Giters

Scrut1ny / GrapheneOS-Guide

A resource for users intent on optimizing their usage of this highly secure and privacy focused mobile operating system.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

anonymitygrapheneosguideprivacyfdroid

image-1313240240

I collaborated with Naomi Brockwell NBTV to craft a YouTube video accompanying this guide. The process involved significant dedication and effort, resulting in the creation of this video. Whether you stumbled upon it from the YouTube video, discovered it by chance, or were referred by a friend, your feedback is highly valued. Please don't hesitate to propose any additions or improvements to this guide. Whether it's links, configurations, apps, or any other suggestions, I welcome your input. Your recommendations will be thoroughly reviewed, and I'll consider their integration into this guide.

💵 Purchasing

  • 📱 Mobile Phone

    • Purchase a new Google Pixel with cash from a local store and avoid Verizon, as they lock the OEM.
      • Ensure the transaction remains anonymous to avoid linking the phone's IMEI to your identity.

  • 📶 Mobile Carrier

    • Buy a pre-paid Mint Mobile (T-Mobile) SIM card with cash from a local store.
      • Wire it up to a privacy.com card.
        • For $15/month, it provides unlimited* 4G/5G domestic data with relatively little attributable information on the account (e.g., no name, address, SSN, etc.)
    • Calyx hotspot for unlimited, unthrottled, anonymous connectivity.

  • 📳 Configuring Mobile Carrier

    • Use a free public Wi-Fi network far from your home to configure your recently acquired mobile carrier.

  • 📲 Mobile Accessories (optional)

🔓 Unlocking the OEM

  1. Remove physical SIM card
  2. Factory reset (Settings > System > Reset options > Erase all data (factory reset) ✅
  3. Setup Wi-Fi Connection (Settings > Network & internet > Internet)
  4. Settings > System > Dev > Allow OEM unlocking ✅

⬇️ Install Google USB Driver

  1. Download: Link
  2. Unzip "usb_driver_r13-windows.zip"
  3. WIN + R enter: devmgmt.msc
  4. Portable Devices > Google Pixel
  5. Right click device > Properties > Driver > Update Driver > Browse my computer for drivers > Browse > Select unzipped "usb_driver_r13-windows" file once located.

⬇️ Installation

Official Site > https://grapheneos.org

  • Web Install Guide > Link
  • CLI Install Guide > Link

⚙️ Settings

Network & internet

  • Settings > Network & internet > Internet > Carrier Settings ⚙️ > Allow 2G ❌
  • Settings > Network & internet > Internet > Select your WiFi ⚙️ > select pen icon > Advanced options > Privacy > Use per-connection randomized MAC (default) ✅
  • Settings > Network & internet > Private DNS > Private DNS provider hostname: dns.quad9.net ✅
  • Settings > Network & internet > Internet connectivity checks > Disabled ❌
    • IMPORTANT: Make sure to enable again for captive portals used by public wifi!

Apps

  • Settings > Apps > Default apps (Set your favorite default apps here) ✅

Battery

  • Settings > Battery > Battery Percentage ✅

Sound & vibration

  • Settings > Sound & vibration > Vibration & haptics ❌
  • Settings > Sound & vibration > Dial pad tones ❌
  • Settings > Sound & vibration > Screen locking sound ❌
  • Settings > Sound & vibration > Charging sounds and vibration ❌
  • Settings > Sound & vibration > Touch sounds ❌
  • Settings > Sound & vibration > Always show icon when in vibrate mode ❌

Display

  • Settings > Display > Adaptive Brightness ✅
  • Settings > Display > Auto-rotate screen ✅
  • Settings > Display > Lock Screen > Privacy > Show sensitive content only when unlocked ✅
  • Settings > Display > Lock Screen > Wake screen for notifications ❌
  • Settings > Display > Screen timeout > 1 minute ✅
  • Settings > Display > Dark Theme ✅
  • Settings > Display > Increase touch sensitivity ✅ (If you have screen protector)

Security

  • Settings > Security > Auto reboot > 12 Hours ✅
  • Settings > Security > Scramble PIN input layout ✅

Privacy

  • Settings > Privacy > Permission manager > Customize Everything! ✅
    • Use exodus-privacy to assess if an app has excessive trackers or questionable permissions.

System

  • Settings > System > Language & Input > on screen keyboard > GraphineOS Keyboard > Appearance & Layouts > Theme > Material Dark ✅

🛍️ Apps

  • FOSS Essential Apps

  • App Stores

    • F-Droid - The app store that respects freedom and privacy
    • accrescent - A novel Android app store focused on security, privacy, and usability
    • Aurora Store - An open-source alternative to Google Play Store with privacy and modern design

  • F-Droid Apps

    • Web Browser
      • Mull - Privacy oriented web browser (FF Based)
      • cromite - Cromite a Bromite fork with ad blocking and privacy enhancements; take back your browser!
    • Navigation
      • Organic Maps - Open-source, community-driven maps for travelers, tourists, cyclists & hikers
      • OsmAnd~ - Global Mobile Map Viewing & Navigation for Offline and Online OSM Maps
    • Weather
    • Onlne Video, Music, Streaming, Podcasts, etc
      • NewPipe - Lightweight YouTube frontend
      • LibreTube - An alternative frontend for YouTube, for Android.
      • ViMusic - Seamlessly stream music from YouTube Music
      • InnerTune - A Material 3 YouTube Music client for Android
      • Spotube - 🎧 Open source Spotify client that doesn't require Premium nor uses Electron! Available for both desktop & mobile!
      • Transistor - Transistor is an app for listening to radio stations over the internet.
      • AntennaPod - Easy-to-use, flexible and open-source podcast manager and player
      • Podverse - Podcast app with clips, video, livestreams, playlists, profiles, and cross-platform
    • Social Media
      • Squawker - An open-source anonymous Twitter/X client
      • Infinity for Reddit - A beautiful, feature-rich Reddit client.
      • Mastodon - Decentralized social network
      • Shitter - A lightweight Mastodon client focused on privacy and low data consumption
    • Offline Media
    • Messenger (Private, Secure, etc)
      • Brair - Secure Messaging, Anywhere
      • Jami - Audio & Video Calls / Chat Take Control of your Communication!
      • Session F-Droid - Encrypted private messenger
    • Email Service
    • VPNs
      • Mullvad VPN - Protect your online privacy with a fast, trustworthy, and easy-to-use VPN.
      • IVPN - Privacy focused VPN service with WireGuard
      • Calyx VPN - Free VPN Service offered by The Calyx Institute
      • ProtonVPN - Free Swiss VPN with advanced security and privacy features.
    • App Control & Container/Isolator
      • NetGuard - A simple way to block access to the internet per application
      • Insular - Isolate your Big Brother apps
    • Misc. Apps
      • PCAPdroid - No-root network monitor and traffic dump tool for Android devices
      • dvd - 📀 Download videos from anywhere (YT-DLP)
      • PrivacyBlur - Blur or pixelate faces or sensitive areas in pictures
      • KeePassDX - Secure and open source password manager compatible with KeePass files.
      • Lemuroid - All in one emulator on Android
      • Lawnchair - Pixel Launcher features plus customizability
      • Public IP - App and Widget allowing user to find its current public IP address
      • Catima - Catima, a Loyalty Card & Ticket Manager for Android

  • Aurora Apps

Spoofing (You CANNOT root GrapheneOS!)

System is bricked, boot looping, corrupted, or showing critical errors

  • Using this Guide you should be able to fix your problem. After you have successfully fixed any prior issues, next just install GrapheneOS again.

Other Awesome Guides

Personal Current Phone Layout

image

  • If you would like your system to look like mine, please check out these apps:

About

A resource for users intent on optimizing their usage of this highly secure and privacy focused mobile operating system.

anonymitygrapheneosguideprivacyfdroid