Essential apps? Please share

K8y

Hello,

What are essential apps (and where to get them if not on Aurora or Playstore)? For a moderately tech savvy person who wants better privacy and security?

Is there a link to a list someone already created? (I don't see any in archives).

Signal, Bromite, a VPN, Proton, etc...

SovereignCopper

K8y Bromite? If you're using Bromite, then you're using a browser that hasn't had any (security) updates in over 2 years...

IamZorro

K8y Is there a link to a list someone already created?

Yes, https://alternativeto.net/lists/35462/grapheneos-appverse/ . I find it very great.

I recommend the use of Vanadium, DuckDuckGo, Bitwarden, ente, Notesnook, ProtonMail and Proton Calendar. These are the steps that can make some of the biggest impacts for your privacy in my opinion (also privacy.com if you are in the US but idk how easy it is to use).
Also Organic Maps when you can, or Google Maps logged out if needed.
And change your DNS resolver.
Also addy.io.
And use Libretube or Grayjay.

And it is important to try to diminish the quantity of infos Google has over you (get your contacts put of Google)

Graphing_Graphene

Shelter to separate and better manage work profile apps.

Main profile: Aegis, Bitwarden, Brave, Ente, Etar, FairEmail, Gboard, Magic Earth, NewPipe, OsmAnd~ (on F-Droid), Orbot (enable Kindness Mode to help censored users!), GMaps WV, Proton Drive, Proton VPN, Signal, SimpleLogin, Standard Notes, Tuta, Obtainium, Yubico Authenticator (if you have Yubikeys, recommended).

Closed source apps are in work profile and copies of sensitive apps (e.g. Proton apps to update via Play Store since it's most secure). There has been much talk of F-Droid being insecure, make of that what you will. Note that you'll need to activate a VPN app in your main profile, work profile, and Private Space. Privacy Guides, Techlore, and The New Oil have excellent further recommendations.

Proton VPN, Play Store, Banking and financial apps in Private Space.

freezet

Here is a good list https://www.kuketz-forum.de/t/android-meine-installierten-apps/9217

For excel and word you can use Google docs in offline mode which was already mentioned in this forum , you can also use older versions of MS Excel and Word if thats more your thing.
https://discuss.grapheneos.org/d/9872-app-suggestion-for-office-docs-incl-ms-office
Avoid Onlyoffice.

splattergames

freezet Avoid Onlyoffice

why?

N1b

I'd follow the privacyguides recommendations where you need them. Otherwise just system apps and features (like Vanadium, user profiles, contact/storage scopes, duress pin etc.).

In the end you have to create and update your threat model and use this to make informed decisions for your individual situations. Nobody can tell you what's good and right (except maybe what's definitely bad, like abandonware such as Bromite).

For me personally, my most important apps are Mullvad, Bitwarden, Aegis, Molly and Tuta. I can give you lots of reasons why that's true for me. As long as you can do the same for your choice, you're on the right track.

Graphing_Graphene

N1b Vanadium is more secure than Brave but Brave is more private than Vanadium. GrapheneOS recommends using Brave instead of Vanadium for most users. You can also get a rough idea of how their privacy protection compares here (albeit GrapheneOS has criticized their metrics): https://privacytests.org/android

freezet

splattergames
Its still russian based software, which they try to hide most of the time
https://forum.cryptpad.org/d/232-onlyoffice-concerns-vendor-makes-shady-moves

Xarcell

I just use Brave.

Oggyo

freezet Its still russian based software, which they try to hide most of the time

I was under the impression that was in the past :)

In 2009, a group of software developers from Ascensio System SIA (Latvian-based) and New Communication Technologies (Russian-based) launched a project called TeamLab, a platform for internal team collaboration. [Source]

splattergames

freezet ah, so we automatically assume it's malicious because eViL RuZzia. Are you avoiding US based software too? You know, because the NSA is trying to backdoor everything and their grandma?
If you can find any evidence or even hints of a backdoor, I'm all ears. Having selfhosted my own OnlyOffice instance, I somehow couldn't find any suspicious connections. Android version also seems to talk to my instance and Firebase only.

freezet

splattergames for me ( as in this is my opinion ) its just enough of a backdoor as soon as an malicious update rolls out and my files get encrypted , same for 7zip , such world wide spread software is just one update away from total destruction :p

K8y

splattergames because the NSA is trying to backdoor everything and their grandma?

Is graphene safe from this?

Also what happened to Divestos? The developer just pulled the plug without notice, saying he's had enough... It's worrisome to me. I hope he didn't get bought out by anti-privacy corp or gov. I hope graphene doesn't get bought out too.

splattergames

freezet for all we know, every app is one update away from wreaking havoc. The origin of the code has nothing to do with this. And what exactly is the problem with 7zip now?

Graphing_Graphene

splattergames

spoken8072 it was in an old post of theirs on Mastodon (in 2024). I'll see if I can find it.

Probably9857

Graphing_Graphene GrapheneOS recommends using Brave instead of Vanadium for most users.

Uh...that must be a typo...

spoken8072

Graphing_Graphene Where did you see the GrapheneOS recommends Brave over Vanadium?

splattergames

Probably9857 probably (pun intended) a typo. I guess he meant to say Firefox (and as such every Gecko-based Android browser). So the sentence goes: GrapheneOS recommends using Brave instead of Firefox for most users.

Probably9857

Graphing_Graphene

Well, there is this, from November 2024:

Brave is not our recommended browser and we don't specifically support it.

https://xcancel.com/GrapheneOS/status/1861542968743653849

TGOS

IamZorro
I can't befriend myself with Proton Calendar, a service which you can't have a use without internet and without paying not even changing the color. I mean wtf.
So I hope there will be soon a better option then etar with up to date widgets and stuff.

HMC

Necessary? There is very little that is absolutely necessary. I like to think in terms of what can I do without and I only have a handful of additions. Some are related to usability of the packaged app (Fossify SMS, FM, VR, Music), Proton Apps, package managers to pull them in and keep them updated. The biggest app is navigation. The rest can be done at home on my laptop.

Seriously... for me less is more.