Do I need a second phone to install crap apps?
evalda Does it mean that I should add extra users and relogin if I want to use the apps? For example Whatsapp or the bank app would each have a separate profile then.
Can I have Spotify playing in one of these accounts in the background while I am on my main profile?
What apps should I logically keep together on the main profile then? I am tempted to just create a separate profile for all apps except for the default ones, so including Signal would have a separate profile too then. Does that make any sense?
Thank you for helping
grapppp Not exactly... Owner is different from other profiles in two ways:
It is always unencrypted and always running. You can't use another profile and not have Owner opened. I need to use some profiles like banking with no other profiles running on the background....
Some system settings can only be changed from the Owner profile. So not using it provides an extra assurance such settings won't be changed accidentally or maliciously.
evalda Thank you for explaining this further. I will make use of this and think of how to best categorize my apps. Right now I'm deciding if there is any point to separate hostile apps to separate profiles and what I must have in the main profile. For example I would like to have maps but I don't like phone calls because they are not encrypted so I use Signal. Maps can be offline but Signal will be online. If Signal has a vulnerability then my maps data (location data) would be compromised. I know I will be taking pictures of some things too at times so my pictures will go to the main profile too, which means that they would be compromised too. The same with taking notes which can also be offline...
I dont know much about Graphene / security, but you could install some apps in the workprofile.
You could use an crapp app there, if you need notifications from it. You would get these notifications, while you are in your normal profile. And the App couldnt access your Pictures for example. But with your File Manager you could copy Files to your Work Profile.