Secure Banking with Vanadium

Kong

I am looking for secure and private method of logging to my bank.
At this moment I am not able to install working bank app, so please evaluate my solution and find flaws in it.

I am going to use second profile just for banking. The only apps which will be used are: Vanadium, AuroraStore and KeePass downloaded from Aurora. Vanadium will be connected with KeePass, which will be used after biometric authentication. Bank website will be set as a shortcut on homescreen and opened in Vanadium private mode.

What you think about it?

Ilgar

Kong it would work, don't forget to disable allow running in background in user settings, but why not private space for that simple task

dhhdjbd

Kong

i think you are worrying to much about it
And it will work like you said

but like there is no need to have aurora store in this profile, just install keypass in the owner profile and push it to the user

edit: also keepass is open source and i would either get it directly or from google play store.

gristle-cause

Kong for most major banks, the apps are unnecessary. Use vanadium and go through their website. You'll probably need to avoid a VPN and toggle the hardening settings in Vanadium for that particular site. I haven't really found any major features only available via app

Any major financial institution is gonna be using HTTPS and have pretty impeccable security maintenance on their site. I don't see any vulnerabilities you can reasonably mitigate

Kong

All tutorials I knew, presented profiles as the main separation method in Graphene OS.
To be honest switching between my default and bank users is OK for me, because I do not log to my bank very often.
But if private space gives more privacy and security I can test this solution.

Ilgar

Kong

But if private space gives more privacy and security I can test this solution.

as far as I know only work profile isn't identical in regard of isolation but private space has identical isolation to secondary user

All tutorials I knew, presented profiles as the main separation method in Graphene OS.

heh, actually I remember opinion of moderator or dev on this forum that they not encourage to use secondary profile at all.

23Sha-ger

https://seprand.github.io/articles/best-user-profile-setup/

mmmm

gristle-cause for most major banks, the apps are unnecessary

I think that depends where one is in the world and which operation one wants to do. Lots of banks require the apps to be used as a second factor for online payments, for example.

DeletedUser495

mmmm Lots of banks require the apps to be used as a second factor for online payments

If that was the case, you could make payment straight from the app, not bothering with website. Websites usually require further input for authorisation, once authorised, functionality depends on implementation.

Ilgar

for example, I've seen bank that allows to login at atm without card by qr, but via site upon tapping qr there was notification that it's available only through app, so qr was used only for actual payments.