What are the best profiles to have to separate your apps?

[deleted]

What do you use? I'm open for suggestions as I'm a new GrapheneOS user and looking to setup some for myself :)

Xtreix

[deleted] I don't understand what you mean by best profiles, you simply set up a new profile in Settings > Multiple users and you decide which apps you want to install in this profile, it's not a very practical feature to use and App Communication Scope will soon limit the data that can be shared between applications, as far as I know, this is a very difficult feature to implement.

gk7ncklxlts99w1

Xtreix

I think they're asking how other people isolate their apps, what apps they put into what profile, etc. Naomi Brockwell gives her own example in her latest video. I'm actually interested to hear other people's opinions as well since I'm in the process of isolating my apps, but I haven't decided on a setup yet. It's not as simple as "one profile for GSF" because I'd end up using multiple profiles with GSF. It's not an easy answer really.

Are you suggesting App Communication Scope will make profiles redundant (or generally increase sandboxing further)? Personally I would still make use of it entirely for the reason that I can use a different credential for more sensitive data.

Xtreix

gk7ncklxlts99w1 Are you suggesting App Communication Scope will make profiles redundant (or generally increase sandboxing further)?

I don't know but I hope so, it could at least make work profiles redundant, they will never be as isolated as profiles via the operating system anyway.

cdflasdkesalkjfkdfkjsdajfd

I don't know if is the best or not.
My current profiles are:

Own: all my daily apps (no google play services). I never enable location at this profile
Banking: for banking apps (with google play services)
navigation: organic maps (no google play services)

Eirikr70

I eventually got rid of any profile, since I think my threat model doesn't need any China wall among apps. If need be I would say one profile with Google Play services and invasive apps, and one profile with privacy-respecting apps and no big G.

andrej567

Eirikr70 I have banking+keepas in separate profile, that's all - for the case someone "finds" my phone unlocked. If i do banking, I finish it and logout.