How to access files from different user accounts?

Philebos

Hello,

I am fairly new to GrapheneOS (and Android in general). Switched from iPhone a few weeks ago. So I might be missing the obvious here:

I cannot figure out how to access files from a different user account (e.g. the "download" folder from my main account).
I couldn't even figure out where user accounts different from the main account physically store files.
I checked all folders on the phone but couldn't find anything.

thank you very much in advance

evalda

Philebos files are not shared between user profiles. This is by design and is an important security feature to isolate profiles.

To transfer files between profiles you have a few options:

Copy files to USB flash drive from one profile and then copy from the flash drive to another profile. It's the simplest approach if you need to transfer few files occasionally
Send files to yourself using encrypted messenger app like Matrix or Signal (you'll need to use a different phone number for Signal in the other user profile)
Sync or upload / download files via a cloud storage service like Dropbox. Make sure to encrypt files locally first using Cryptomator or a similar app
Transfer files over localhost using a SFTP or similar protocol
Could also sync to local network like NAS

Hat

evalda Transfer files over localhost using a SFTP or similar protocol

This communication between user profiles using localhost is only available on WiFi and Ethernet network without VPN ? It doesn't concern 3G, 4G, 5G network right ?

[deleted]

Profiles are isolated, that is the point that you (or apps) won't get to the data from other profiles.

Philebos

ok, that makes sense. Thanks for the quick answers!

JayJay

I made it so I installed Session app in both profiles. I send files between the Sessions created, and then delete it from the other end once stored and then deactivate the app also so it's not running when not in use.

Less hassle than using usb-sticks.

Graphite

There are really only 2 things shared between profiles: App packages (not app data) and the Network.
Of the list given by @evalda, I prefer to not use any cloud services or external devices like USB or a NAS.

Syncthing can work if you want a persistent syncing of files with revision control. Useful if you need to modify from each profile want an offline copy when the profile is stopped.

For SFTP, I use primitiveftp. Its a service that can run automatically in the background and a file manager like Material Files can just map to it.

Graphite

Hat

Localhost is "local" only. Not even wifi or ethernet.
Depending on the ftp server app, you can serve the files either on the localhost loopback address (127.0.0.1) or on all network interfaces (0.0.0.0), which would expose the files to wifi, ethernet, VPN tunnels, or cellular networks. *Although the VPN app/provider and cellular networks may not allow such traffic.

I chose primitiveftp precisely because serving on localhost is safe from other networks. Only a local app can connect to that listening port. Of course, I add TLS cert protection from passive sniffing and basic authentication so a rogue app won't see the files either.

Hat

Graphite Localhost is "local" only.

Thanks, I forgot this.

Graphite I chose primitiveftp

Do you mean Primitive FTPd ?

Graphite

Hat Do you mean Primitive FTPd ?

Yes, that's it.