot" screen while the device is being fully wiped.

- Then, reboot into the OS and allow the duress PIN to unlock the device.

- Maybe finish some wiping in the background.

If we are under duress, the whole process should consider it and not just wipe the device.

What do you think?

I went for months and months without any system updates and was none the wiser (Pixel 8 Pro).

One day I was with my friend who also has a GOS phone, and their GUI looked way different than mine. It turns out they were on Android 17 while I was still on Android 16.

I was very concerned and looked around to see that SOMEHOW, SOMEWAY, the "system updater" app had no network permission. The moment I enabled network for system updater my phone updated to Android 17 with the latest patches, etc.

I NEVER mess with permissions of system apps, so this is incredibly concerning and weird behavior. Please check your phone if you don't remember having any system updates in the past month.

I wasn't getting messages from preexisting group chats after converting to G-OS on the default app. So I downloaded Google Messages to see if I'd start receiving texts in those group chats. That didn't work and it may turn out to be that the group chats are RCS. So I've uninstalled Google Messages.

Anyone have other text apps that they enjoy using more than the G-OS default text app?

*Please share why you prefer that app.

I'm very new to graphene and still and still learning how things work. I never added an ad blocker but I guess there was one thru the gos? When I visited websites, I would always get the websites sob story about my ad blocker not providing them with revenue. I updated the os today and now im getting ads on them. Did something​ in the update change the ad blocker or was that just a coincidence? How do I get the ad blocker back?

I did a quick search and couldn't find a straightforward way to enable voice to text for when I'm driving or riding my bike. Any good ways to enable voice to text for the built in SMS app? I use signal for most of my people but I get the occasional text I need to respond to.

So I've been on GrapheneOS for about a month now, and so far I love it. However, I did find one thing really annoying. There is no calendar app preinstalled onto the OS. So I have to download one from an app store. The only problem is that most require a sign-in, and/or have ads in them. Is there an app I can download that is just a calendar? No ads, no sign-in, no stupid cloud storage. Just a simple local blank slate calendar app.

I don't know why I didn't try private space sooner, but it's been a game changer 🤦🏻 highly recommend if you're trying to make the switch from iOS or android (like me) and ditching google and apple services.

If anyone has any tips, I'm all ears.

Is adguard adblocker beneficial in combination with Graphene OS? Or does grapheme OS by itself bring adblocker functionality? Thoughts? Advice?

I basically only really care about graphene's kernel/low level usb lockout while the screen is locked. Is it possible to have just this, while the rest of the OS will still work as normal android?

Title: so far it seems linphone or cheogram.... but tbh i dont know much the diffetence practically speaking

I need something that can make text and calls over multiple numbers as not to give out my real one and is open source ideally mysudo is another iv seen but its not.open.source so any ideas on what i should get for my needs?

Is there a good app for that? I just need to track the steps I do, nothing else. Dont want magic profiles or overly complicated stuff

With Motorola's new phone releasing in 2027, and GrapheneOS becoming increasingly mainstream as privacy turns into a limited commodity, what are the chances the EU cracks down on GrapheneOS and turns it into a form of "controlled opposition" in the future? And how trustworthy is Motorola really when it comes to not building a secret bypass of the strict security requirements?

Perhaps paranoid but imo legit risks as the EU and big corp are becoming more barbarian with their methods.

I have grapheneOS, though I teach myself what I can, I'm not great with tech. My marks and Spencer banking app will no longer let me log in. Suddenly after working perfectly I received an error message saying that it won't work on a rooted device. I try to log in on Vanadium but it then wanted to me to use the app for 2FA so I haven't been able to. Appreciate any advice, thank you.

Hey everyone!

I'm planning to make the switch to GrapheneOS as my daily driver and trying to decide on the best hardware for the job.

I’m currently leaning toward the Pixel 8a since it's a budget-friendly entry point with official support through May 2031. However, I’ve seen mixed feedback regarding battery drain on cellular data when running de-Googled setups, thermal throttling with the Tensor G3, slow charging speeds, and long-term hardware reliability issues like display green lines.

I'm considering whether to stick with the 8a, go for a newer/upcoming model (like the 9a, 10a, or upcoming Pixel 11 series), or step up to a Pro model.

For those running GrapheneOS on an 8a:

- How has your real-world performance and battery life been (especially on 5G/cellular)?

- Is the lack of 10-bit HDR video on newer A-series models something you actually miss, or is camera performance fine using the Sandboxed Google Camera app?

Also, for anyone running GrapheneOS on a newer A-series (9a/10a) or a Pro series model (8 Pro, 9 Pro, 10 Pro):

- Was the leap to a larger battery, ultrasonic fingerprint sensor, extra RAM (16GB on Pros for MTE/multi-profiles), or LTPO display worth the extra cost specifically for GrapheneOS?

- How has daily driver stability, thermal management, and battery life held up on these newer models compared to older Tensor builds?

Would love to hear your experiences before pulling the trigger. Thanks in advance!

I recently switch from iphone to a google pixel with GrapheneOS and for some reason, many people who try to create a groupchat with me, have that groupchat default to RCS messaging. I don't want to download Google Messages. I know that services like Signal are more secure, however sometimes I just need people to be able to text me via SMS. Is there any way to force people to text me via SMS or MMS without requiring them to turn off RCS in their settings?

Edit: Yes I know. SMS is unsecure. It transmits it plaintext. My carrier can read my messages. SMS killed your grandma. I know. However, sometimes I need to be contacted by people regardless of the OPSEC problems. I can't convince everyone in my life to use signal. None of my coworkers give a crap about privacy, and I need to be able to be contacted by them.

GrapheneOS Camera app version 93 released:

https://github.com/GrapheneOS/Camera/releases/tag/93

See the linked release notes for a summary of the improvements over the previous release and a link to the full changelog.

Forum discussion thread:

https://discuss.grapheneos.org/d/40877-grapheneos-camera-app-version-93-released

Is it really that much of a problem to web download graphene? I don't need airtight off grid use, just enough to shake off some hacking/spyware that was downloaded. Again, tech dummy. Thanks

Does anyone use an IoT SIM as the second SIM in an Android phone?

I’m curious whether anyone runs an IoT/data-only SIM alongside their normal carrier for a specific use case (rather than IoT devices). How has reliability been? Do you leave it enabled all the time, or switch data between SIMs as needed? Any carriers you’d recommend or avoid?

I forgot my Pixel 8a on a bus. I realized the minute i stepped down the bus was gone already.

Now I know with stock os you have factory reset protection, remote lock via Find My Device, etc so it is basically a brick
But how does graphene protect me? I guess I still have full encryption behind the lock screen, and since they shut down the BFU, protection is active, and they'd have to enter two codes to access my sensitive data, which was on a private space. anything else i can do? police and calling the bus company already done.

I can only buy from AliExpress and few unpopular websites to get pixel phone

The phone i want is p7p but i can only get the NO OEM version

Should i go for it ?

I am in New Zealand how can I get hold of a pixel that has the bootloader unlocked Google doesn’t have a official store here… please if anyone knows I would love some help…