It just keeps getting better! Thanks for this - I'd overlooked these improvements even though I did. see 'Storage Scopes', I assumed it was something I had not previously noticed. Now using Scopes. If only GrapheneOS was available on a Pixel with hardware switches. Dream on! The notifications improvement is brilliant. 😄
You're welcome! That was one of the reasons I put out this video. Two highly important features that might get lost in the background. Hardware switches would be handy, but the toggles in Android 12+ have been a nice middle ground.
1:25 An option to enable content of notifications would be useful as well. Otherwise, you can't tell if notification is important enough to switch to another user :( If someone knows if there's any place to bother the developer to add this change, please let me know
wow thank you for this, i'm still learning about the privacy world and have watched many of your videos and your topic, u dont know how easy it is for me since you make this kind of stuff accessible :D. I have bought myself a pixel 3a, i think this solidifies my intention in trying out grapheneOS. also, one thing i note is that you always end ur videos abruptly, a quick simple outro imo could make it a bit better ahaahah
You're welcome, glad to hear my videos have been useful! I try to make it as straightforward as possible. It's absolutely worth trying out, I don't think you'll be disappointed. Haha, I've debated on it. Not that it matters a ton for a smaller channel, but abrupt endings are better for the "algorithm" because it can increase your % watch time as people don't click away when the outro starts. I do agree though, it would be a bit nicer of a transition :)
Im a gen-x who stumbles filling out on-line PDF forms ,but with your videos i was able to install, troubleshooting, and have a base understanding of GrafineOS
Great video! I read the changelog when the update was released, but didn't quite understand Storage Scopes and what it does exactly, but you did a great job in this video explaining its usage.
Again, great content and the type of clear, understandable deep dive we need. Thank you! Just set mine up with a secondary user as I have a work app that requires GPS. The notification across user profiles works great. After using LOS for years I'm so glad I made the switch. I'm liking Graphene so much better and these videos have made the process painless. Eggplant...LMAO!
Thank you! Great job on making the switch, it is a very seamless experience. Once you get the hand of using secondary profiles it works well not with the cross user profile notifications. 🍆🤣
just now getting into the de-google scene, but this video was quite helpful in explaining Graphene OS features. Thank you! I was curious what your thoughts were on having these "doors" you can open and shut between user profiles for notifications? In a different video, I remember you warned of using apps that functioned similarly because the app can be compromised thus compromising the isolation of profiles. I assume this Graphene feature is from a more reliable source, or is there a larger difference that I am missing?
The dev of this os was no simple task. It takes a huge amount of time to sort through the security and privacy issues and then program all of them...and that is some intense thinking!
Oh Sunshine (LOL), you have almost convinced me that I could be BRAVE enough to configure "Social" Burners on separate Users; that's taking Dedicated Isolation Browsers to a whole new level! IYO is it even conceivable that you might share a Yubikey with a Pixel you also use on a PC; or would you just make a new profile, if at all?
Haha! ☀️ The profiles work great, they're easy enough to create and delete if you want to test them out before fully utilizing them. There would be no downside to using a YubiKey you use on your PC to use with your pixel.
Hi! I'm a new subscriber, your channel has Nicholas Henkey's vibes. So by the way, shall you talk about VOIP? After watching Naomi Brockwell's video about it, that method is not actually private but actually helps hiding your real cell number (It preserves your anonymity, specifically pseudonymity). Looking forward to your opinion!
Welcome! I've considered making a video on the topic. There's a lot that goes into VOIP to set it up yourself, but there are a few apps that make it easy if you just need a 'burner' number. Either way it's not secure communication, but like you said, it can help preserve your anonymity a bit. Thanks for the idea!
Thank you for a great video! I have a question regarding encryption between the user profiles: is the burner profile/data encrypted if im logged on to the main profile but still have the burner activly running in the background (for push notification purpose). If so does this also mean you can use the profile switching as an additional layer or security being that it would be harder to extract information from burner profile thats solely active in the background?
You're welcome! Here's an excerpt taken from - grapheneos.org/faq#encryption "Sensitive data is stored in user profiles. User profiles each have their own unique, randomly generated disk encryption key and their own unique key encryption key is used to encrypt it." I would say yes, to your second question. Having a separate user profile with a different PIN could make it more difficult. While apps are sandboxed in a user profile, having a separate user profile would help avoid any mistakenly granted permissions or access on your main profile you use daily. Human error is a major vulnerability. My thinking is if I can protect myself from myself, that's a win.
How portable are the profiles? In a PC situation I usually live within VMs. This way if I upgrade machines I can easily get up and running by downloading my VM to the new system. Can androids profiles be used similarly?
Seedvault, which is the only working backup option I know of at this point will back up additional User Profiles. So if you move to a new device and restore the seedvault backup, your profiles will also be restored.
Hello Side of Burritos! I just recently installed Graphene OS. I tried doing this, but it does not work unfortunately :( I did as you said. I did turn off Background on the secondary profile, does that matter?
Can you please make a video explaining how you are using profiles to promote android security? I depends heavily on WhatsApp, google translate, TikTok, IG, amd more many dirty apps. If i put those apps on the secondary profile what security am I afforded?😅
Hii, thank you for your videos and support man! I have a problem, when Im on my second profile, I do recive notifactions if I get message on my head profile, but not the other way. I do not get notifications from the second profile. I have set send notifications ON, on all user.
Hmm, that's an odd one. I would disable and enable the notification setting for your owner profile and see if that fixes it. settings -> system -> multiple users -> toggle "send notifications to current user"
You can't, but you can give your second user profile access to apps you downloaded in the settings. You also can't give your second profile access to saved photos and videos, as that would negate the purposed of separate user profiles. That being said, using syncthing you can do a setup that would allow access.
It's likely you're trying to install an older version on the other user profile. Android will not allow you to install an older version of an app across profiles. Try installing the most recent version on both, and it should work.
Hello i really appreciate your work 👍 I would like to ask your opinion about a configuration of profiles: I would like to have my sensitive data in a separate profile where all traffic is over tor, can I set it not in owner profile? I have some limitation with new profiles? Thanks
@@marcot5607 It just depends on which one you prefer to use. With a new user profile you can use the end session option and terminate it. The owner profile is always active when you boot up the device
Thanks for informative video :), I just bought pixel 6 (because it cheaper now :p), I have a question about play service. Is this possible my Google services (from Android auto to maps, etc..) can work on second profile and main profile will be clean. Like second profile normal phone and main profile is eggplants
You're welcome, and congrats on getting the pixel 6 for GrapheneOS! It is possible to use it in that manner. You could have maps on the second profile where play services are and use it there. It's worth noting that Android auto doesn't work regardless if you have play services or not. From what I understand, Android auto is integrated at system level and not an application, so it's not included. Everything else will work as expected. Great analogy with the eggplants 🤣
@@sideofburritos thanks, last time I used graphene os on pixel 1(sailfish), and really want to try on fresh device. What are other features are not working so I made my mind as well as find some alternative. Mainly I need for translation of Google and maps because opensource apps will not work in my location :( . Thanks for making videos, it really helps new guy to understand (love the f-droid one) :)
@@sideofburritos I tried to turn on location for maps but failed, I was unable to find this option "Reroute location requests to OS APIs", if you have any idea that will be huge help for me. Thanks for reading this and keep up the good work
If a person doesn’t know how to install and create this, but wants a phone already set up for it, how do you go about getting it? I see they sell them on pre owned phones on eBay, but is that the only way?
You could go the eBay route, but the installation is very straight forward. Buying an unlocked phone from Google and installing it yourself would be my first suggestion - grapheneos.org/install/web I also have a video on the process - ua-cam.com/video/ro5OsVk8OfE/v-deo.html
Ahh, I had that left over from the camera comparison video I made - ua-cam.com/video/MSvHKf9hxao/v-deo.html. My burner profile could use some clean up, since it's a burner I don't take as good of care of it as I should, haha.
It works, you need to enable "exploit compatibility mode". Details are here - discuss.grapheneos.org/d/3387-cod-mobile. TLDR - this is because the app has a bug that the security features on GrapheneOS are finding and thus stopping the app from launching. Exploit compatibly mode allows this app to run - grapheneos.org/usage#bugs-uncovered-by-security-features
Hey, nope, it should work just fine. What app are you trying to use it with? Make sure the app has location permission and you enable "location" in the slide down menu
@@sideofburritos thanks man, yeah it doesn't work with any app that uses it. Even using the sat checking app it just doesn't show up any sats! Pixel 4a....and yeah of course the GPS is on and permission enabled. Maybe I'll try and reflash?
Hi Alex, I responded on your other comment, on the original video you asked about this. The pinned comment on there explains what to do with the zip file - ua-cam.com/video/FFz57zNR_M0/v-deo.html
"Google Android (stock Pixel OS) and other certified Android variants" is listed as one of the supported operating systems for the web installer - grapheneos.org/install/web#prerequisites
Took me a year to buy a pixel8a and i installed GrafineOS ,going through your videos now to see the best apps to install befor i do a full SIM card swich @@sideofburritos
It just keeps getting better! Thanks for this - I'd overlooked these improvements even though I did. see 'Storage Scopes', I assumed it was something I had not previously noticed. Now using Scopes. If only GrapheneOS was available on a Pixel with hardware switches. Dream on! The notifications improvement is brilliant. 😄
You're welcome! That was one of the reasons I put out this video. Two highly important features that might get lost in the background. Hardware switches would be handy, but the toggles in Android 12+ have been a nice middle ground.
1:25 An option to enable content of notifications would be useful as well. Otherwise, you can't tell if notification is important enough to switch to another user :(
If someone knows if there's any place to bother the developer to add this change, please let me know
wow thank you for this, i'm still learning about the privacy world and have watched many of your videos and your topic, u dont know how easy it is for me since you make this kind of stuff accessible :D. I have bought myself a pixel 3a, i think this solidifies my intention in trying out grapheneOS.
also, one thing i note is that you always end ur videos abruptly, a quick simple outro imo could make it a bit better ahaahah
You're welcome, glad to hear my videos have been useful! I try to make it as straightforward as possible. It's absolutely worth trying out, I don't think you'll be disappointed.
Haha, I've debated on it. Not that it matters a ton for a smaller channel, but abrupt endings are better for the "algorithm" because it can increase your % watch time as people don't click away when the outro starts. I do agree though, it would be a bit nicer of a transition :)
@@sideofburritos I personally much prefer the swift endings. Outros are a waste of time that annoys me and I skip anyway. Cheers
Im a gen-x who stumbles filling out on-line PDF forms ,but with your videos i was able to install, troubleshooting, and have a base understanding of GrafineOS
Useful video, subscribed to see more changelogs 👍
Awesome, thank you! For sure, I'll have them for any notable features/updates that get released.
Thanks a lot for breaking down these features and giving some examples of how to use them!
My pleasure and thank you so much for the support! It really is appreciated!
Thank you so much for providing amazing GrapheneOS based information! Just keep learning new things every day :)
Happy to hear that, you're very welcome!
Currently my favorite channel on YT. Keep up the great work!
Great video! I read the changelog when the update was released, but didn't quite understand Storage Scopes and what it does exactly, but you did a great job in this video explaining its usage.
Thanks, I'm glad it helped!
Great content. Keep it up. I am considering getting a pixel and grapheneOS due to your videos:)
Thank you! You should, it's a great OS :)
Gosh, your videos are super useful... thank you!
Glad you think so, you're welcome!
I love your channel. Thank you so much for the content.
Glad to hear! You're very welcome.
Again, great content and the type of clear, understandable deep dive we need. Thank you! Just set mine up with a secondary user as I have a work app that requires GPS. The notification across user profiles works great. After using LOS for years I'm so glad I made the switch. I'm liking Graphene so much better and these videos have made the process painless. Eggplant...LMAO!
Thank you! Great job on making the switch, it is a very seamless experience. Once you get the hand of using secondary profiles it works well not with the cross user profile notifications. 🍆🤣
Wow, what an outstanding operating system. And to go with it, an excellent youtube channel to explain it all. Cheers!
It's a great OS. Thanks for the kind words!
Great video, thank you. These options are a game changer.
Thank you for such detailed analysis and guide 👏👏👏👍👍👍
You're very welcome!
Great content as always. 👏🏻
Thanks, glad to hear!
Please keep making these videos!
I shall! :)
So related stuff. Thanks to you i have now aurora in storage scope. wasn't sure if it will work. Thanks for trying. As always nice video.
You're welcome and thank you! I really like how seamless the setting and configuration is. I still haven't come across any issues with it.
just now getting into the de-google scene, but this video was quite helpful in explaining Graphene OS features. Thank you!
I was curious what your thoughts were on having these "doors" you can open and shut between user profiles for notifications? In a different video, I remember you warned of using apps that functioned similarly because the app can be compromised thus compromising the isolation of profiles. I assume this Graphene feature is from a more reliable source, or is there a larger difference that I am missing?
Thank you for share your knowledge, great videos. Do you recommend installing F-droid and Aurora Store within a Storage Scope? Thanks for your time.
The dev of this os was no simple task. It takes a huge amount of time to sort through the security and privacy issues and then program all of them...and that is some intense thinking!
Wow how do they come up with these ideas. Amazing stuff.
They really are some amazing features they add.
Thank you!
You're welcome!
Oh Sunshine (LOL), you have almost convinced me that I could be BRAVE enough to configure "Social" Burners on separate Users; that's taking Dedicated Isolation Browsers to a whole new level! IYO is it even conceivable that you might share a Yubikey with a Pixel you also use on a PC; or would you just make a new profile, if at all?
Haha! ☀️ The profiles work great, they're easy enough to create and delete if you want to test them out before fully utilizing them.
There would be no downside to using a YubiKey you use on your PC to use with your pixel.
Hi! I'm a new subscriber, your channel has Nicholas Henkey's vibes. So by the way, shall you talk about VOIP? After watching Naomi Brockwell's video about it, that method is not actually private but actually helps hiding your real cell number (It preserves your anonymity, specifically pseudonymity). Looking forward to your opinion!
Welcome! I've considered making a video on the topic. There's a lot that goes into VOIP to set it up yourself, but there are a few apps that make it easy if you just need a 'burner' number. Either way it's not secure communication, but like you said, it can help preserve your anonymity a bit. Thanks for the idea!
Thank you for a great video! I have a question regarding encryption between the user profiles: is the burner profile/data encrypted if im logged on to the main profile but still have the burner activly running in the background (for push notification purpose). If so does this also mean you can use the profile switching as an additional layer or security being that it would be harder to extract information from burner profile thats solely active in the background?
You're welcome! Here's an excerpt taken from - grapheneos.org/faq#encryption "Sensitive data is stored in user profiles. User profiles each have their own unique, randomly generated disk encryption key and their own unique key encryption key is used to encrypt it."
I would say yes, to your second question. Having a separate user profile with a different PIN could make it more difficult. While apps are sandboxed in a user profile, having a separate user profile would help avoid any mistakenly granted permissions or access on your main profile you use daily. Human error is a major vulnerability. My thinking is if I can protect myself from myself, that's a win.
What a great video
Glad you think so!
Btw since your last vid, I've started building the new open source app store. Rocking material you design.
Hopefully soon I'll be able to share a link
How portable are the profiles? In a PC situation I usually live within VMs. This way if I upgrade machines I can easily get up and running by downloading my VM to the new system. Can androids profiles be used similarly?
Seedvault, which is the only working backup option I know of at this point will back up additional User Profiles. So if you move to a new device and restore the seedvault backup, your profiles will also be restored.
Hello Side of Burritos! I just recently installed Graphene OS. I tried doing this, but it does not work unfortunately :( I did as you said. I did turn off Background on the secondary profile, does that matter?
Can you please make a video explaining how you are using profiles to promote android security? I depends heavily on WhatsApp, google translate, TikTok, IG, amd more many dirty apps. If i put those apps on the secondary profile what security am I afforded?😅
That is a great topic idea, thank you!
Hii, thank you for your videos and support man!
I have a problem, when Im on my second profile, I do recive notifactions if I get message on my head profile, but not the other way. I do not get notifications from the second profile. I have set send notifications ON, on all user.
Hmm, that's an odd one. I would disable and enable the notification setting for your owner profile and see if that fixes it.
settings -> system -> multiple users -> toggle "send notifications to current user"
question how do i get double whatsapp signal the op is not working, you might know that
grapheneos
Do you know if "profile notifications" is available on CalyxOS? or if it has a similar feature?
I don't believe so, I would also suggest testing out GrapheneOS. I no longer recommend CalyxOS.
How can I give my main profile access to the apps I downloaded on the second profile. Also access to photos and videos saved
You can't, but you can give your second user profile access to apps you downloaded in the settings. You also can't give your second profile access to saved photos and videos, as that would negate the purposed of separate user profiles. That being said, using syncthing you can do a setup that would allow access.
I can't install aurorastore in both users of grapheneos. The message [app not installed as package conflicts with an existing package ]
It's likely you're trying to install an older version on the other user profile. Android will not allow you to install an older version of an app across profiles. Try installing the most recent version on both, and it should work.
@@sideofburritos Thanks a alot
Hello i really appreciate your work 👍
I would like to ask your opinion about a configuration of profiles:
I would like to have my sensitive data in a separate profile where all traffic is over tor, can I set it not in owner profile? I have some limitation with new profiles? Thanks
Thanks!
You can. You could create another profile and have apps on that user profile send their traffic over tor.
@@sideofburritos thanks is the same, setting this profile in owner profile or in new profile? There will be difference?
@@marcot5607 It just depends on which one you prefer to use. With a new user profile you can use the end session option and terminate it. The owner profile is always active when you boot up the device
Thanks for informative video :), I just bought pixel 6 (because it cheaper now :p), I have a question about play service. Is this possible my Google services (from Android auto to maps, etc..) can work on second profile and main profile will be clean.
Like second profile normal phone and main profile is eggplants
You're welcome, and congrats on getting the pixel 6 for GrapheneOS!
It is possible to use it in that manner. You could have maps on the second profile where play services are and use it there. It's worth noting that Android auto doesn't work regardless if you have play services or not. From what I understand, Android auto is integrated at system level and not an application, so it's not included. Everything else will work as expected.
Great analogy with the eggplants 🤣
@@sideofburritos thanks, last time I used graphene os on pixel 1(sailfish), and really want to try on fresh device. What are other features are not working so I made my mind as well as find some alternative. Mainly I need for translation of Google and maps because opensource apps will not work in my location :( . Thanks for making videos, it really helps new guy to understand (love the f-droid one) :)
@@sideofburritos I tried to turn on location for maps but failed, I was unable to find this option "Reroute location requests to OS APIs", if you have any idea that will be huge help for me. Thanks for reading this and keep up the good work
If a person doesn’t know how to install and create this, but wants a phone already set up for it, how do you go about getting it? I see they sell them on pre owned phones on eBay, but is that the only way?
You could go the eBay route, but the installation is very straight forward. Buying an unlocked phone from Google and installing it yourself would be my first suggestion - grapheneos.org/install/web
I also have a video on the process - ua-cam.com/video/ro5OsVk8OfE/v-deo.html
#AbovePhone does this
Is it possible to get background UA-cam play on GrapheneOS?
I'm still using UA-cam Vanced on my LG G4, and have a Pixel 6a arriving tomorrow.
If you use NewPipe it has the option for a background player - newpipe.net/#background
Enjoy the 6a, it's a nice phone!
Works in Brave mobile (even not logged in)
What's with the camera app? Quality of pictures? Pixel 6
Ahh, I had that left over from the camera comparison video I made - ua-cam.com/video/MSvHKf9hxao/v-deo.html. My burner profile could use some clean up, since it's a burner I don't take as good of care of it as I should, haha.
Cod mobile isn't available on pixel 7 pro through graphene os but you can use it on calyx or lineage.
It works, you need to enable "exploit compatibility mode". Details are here - discuss.grapheneos.org/d/3387-cod-mobile.
TLDR - this is because the app has a bug that the security features on GrapheneOS are finding and thus stopping the app from launching. Exploit compatibly mode allows this app to run - grapheneos.org/usage#bugs-uncovered-by-security-features
Hey man, thanks for the vids. I installed GrapheneOS but the GPS doesn't work....is that normal? Kinda makes it a deal breaker for me...
Hey, nope, it should work just fine. What app are you trying to use it with? Make sure the app has location permission and you enable "location" in the slide down menu
@@sideofburritos thanks man, yeah it doesn't work with any app that uses it. Even using the sat checking app it just doesn't show up any sats! Pixel 4a....and yeah of course the GPS is on and permission enabled. Maybe I'll try and reflash?
Can you help I can’t update apps on getlab ore tor it doesn’t give me the apk opción
It only gives me the zip opción
Can someone help with this
Hi Alex, I responded on your other comment, on the original video you asked about this. The pinned comment on there explains what to do with the zip file - ua-cam.com/video/FFz57zNR_M0/v-deo.html
how can change font system on grapheneOS ?
I don't believe you can. The option doesn't exist in AOSP and doesn't exist in GrapheneOS.
Can Grafine OS be installed from a android device
"Google Android (stock Pixel OS) and other certified Android variants" is listed as one of the supported operating systems for the web installer - grapheneos.org/install/web#prerequisites
Took me a year to buy a pixel8a and i installed GrafineOS ,going through your videos now to see the best apps to install befor i do a full SIM card swich @@sideofburritos
👍👍👍
I don’t think we realise the importance of this feature yet. Might be one of the greatest of GOS
Edit: storage scopes
That's a great point. Providing the ability to deal with apps that request access to all files is HUGE. The less access you need to give the better.