Logging in to accounts downloaded from Aurora safe?

JonBoy69

I’m new to GrapheneOS. I’m using Fdroid and Aurora. Is it safe to log-in to accounts like LinkedIn, YouTube, X and Reddit downloaded from Aurora? Also, am I better off not using my home Wi-Fi or does it matter? I am afraid I will do something that will defeat the purpose of Graphene privacy wise.

de0u

JonBoy69 Welcome!

GrapheneOS offers both privacy and security enhancements. Even if you choose to use GrapheneOS in a very non-private way, you will still benefit from the security enhancements, and GrapheneOS won't be offended.

With respect to privacy, it's not really a knob that can be turned down or up, or a checklist of things that everybody must do. It's more about deciding what you wish to conceal from whom, because you can't conceal everything from everybody.

This might be a good starting point: https://www.privacyguides.org/en/basics/threat-modeling/

cdflasdkesalkjfkdfkjsdajfd

JonBoy69 Apps you download from Aurora are the same APKs you download from Google Play Store. If you log into this apps when you download from Google Play you may also log if you have downloaded from Aurora and viceversa.

UndercoverBozo

JonBoy69 Sounds like you have privacy fatigue. Logging into those sites can't really be private anyways. What you are describing is perfectly normal but don't be afraid to use sandbox google play ( that is the main feature here) I went through the whole profiles/adversary rabbit hole only to come full circle and use the Shelter app to activate a work profile and installed sandy google play with a throwaway account in there which you can freeze at any time.

But as far as those apps go they should be the ones you are worried about to start as you are logging into them and they are the ones with your data. Unless you need to actually comment or upload there is no need to use either app or company ever again but instead . LibReddit Piped (Newpipe, Libretube,Clipious,Grayjoy for apps). A frontend alternative a day keeps big data away.

P.S. VPN always on/lockdown mode split tunnel when logging in.

fid02

JonBoy69
Hello and welcome to the community.

Adding to the discussion: Regarding Aurora Store specifically, the Play Store app is recognized as a more secure way of obtaining apps from the Play Store. You can find some more on the matter here, from the official GrapheneOS account: https://discuss.grapheneos.org/d/11849-spoofing-install-sources-for-non-play-store-installed-apps/2

But please note, I don't in any way consider Aurora Store to be deliberatively malicious, only that Play Store is a safer way of obtaining apps.

Regarding Wi-Fi, I recommend giving this a read: https://grapheneos.org/usage#wifi-privacy

I highly recommend reading the material on grapheneos.org. It answers some common questions people have relating to the security and privacy of GrapheneOS. If some of it seems a bit too technical, you can of course skip those parts or ask the community for clarification if you are interested in learning more.