lovefromisrael

It is recommended to avoid Aurora Store as it is insecure and dangerous while providing no privacy benefit.

Sideloading (downloading and installing an apk manually) is even worse, especially if you are not doing it directly from the developer but rather from 3rd party websites, as you can't verify the legitimacy of the app.

I recommend installing it and all other Play Store apps from the official Play Store with sandboxed Play Services. This is the most secure method and more private as well. (security is a prerequisite to privacy)
Play Services are completely sandboxed without any special permissions or elevated access on GrapheneOS, just like any other app is.

You can read more here:
https://grapheneos.org/usage#sandboxed-google-play

      thank you very much..
      why aurora is not secure and has no privacy benefit?
      do most privacy concerned people are not using aurora?

      so then.. i think i will really make the switch to the play store..

        lovefromisrael why aurora is not secure and has no privacy benefit?

        I attempted to summarise that here: https://discuss.grapheneos.org/d/20760-im-confused-about-google-accounts/30

        lovefromisrael do most privacy concerned people are not using aurora?

        I suspect that a lot of people who care about digital privacy are using Aurora. But probably just because it's so often recommended in privacy communities. I think it's clear that Aurora is objectively less secure than Play Store, and also offers no privacy benefit over it.

            if i've used aurora for a very long time and now made the switch to google play.. should i reset my phone and start all over because the aurora store might have already compromised my phone?

              lovefromisrael

              If you feel better doing so you can, but I don't think such an extreme response is needed.

              I recommend the following, in order:

              • Uninstall all Aurora Store apps
              • Install and set up Play Services and use an anonymous account if you desire so
              • Install all your Play apps from the Play Store afterwards
              • Have fun :)

                pxlkng iirc aurora store is like a VPN for the play store by using a random email and a different IP. I've been using it for a while now. Is this dangerous?

                    DeletedUser218

                    It is not that and it is dangerous and insecure, yes.

                    It does not provide any privacy benefit over just using the official Play Store with sandboxed Play Services on GOS.