- cross-posted to:
- privacy@lemmy.world
- grapheneos@lemmy.ml
- cross-posted to:
- privacy@lemmy.world
- grapheneos@lemmy.ml
GrapheneOS provides users with the ability to set a duress PIN/Password that will irreversibly wipe the device (along with any installed eSIMs) once entered anywhere where the device credentials are requested (on the lockscreen, along with any such prompt in the OS).
The wipe does not require a reboot and cannot be interrupted. It can be set up at Settings > Security > Duress Password in the owner profile. Both a duress PIN and password will need to be set to account for different profiles that may have different unlock methods.
Note that if the duress PIN/Password is the same as the actual unlock method, the actual unlock method always takes precedence, and therefore no wipe will occur.
Wonder if this say a big “WIPING…” and shows a blank profile then.
Because it would be much more useful if this would erase real profile and then quickly switch to some fake profile looking real.
It doesn’t say anything. It shuts the device down almost instantly, and simulnateously wipes the encryption keys from the secure element, ensuring that the data stored on the SSD can’t be decrypted.