Wipe all data

[deleted]

Hi it is possible for everybody to delete all my data when entering in recovery mode without asking the password ?
Like he does on this video https://www.youtube.com/watch?v=AabL7oYciMM&t=7

treequell

[deleted] Yes, I haven't watched the video but yes you can factory reset (data wipe) from recovery mode.

[deleted]

Everybody can come et reset my phone...? Reassuring... Is GOS doing something against this ?

treequell

[deleted] That's correct, there is no anti-theft protection on GrapheneOS. You can read more about that here:
https://grapheneos.org/faq#anti-theft

[deleted]

This is crazy ! If I had secrets documents on GrapheneOS, literally everybody could delete them... Or if someone was angry against me he could delete my phone...
I know that on OnePlus 8, resetting the phone via recovery mode is password protected (with the screen lock password)

treequell

[deleted] I know that on OnePlus 8, resetting the phone via recovery mode is password protected (with the screen lock password)

That depends on Google Play Services having privileged access to the device.

I'm not aware that GrapheneOS is going to offer the ability to recover you profile if you forget your password like Google does on stock Android. Therefore, without the ability to factory reset from recovery mode, you'd have a bricked device if you ever forgot your PIN.

[deleted] This is crazy ! If I had secrets documents on GrapheneOS, literally everybody could delete them... Or if someone was angry against me he could delete my phone...

It's best practice to backup your data.

Oggyo

[deleted] This is crazy ! If I had secrets documents on GrapheneOS, literally everybody could delete them.

GrapheneOS is security-focused. Yes, the attacker can erase them, but this doesn't mean he/she can obtain a copy of them, and this is the point. Securing a backup data copy is the user's responsibility.
Not to mention that you can drop your device and break the touch screen or experience a hardware failure. Then it's basically the same because it's an unpredicted/unplanned event.

[deleted]

I think this priority is not that low and should be taken care of.

Skyway

You do realize this isn't anything new , any computer is vulnerable to the same thing .
I've got many laptops because people forgot their password . just boot to recovery and reinstall windows , you don't get any data but its a fresh install. Same if it was Linux just reformat the drive .
As graphene points out this reduces ransom attacks and keeps the phone from being e-waste . Double edge sword but its reality .
Edit - there's computrace for computers but it turn it to a brick as soon as you turn it on.