[Feature request] More security options

MoxieSH

Hi,
I am very happy with graphene os and feel much safer using graphene, rather than the stock Google os with their ai stuff and all. But I would like to have more security options like:

A fake pin, Wich wipes the device once entered like on the anom phone. (When it wasn't actively catching criminals and the fbi disabled it)

Automatic wipe when phone isn't unlocked in a certain amount of time

Automatic wipe when password is entered wrong a number of times

That would make this the perfect os for me and a lot of other people, I believe! Please consider my wishes and have a great rest of your day!

matchboxbananasynergy

MoxieSH A fake pin, Wich wipes the device once entered like on the anom phone. (When it wasn't actively catching criminals and the fbi disabled it)

A duress PIN/Password feature is in development.

MoxieSH Automatic wipe when phone isn't unlocked in a certain amount of time

This could theoretically be done, though there are no current plans to implement it as we have auto-reboot.

MoxieSH Automatic wipe when password is entered wrong a number of times

This doesn't make a lot of sense. Throttling is provided by the secure element. If you are assuming your adversary has a secure element exploit available to them, then you should assume they can bypass an OS feature like this, too. It would be theater to do this.

de0u

MoxieSH Automatic wipe when phone isn't unlocked in a certain amount of time

GrapheneOS already supports automatically rebooting after a set people without unlock. If a strong passphrase is used then extracting data from a BFU state should be infeasible.

Tryptamine

MoxieSH
For automatic wipe after a set period of time locked, look for the F-Droid app Wasted.

Keep in mind it is completely useless now, until GrapheneOS implements their in-development feature for the admin app API to securely wipe data without reboot. This is still planned but not released.

Wasted can also fire and wipe data on receiving a broadcast signal from another app, on detecting a data signal from the USB port when screen is locked. (was more useful before USB data could just be shut off when screen is locked. Wasted's wipe when USB connection detected works BFU as well though.) Also you can have a fake Airplane Mode quick settings toggle and fake messenger application icons on home screen, all of the fake apps and toggle wipe device when hit.

Again, once the secure wipe without reboot is implemented, this may be useful for some threat models. I'll continue to use an 11 character passphrase, uppercase lowercase numbers and symbols with 8 hour auto reboot, and wait for the option to require my passphrase along with fingerprint as secondary login factor to unlock. Maybe I'll up my passphrase to 21 randomized characters, uppercase, lowercase, numbers and symbols with 4 hour or even 2 hour auto reboot, but I'm not sure the inconvenience is worth the added effort...

Oh yeah, Sentry is the F-Droid app that does the whole "wipe after X failed password attempts" thing. Maybe useful to you once secure wipe without reboot is implemented.