How can I disable mobile internet for (all) apps?

Zonal

Hello everybody,

My new Pixel 10a has a prepaid SIM in it, so I don't want it to use mobile internet. Otherwise it will drain my credit really fast obviously. I'm home and/or connected to wifi 90 to 99% off the time, so I want my messenger app and maybe a browser to be able to use mobile internet and that's it.

I went looking through the settings and in the 'Permission manager', the only permission I can find that I think it could be is 'Network'. But that sounds kind of general and maybe could also mean internet in general (so also wifi) or maybe even the network you use to make calls.

So before revoking this particular permission from all apps, I wanted to check if the this is the right one. Or that I maybe should set this up completely different.

Thanks in advance! :)

xxx

Zonal
There is a toogle for mobile data under the sim settings. Just turn mobile data off (and on if you need it).

Novaliss

Zonal
Maybe try RethinkDNS?
https://github.com/celzero/rethink-app/releases

DohnJoe

Zonal

You could set a VPN with split tunneling and set block connections outside VPN.
This way only apps in the VPN could reach internet, all the others will be blocked.

There are two downsides: the VPN might have a cost (undesirable in this scenario) and will introduce a little bit of overhead (not significant, tho).

I guess that schklom gave a very good answer, especially netguard and the work profile.

If you do not want to reinstall everything in a work profile, I think the easiest solution is to go with NetGuard.

schklom

I think your options are

use a firewall app such as Netguard (https://github.com/M66B/NetGuard). It does not prevent Internet to apps as thorougly as GOS does with the Network permission, but is a good solution
enable Data Saver when you leave home and whitelist (unrestrict in the Mobile data usage settings) apps like messengers and browsers. I think this will work, feel free to test. I think Tasker or similar automation apps should be able to automate enabling/disabling Data Saver depending on e.g. time/wifi connection/location/...
install most apps in a Work Profile (using Shelter or Insular apps), disable the Work Profile when you leave home and re-enable it when you get home. When it is disabled, all apps in it cannot run, so it prevents them from doing anything including accessing the Internet. Note that sharing files between your normal profile and the Work Profile is a bit inconvenient, but not difficult

in the 'Permission manager', the only permission I can find that I think it could be is 'Network'.

https://grapheneos.org/features#network-permission-toggle
"When the Network permission is disabled, GrapheneOS pretends the network is down. It shows the network as down in various APIs, returns errors showing a network connectivity issue rather than a revoked permission and avoids running scheduled jobs depending on the network. This results in apps handling it as if the network is down rather than crashing or showing errors from trying to use the network and being unable to do it."

Zonal

schklom Thank you for the reply!

Thanks for the network permission URL, now I know that's not the solution! :)

I already use profiles, but switching it before I go outside is something I will easily forget so I need/want something automated. The same goes for the Data Saver option, although with an app like Tasker this might be an option. I believe I tried Tasker in the past for setting up something else but couldn't figure out how it worked.

So I think the firewall app might be the best approach, I will look into that! Thanks for the URL. I'm familiar with the name, but never used it before.

And if I understand correctly, with GOS you can set it up how I described? So 'Network permission' works/behaves differently on Graphene?

Zonal

xxx I understand that, but it's easy to forgot and before you know it all my credit is gone. I need an automated solution.

xxx

Zonal I understand that, but it's easy to forgot and before you know it all my credit is gone. I need an automated solution.

Just turn it off.
Or buy a plan that has mobile data. [ <= 1GB would be enough ].

schklom

Zonal

I already use profiles, but switching it before I go outside is something I will easily forget so I need/want something automated

A Work profile is part of your current profile, you don't need to switch from your main, the Work Profile is like Private Space, but easier to share data with and does not need to unlock on boot (unless you change its encryption setting, I think).

Try https://f-droid.org/packages/com.oasisfeng.island.fdroid/ or https://f-droid.org/packages/net.typeblog.shelter/ and see how it goes. If the Work Profile is too tedious to use, just delete it and remove the app that controls it.

I believe I tried Tasker in the past for setting up something else but couldn't figure out how it worked

Tasker has confusing names if you're not familiar with it, I also had a hard time at first.
In Tasker, a "Profile" defines a trigger (e.g. a Timer, Location, Bluetooth device detection, NFC tag scan, Screen turning off, etc) that automatically runs a "Task" you define (note that some Tasks will ask you to give Tasker necessary permissions to control your phone). Note that some Profiles can trigger tasks on start but also other tasks on exit (e.g. enter a location and leave a location).
A "Scene" is (I think) a visual interface on your screen, defined how you like, you can e.g. show a panel or a map or a text box or buttons.
"Vars" are global variables, if a variable starts with an uppercase letter it is available globally (i.e. any Task can read and modify it) and listed there, otherwise it is only available within a Task.

Btw Netguard is great, but the free version is limited. It is free and open-source so you could in principle change the code slightly, compile the app, and access all features without paying but it's not trivial. I think the full version is a one-time payment of $5.

And if I understand correctly, with GOS you can set it up how I described? So 'Network permission' works/behaves differently on Graphene?

Network permission on GOS is all or nothing, the app can access any Internet available or none at all. It also must be toggled for each app, so it is painful to change often for so many apps.

I personally think the Data Saver toggled by Tasker is your best option, but it's up to you. Try and see what fits you :)

Zonal

xxx if I had that option I would have done that.

xxx

Zonal
I understand.
https://silent.link/
Is very cheap and works as 2nd line for data.

Zonal

xxx

thank you the link, that does look like an interesting option for some scenarios.

I think I'll try this along side by SIM for calling/sms, but do you need an app from them or something to activate the eSIM?

Zonal

Novaliss

Thank you, I will look into it! :)

xxx

Zonal do you need an app from them or something to activate the

No. It just works with an QR code on the website.

Zonal

xxx

Because with a lot of local providers here you will need an app, so you can't use an eSIM... very annoying.

Also, do I understand it's a 9 dollar purchase and then you buy credit (like 5 bucks) that doesn't expire?

xxx

Zonal . very annoying.

So true.

Zonal d it's a 9 dollar purchase and then you buy credit (like 5 bucks) that doesn't expire?

Don't remember exactly -> you can adjust the credit. A few dollars for the sim and adjustable credit. It worked very good for me. Remember a small fee is needed too (for the payment).
Credit dosn't expire (as far as I know).