Feature request: Hidden profiles

lawman

An absolute killer feature would be

1) to have hidden profiles that are completely invisible unless you enter their PIN code + fingerprint

Duress pin is great but sometimes you want everything to appear completely normal.

Private profile isn't stealth at all as you can see it exists.

Other user profiles are also easily visible from the owner profile

de0u

lawman hidden profiles that are completely invisible unless you enter their PIN code + fingerprint

This has been suggested before. I think two obstacles previously expressed are:

It is not possible for "hidden" profiles to be hidden from a moderately competent adversary, and the project has expressed reluctance to deploy features that work only against low-competence adversaries,
Google is making frequent changes to the user-profile system, which means GrapheneOS changes to that code would be difficult to maintain.

lawman

Such a pity but understood. Thx

GrapheneOS

It's not possible for profiles. It's possible to have a deniable VM feature if data is reserved by default for all users and can be optionally used or reclaimed. That would be a far future feature, and not profile related.