ivoarch / GrapheneOS-Setup

Settings and apps I use on Pixel 6 Pro with GrapheneOS .

GrapheneOS-Setup Guide✍🏻

📝 Complete install Guide

• https://grapheneos.org/install/

📝 Practices that I personally try to follow in my setup

• Secure device with strong password.
• Keep devices up to date to ensure I recieve the latest security patches.
• Encrypt sensitive data.
• Do not plug my device into unknown ports.
• Never leave my device unattended.
• Check the legitimacy of the application before installation.
  • verify the name of developers and their actual existence .
  • reading the description of the application and its permissions.
  • reading user reviews & privacy guides.
• Reduce the number of apps .

👥 Profiles

• (Owner #)
• Password protected ✅
• Google Services ✅
• Push Services ✅

Enable "Push services"

You need to install all three apps: Google Services Framework, Google Play Services, and Google Play from GrapheneOS Apps Store .

Important install them before other apps (Proton Mail, Signal etc...) so notifications are "registered" correctly.

⚙️ Settings

• Settings > Network & internet > Internet > Select your WiFi gear icon > select pen icon > Advanced options > Privacy > Use per-connection randomized MAC (default) ✅
• Settings > Network & internet > Internet > LTE connection from your carrier > ⚙️ Allow 2G ❌
• Settings > Network & internet > Internet > Network preferences > Turn Off Wi-Fi automatically (15 seconds if no network connected)
• Settings > Network & internet > Internet > Network preferences > Notify for public networks ❌
• Settings > Network & internet > Internet > VPN > Proton VPN > ⚙️ Always-on VPN ✅
• Settings > Network & internet > Internet > VPN > Proton VPN > ⚙️ Block connections without VPN ✅
• Settings > Connected devices > Bluetooth timeout ✅ (15 seconds if no devices connected)
• Settings > Connected devices > Connection preferences > Printing ❌
• Settings > Apps > SEE ALL X APPS > Customize everything! ✅
• Settings > Notifications > App settings > Disable ❌ notifications for any apps you do not necessarily need it .
• Settings > Battery > Battery Percentage ✅
• Settings > Sound & vibration > Do Not Disturb > Schedules > Sleeping ✅ use a specified custom time to time start 22:00 end 07:00
• Settings > Sound & vibration > Dial pad tones ❌
• Settings > Sound & vibration > Screen locking sound ❌
• Settings > Sound & vibration > Charging sounds and vibration ❌
• Settings > Sound & vibration > Touch sounds ❌
• Settings > Sound & vibration > Always show icon when in vibration mode ✅
• Settings > Display > Adaptive Brightness ✅
• Settings > Display > Auto-rotate screen ❌
• Settings > Display > Lock Screen > Privacy > Show sensitive content only when unlocked ✅
• Settings > Display > Lock Screen > Wake screen for notifications ❌
• Settings > Display > Lock Screen > Lift to check phone ❌
• Settings > Display > Dark Theme ✅
• Settings > Display > Night Light ✅
  • Don’t use sunset to sunrise (uses device location data) use a specified custom time to time start 22:00 end 07:00
• Settings > Display > Screen saver ❌
• Settings > Accessibility > Color and motion > Color correction > Use color correction ✅ select "Grayscale"
• Settings > Accessibility > Color and motion > Color correction > Colour correction shortcut ✅
• Settings > Accessibility > Accessibility shortcuts > Accessibility button > Location > Navigation bar ✅
• Settings > Security > Fingerprint - Tap Fingerprint + PIN and follow the prompts
• Settings > Security > Screen lock ⚙️ > Lock after screen timeout ✅ (5 seconds)
• Settings > Security > Auto reboot > 24 Hours ✅
• Settings > Security > USB Accessories > Deny new USB peripherals ❌
• Settings > Security > Enable native code debugging ❌
• Settings > Security > PIN scrambling > Scramble PIN ✅
• Settings > Security > Screen lock camera acces ❌
• Settings > Security > More security settings > SIM card lock - Lock SIM card ✅
• Settings > Safety & emergency > Wireless emergency alerts - toogle ❌ for operator and presidential
• Settings > Privacy > Permission manager > Customize Everything! ✅
• Settings > Passwords and accounts > Auto-fill service > Bitwarden ✅
• Settings > System > Language & Input > on screen keyboard > GraphineOS Keyboard > Appearance & Layouts > Theme > Material Dark ✅
• Settings > System > Languages & input > Languages - Add English (UK), Spanish (Spain), Български (Bulgaria)
• Settings > System > Languages & input > On-screen keyboard > Preferences > Auto-capitalisation ❌
• Settings > System > Languages & input > On-screen keyboard > Preferences > Sound on keypress ❌
• Settings > System > Languages & input > On-screen keyboard > Apparience & Layouts > Theme > Material Dark ✅
• Settings > System > Languages & input > On-screen keyboard > Text correction > Auto-correction ❌
• Settings > System > Languages & input > On-screen keyboard > Text correction > Show correction sugguestions ❌
• Settings > System > Languages & input > On-screen keyboard > Text correction > Next-word sugguestions ❌
• Settings > System > Languages & input > Spell checker ❌
• Settings > System > Gestures > Quickly open camera ❌
• Settings > System > Gestures > System navigation > 3-button navigation ✅
• Settings > System > Gestures > System navigation > 3-button navigation ⚙️ Hold home for Assistant ❌
• Settings > System > Gestures > Tab to check phone ❌
• Settings > System > Gestures > Lift to check phone ❌
• Settings > System > Date & time - Toggle Use locale default ❌ (to allow the 24 hour time format to be used)
• Settings > About Phone > Device Name > Set "generic name"

🛍️ App stores

• [Apps](Default play store of GrapheneOS)
• F-Droid 🌍 - installable catalogue of FOSS (Free and Open Source Software) applications for the Android platform.
• Google Play Store

Note: F-Droid is NOT recommended by PrivacyGuide!

F-Droid repository I use:

Collabora office

https://www.collaboraoffice.com/downloads/fdroid/repo/?fingerprint=573258C84E149B5F4D9299E7434B2B69A8410372921D4AE586BA91EC767892CC

Guardian Project

https://guardianproject.info/fdroid/repo/

NewPipe Upstream

https://archive.newpipe.net/fdroid/repo/?fingerprint=E2402C78F9B97C6C89E97DB914A2751FDA1D02FE2039CC0897A462BDB57E7501

IzzyOnDroid

https://apt.izzysoft.de/fdroid/repo?fingerprint=3BF0D6ABFEAE2F401707B6D966BE743BF0EEE49C2561B9BA39073711F628937A

📦 Apps

• Web Browser
  • Default Browser of GrapheneOS
• Camera
  • Default camera app of GrapheneOS
• Photo and video gallery
  • Default gallery app of GrapheneOS
• File Manager
  • Default file manager of GrapheneOS
• Password Manager
  • Proton Pass 🇨🇭 EU
• 2FA Authenticator App
  • Aegis 🌍
  • Proton Pass 🇨🇭 EU
• Email Service/Client/Contacts/Calendar
  • Proton, Proton Mail, Proton Calendar 🇨🇭 EU
  • K-Mail 🇺🇸 US
• Anti-spam email protection
  • Simple Login 🇫🇷 🇨🇭 EU
• Encrypted E2EE cloud storage
  • Proton Drive 🇨🇭 EU
• Notes
  • Notesnook 🇵🇰 Pakistan
• YouTube frontend
  • NewPipe 🌍
• Video Player/Music player
  • VLC Media Player 🇫🇷 EU
• Secure Messaging
  • Signal 🇺🇸 US
• VPN
  • Proton VPN 🇨🇭 EU
• Private Browsing
  • Tor browser 🇺🇸 US
• File Encryption
  • OpenKeychain 🇩🇪 EU
• Rss/Feed reader
  • Feeder
• Editor
  • Editor
• Office Suite
  • Collabora Office 🇬🇧 UK
• PDF Reader
  • Default pdf reader of GrapheneOS)
• Shoping
  • https://digitalgoods.proxysto.re/ 🇩🇪 - (onion) - Buy coupons for privacy-friendly services with Monero or Bitcoin...
  • https://shop.proxysto.re/ 🇩🇪 - Get hardware, books, privacy gadgets and physical voucher cards for Mullvad VPN.
  • https://shopinbit.com/ 🇲🇨 - Europes biggest Bitcoin Store, with over 300,000 products.

⚙️ App Preferences

Camera

• Settings menu
  • General
  • Gyroscope suggestion ✅
  • Camera sounds ❌

Vanadium

• Settings
  • Search engine - Add StartPage 🇳🇱 as a default search engine in Vanadium .
• Passwords
  • Save Passwords ❌
  • Auto Sign-in ❌
• Payment methods
  • Save and fill paymend methods ❌
• Addresses and more
  • Save and fill addresses ❌
• Privacy and security
  • Auto-complete searches and URLs ❌
  • Acces paymend methods ❌
  • Close tabs on exit ✅
  • Open external links in incognito ✅
• Notifications
  • All Vanadium notifications ❌
• Homepage
  • ❌
• Downloads
  • Ask where to save files ✅

Tor browser

• Settings ⚙️
  • Config bridge - Use a Bridge ✅
  • obfs4 ✅

The GrapheneOS home screen after setup

Screenshot of my phone as of 08-03-2023

Accessories

TODO

• Webcam cover
• Upscreen privacy screen
• Pixel 6 pro protective case
• A Hardware Security Key - Yubikey

Note! To work is needed Sandboxed Google Play to be installed , how to setup here https://discuss.grapheneos.org/ .

• Output Faraday Folio Wallet or Faraday Sleeves for Phones

Additional Resources

GOS Official channel

• https://grapheneos.org
• https://grapheneos.org/articles
• https://discuss.grapheneos.org