Setting second shorter pin for AFU unlocks

B9B

Sorry if this has been already asked,
but i just did a fresh install of graphene with a strong password as main passphrase / first boot unlock and
was wondering if i could set a second pin / shorter password that can only be used for normal unlocks during the day when the phone is already in AFU but not for the decryption / initial after boot unlock.
Is this possible? Where can i configure it?
(i am not looking to use fingerprint for that usecase btw)
Thanks :)

[deleted]

B9B I think that will not be possible at the moment, but if your threat model allows it and you can rely on secure element (which is vast majority of users), just use 6 digit random PIN as your main unlocking method.

Velocity9490

The only similar issue I could find on the issue tracker is this one for a secondary PIN for fingerprint unlock. This would allow you to have a strong passphrase for encryption, as well as a PIN + fingerprint for AFU unlocking.

Carlos-Anso

Velocity9490
That is a major reason why this feature is being developed. The other is to guard against your fingerprint being used to unlock the device without your consent.