I personally use both, Proton for almost everything (with Proton Ultimate and Simplelogin aliases) and Tuta (still on the 1€/month plan) for few things where I need notifications without google play services.
faxe

- Joined Oct 12, 2024
• Java & Kotlin developer
• IT security enthusiast
• Online privacy advocate
Disabling secure app spawning for that app might help, at least it does with other apps banning GOS as a rooted device like comdirect photo tan app
lovefromisrael There is really no privacy/security benefit from this, so it's unlikely that it is getting implemented, but you could check if there is an existing request for this on github.
Don't give it the location permission
With sandboxed google play services installed, the app compatibility should be nearly on par with stock Pixel OS, except some Banking apps and a few other apps enforcing strong play integrity. Many apps will also run fine completely without Play Services, but YMMV.
The apps you install, for example Instagram and Spotify, can still track you through their algorithm, the files you upload or give them acces to, IP address (unless used with VPN or TOR), etc., but thanks to features like storage scopes and contact scopes you can better limit what files and contacts on your device the app has access to. Also through the extensive security hardening the GrapheneOS devs implemented, you will benefit from running such apps on a GrapheneOS device no matter what.
Regarding android auto I can't speak from first hand experience since I never used it, but as far as I'm aware it should mostly work with sandboxed google play services (with the exception of few cars that use a non-standard implementation I think. You'll likely find better answers to this by searching for "android auto" on this forum).
- Edited
Since the last one or two weeks (can't really say if it's due to a new release or something) I noticed, that when I close all Vanadium incognito tabs through the "close all incognito tabs" notification sometimes the phone becomes unresponsive for 1-2 seconds with a notification pill at the bottom of the screen stating "Processing notification". The incognito tabs are opened by a Incognito Tab shortcut on the homescreen, but I don't seem to find a way to reliably reproduce this behaviour, but since I do nearly all my browsing this way it happened few times last week.
Did anyone else here ever encounter this? I searched for "processing notification" and "close all incognito tabs" on this forum but didn't find an answer. Also if this is a known bug/upstream issue just let me know and close this topic, thanks.
classic_computer_669 Never used apple reminders, so I don't know if it is a good replacement, but I use tasks.org for todo lists/task management
- Edited
From the article:
Today, Randy Zar, CEO of Faraday pouch manufacturer SLNT wrote:
so obviously he will recommend buying a Faraday pouch, while GrapheneOS FAQ states:
Airplane mode is the only way to avoid the cellular network tracking your device and works correctly on the devices we support.
also GrapheneOS account here often stated that Airplane mode fully turns off all radios (it's surely also somewhere in their docs).
Besides that this slate article states, that phones first have to be infected with malware for the tracking you mentioned (NSA "The Finder") to work.
Ingonimania AFAIK Seedvault can't directly backup to Proton Drive but you can backup to your internal storage and then copy the .SeedVaultAndroidBackup Folder(or whatever it's called) to Proton Drive
DeletedUser93 Charging only while locked doesn't mean that the phone will only charge when it's locked, but that only charging (and not file transfer etc.) via USB-C is available when locked.
bobsandvagene You can install Snapchat in an extra profile. When you want/need a new Android ID you'll have to delete the profile, create a new one and install snapchat there.
bobsandvagene Snapchat works on GrapheneOS (at least with Sandboxed Play Services, don't know if it works without). Your IP will not be hidden by default but you can anchieve this with a VPN or Orbot.
If you get banned and try to create a new account Snapchat can know that it is still the same installation as per GOS documentationApps can generate their own 128-bit or larger random value and use that as an identifier for the app installation. Apps can create data in their app-specific external storage directory by default without needing permission, and in the legacy storage model before API 29 that data persists after the app is uninstalled, so it can be used to store an ID that persists through the app being uninstalled and reinstalled. However, external storage is under control of the user and the user can delete this data at any time, including after uninstalling the app. In the modern storage model, this data is automatically removed when the app is uninstalled. GrapheneOS includes Seedvault as an OS backup service which must be explicitly enabled, and it has the option to automatically restore app data when an app is reinstalled, so it wouldn't lose track of it being the same profile.
The ANDROID_ID string is a 64-bit random number, unique to each combination of profile and app signing key. The 64-bit limitation means it isn't particularly useful due to the possibility of collisions. It's tied to the lifetime of profiles and does not persist through profile deletion or a factory reset. This is comparable to an app targeting the legacy storage model storing a 64-bit random value in the app-specific external storage directory. In the future, GrapheneOS will likely change this to be tied to the lifetime of app installations rather than profiles. An app could still track the identity of the profile through data you give it access to or via data another app chooses to share with them.- Edited
I use Windows 11 Education with Telemetry turned off, Security Baselines, some stuff from the restricted traffic baselines and some other group policies applied. For my linux usage I use WSL and a Secureblue VM. I monitored the outgoing traffic for about a month and privacy wise I'm okay with what is sent.
Is it possible to have a 6+ digit second factor PIN confirm automatically? I believe it's possible with a normal 6+ digit PIN, so is this functionality simply not implemented or can I just not find it?
- Edited
fid02 Thank you very much for this answer, I managed to get it working with a second device.
I also suspected that passkeys from other password managers are simply not supported, but wasn't sure if it's intended behaviour, a google issue or due to sandboxed play services. Hope this changes in the future.
Have a wonderful day.