GrapheneOS - Theft Protection

Pacienco

GrapheneOS and stock Android flavours like PixelOS have various features designed to disincentivise or mitigate device theft.

At a high level some of the PixelOS features toward this end are:

Theft Detection Lock
Offline Device Lock
Remote Lock
Find My Device/Find Hub
Factory Reset Protection

Mostly highlighted in this recent blog post https://blog.google/products/android/android-theft-protection/. Features that depend on Google's services or a Google account may be out of the question. That said, are there any more we would like to see on GrapheneOS? Are there any interesting things you do to deter or mitigate potential theft?

Please note that an equivalent to the motion-triggered lock is already planned.

Murcielago

Pacienco

Maybe you'll finde these links and discussions helpful:

Theft Detection Lock

https://discuss.grapheneos.org/d/27624-theft-protection-phone-grabbed-detection

https://discuss.grapheneos.org/d/20262-theft-protection

Remote Lock

https://discuss.grapheneos.org/d/2814-a-panic-button-to-trigger-remote-lock-for-example-via-sms

Find My Device/Find Hub

https://discuss.grapheneos.org/d/439-find-my-device-on-grapheneos

https://discuss.grapheneos.org/d/11520-android-find-my-device-when-powered-off

https://discuss.grapheneos.org/d/12867-find-my-device-a-possible-solution

Factory Reset Protection

We can't do that, it will result in people bricking their phones by forgetting their password. Google's approach works because Google accounts have recovery via a recovery phone, recovery email or customer support if neither of those is available as an option. It would be highly counterproductive to brick people's phones to hurt thieves.

source: https://github.com/GrapheneOS/os-issue-tracker/issues/4557

That said, are there any more we would like to see on GrapheneOS? Are there any interesting things you do to deter or mitigate potential theft?

I would be quite happy with a simple device lock based on movement
.

I personally used FMD Android for a while (just the SMS setup without FMD server) which worked well. As I didn't fell comfortable eventually could being tracked via SMS - after a phone reset I didn't install it again).

I use Auto reboot, two factor fingerprint unlock and a Duress PIN on a paper slipped in my device case - that setup fits well the part of my personal threat model you asked about.