Is the duress password system wide or per profile?

UserresU

After reading about this feature in the features page I think maybe it will wipe just the current profile but I'm not sure. At first I thaugt it will be the whole telephone and all profiles.

Dumdum

UserresU

GrapheneOS provides users with the ability to set a duress PIN/Password that will irreversibly wipe the device

The description is abundantly clear that it is device/system-wide.

gk7ncklxlts99w1

Dumdum

Duress password was implemented? Where is this option? Only in Owner profile?

Quotesquestioner

Dumdum When i set it up in the owner Profile, it will work in all profiles right?
Because:

Both a duress PIN and password will need to be set to account for different profiles that may have different unlock methods.

That is a bit confusing to me. It sounds like the duressPW and unlockPW have to be set at every profile.

But the reality is that i set it up in the owner profile and then, when i am in another profile, no matter what the unlock method is, when i enter the duressPW it will do it's thing right?

Sorry this is because of my english skill. "Need to be set to account" is mabe ment another way then i think.

Dumdum

gk7ncklxlts99w1
https://grapheneos.org/features#duress

It can be set up at Settings > Security & privacy > Device unlock > Duress Password in the owner profile.

Edit: For the record, Duress has been implemented since May.

Dumdum

Quotesquestioner
Yes, you only need to set it up in the Owner profile. It will work for all profiles.

That quote is saying that a user might have one profile with a PIN unlock and a second profile with a password unlock. Because of this, users need to set both a duress PIN and a duress password, so that the user can enter the duress PIN when logged into the first profile with the PIN, or the duress password when logged into the second profile with the password unlock. If you only had a duress PIN for example, then users would not be able to enter it into the password-locked profile, because it expects a password and not a PIN.