Can you add two types of passwords?

troika

I haven't bought a pixel yet, but I saw in your product introduction that your startup password doesn't seem to prevent violent threats from bad people. So I was wondering if you could add two types of passwords. The first one is the initialization password. Once you enter this password, the phone will be initialized immediately. The second type of password is the one that locks the phone. Once entered, it directly locks the phone. Even if the correct password is entered, the phone can never be opened.

matchboxbananasynergy

GrapheneOS has been working on a duress feature which will allow you to designate another password/pin which once entered in the lockscreen will immediately wipe the device irreversibly.

It has been in development for a long time and is close to being complete. GrapheneOS had to take a custom approach to how the wiping occurs since the standard device admin API was bypassable and an attacker with physical access to the device as the wipe was occurring could cancel it. That concern is being addressed upstream, though, thanks to GrapheneOS' vulnerability reports. You can read more about that here:

#11721

troika

matchboxbananasynergy If a bad person has a forensics software and then copies the entire phone image in advance, and then asks for a password, isn't it still unsafe?

final

troika They would need to unlock the device (either by exploitation or consent) to perform any data extraction or cloning in the first place, so this situation wouldn't be a valid concern. Forensics software require the device credentials. They can't know you had this set-up unless they had knowledge of it before they took the device. They'd also handle it differently if they knew it could be triggered by you.

GrapheneOS

troika This isn't how the encryption works. Please read https://grapheneos.org/faq#encryption.

GrapheneOS

troika

but I saw in your product introduction

What are you referring to by production introduction? It doesn't sound like our official documentation.

troika

GrapheneOS https://grapheneos.org/faq#device-lifetime