I have not any prior experience with installing custom ROMs, but after trying it out (and getting stuck, and googling and finding answers) I successfully did it. Below is my home screen if anybody is curious:
I use OpenBoard for my keyboard. Unfortunately I am still dependent on Play Store since some of the apps I need can only be found there. Sometimes it feels meaningless committing to this whole thing because I’m not perfectly private; then I think this is better than using a regular iPhone or Android phone.
So far I’m liking it. I am naturally inclined to feel hesitant about using this as my main phone and plugging in a SIM since it’s custom, but I’m slowly making the transition.
Feel free to share any beginners advice or your own experience using GOS for the first time. Cheers!
OpenBoard is no longer maintained. Heliboard is a good alternative.
I think Google Play on Graphene is a good compromise, since at least it does not have root access. Unfortunately it is very crippling to completely avoid Google on Android.
That being said, I heard others are using work profiles to isolate all apps using Google Play from their more private apps. I’m not doing that, but work profiles are nice for … well work apps.
Thanks for the heads-up!
As someone who has a profile only for Whatsapp (used to also be Instagram), a profile for banking & finances, a profile for some stuff that needs play services, and a profile for most other stuff (main profile)…don’t use profiles unless you’re only creating one more at the most, and you’re absolutely certain there’s no need to share information between the profiles.
Graphene has had a long-standing bug from upstream AOSP, if I recall correctly, where it’ll always ask for your pin when changing profiles, and only sometimes will it allow you to use your fingerprint or alternative methods to get into your profiles. I almost never get the fingerprint option for my main profile, and have to tap back from the pin input on other profiles to get the option to use fingerprint, and not always. They do sometimes push something that loosely resembles a fix, but it’ll go back to not working after another update.
Regarding communicating between profiles, that’s hard to pull off. The curveball of having to send screenshots from banking apps, say, confirming transactions, it’s made a lot worse with profiles. I’m currently relying on my nextcloud instance to upload screenshots from finances, then downloading those screenshots from nextcloud into my WhatsApp profile, just to send a proof of transfer to someone. I’m definitely not keeping my phone like this for much longer.
All else considered, however, I’m not going back to a ROM that doesn’t respect me as the owner of my device. I’m happy to have switched to graphene and I am here to stay.
Thank you for sharing this. Honestly, right now, I simply don’t feel a need to use profiles for my apps. I understand some people claim I probably should considering I use both FOSS and Google apps, but I’m just getting started with this whole privacy thing and I don’t feel like rushing. Using only one profile probably isn’t the absolute worst thing you could do, eh?
I was wondering about that. Seems like 90% of the time it flashes the finger print reader then fails and goes back to pin. Also 75% of the time can’t read my fingerprint reader when just unlocking but that’s not a grapheneos issue… :(
I use Gboard with network permissions toggled off
I’m using a work profile for Google Play. It was surprisingly easy to setup and there are few guides around. But basically you install Shelter, then clone Apps to the work profile. Open up Apps on the work profile and install google play services normally.
Openboard updated for me recently. When did they stop maintaining it?
https://github.com/openboard-team/openboard
Last commit is two years ago. I’d recommend checking what you have installed. A quick search on GPlay finds what appears to be a clone that may or may not leak user data.
version 1.4.5
org.dslul.openboard.inputmethod.latin versionCode 19
targetSdk 31 minSdk 19
Installed: May 8, 2024; 3:17 PM Updated: May 8, 2024; 3:17 PM
Is this an AHH SHIT moment or I’m good? Lol
1.4.5 is the latest—and last—OpenBoard version, released 8/8/22 per app on F-Droid.
Did you fresh install it? Your log makes it look like you just installed it.
Yes I forgot I did. My phone bugged out one day about it. I don’t know why. Whats a good FLOSS alternative?
Heliboard is recently restarted sucessor
Futo is another option, I am not sure if it is Foss Lois rossmann backs it though
I am not sure if it is Foss
It is not, just source-available:
https://gitlab.futo.org/keyboard/latinime/-/blob/master/LICENSE.md
I like FlorisBoard
So I don’t want to tell you to panic but I can’t find anything about “dslul” or their version of openboard. The questions I have are as follows:
- How did you acquire this apk? (F-Droid, play store, obtainium, regular download?)
- Do you have hypatia installed? If not, can you install it and run a device scan to see if there’s any known malicious blobs on your device?
- Please take a look at heliboard. I know its weird to tell people they’re safer going with the most popular options, but legitimately we’re a pack animal. We do better when we look out for each other and this may be a case where it’s best to go to the version of this project that has the most eyes on it
So I don’t want to tell you to panic but I can’t find anything about “dslul” or their version of openboard.
It’s the app id from F-droid, so I would assume it is legit: https://f-droid.org/packages/org.dslul.openboard.inputmethod.latin/
Interesting! I assume then that dslul was the original developer. Weird I wasn’t able to turn up anything at all… Well… Not that weird given that internet search is broken
I use heliboard now downloaded today and deleted open board. I acquired openboard from Fdroid. Both times. I’ve never heard of hapatia. I will check it out momentarily.
I found a separate profile with google play was too much of a pain in the ass unfortunatly.
Unfortunately it is very crippling to completely avoid Google on Android.
Tbh if you don’t do mobile gaming, I think this is entirely doable. I say this as someone who uses Aurora Store for about 3 or 4 odd apps. I could live without them on my phone, but I just choose not to for the convenience of having a mobile client for some proprietary services I use. And I don’t have Google Play services at all.
To install apps from the Play Store you could maybe look at Aurora Store?
You can use the aurora store for most of your play store need’s.
Should be all, its simply a frontend. I have never seen an app be “missing” so to say.
I was referring to features, like adding money to your account. Not that they are needed in aurora.
Some apps are not available in my Google store due to geoblocking. Can aurora circumvent this? Or is it a front end of the “local” google play store?
A reputable VPN can block this. I’m not sure if the store can solely. I don’t believe so. If your blocked for any reason you need a good VPN. ****
You are correct, re-loading the aurora store after shifting my vpn to the target country (and anonymous login) seems to change the aurora storefront too :)
Nah, I prefer F-droid wherever I can. The mentioning when an app has anti-features is so helpful.
But Aurora is a great second option.
Yeah I use play store because I have to have some stuff furnished from play store for work but aurora store is a great way to acquire those apps you do need to get through life but that aren’t open source
vouch for aurora store being awesome
Every step you take towards a more private digital life is essential. I mean you have to start somewhere right? And the phone is in my opinion the biggest privacy thread out there. I am not on GrapheneOS but I’m considering switching soon.
I switched over a year ago and have no regrets. It does everything I want (including android auto now) and gives me at least a little but more privacy than a stock android image.
The more people who use it the more impetus there is to further develop it.
Give it a go! Its a great.
Aurora store is also pretty cool. You can download from there without a google account.
I just keep Play store installed with all permissions disabled, including network, and use Aurora store instead.
What is the main difference between using Play Store and Aurora store (logged in with your Google account)?
Aurora store has a cleaner interface with no ads and can be used without a google account.
I’m more curious about the privacy aspect of using Aurora over Play, especially considering since I will be logged into my G account.
When starting Aurora, you can choose between an anonymous account or your own. You can still use the anonymous option even if you are logged in to other services with google. If you go logged on anyways, I guess Google will not know your every tap with Aurora? I would think logged in, google play store and aurora would be comparable (not private).
Do you know if it’s safe to download banking apps from third party stores (in this case Aurora)?
It does download from google (servers), so it is safe enough
I have heard Aurora is more insecure and you can risk getting your Google account blacklisted or banned using it. Do you have any experience with this or know how common it is?
I do not know on a technical level.
Just dont use your personal g acc (obviously), and its fine.
Excuse my ignorance, but why not use your own G account?
By not using your own g account I meant not using account that is assigned to your identity or account that you use for official things.
Unless you have some purchases on there and you want to use these, but you shouldnt use your own account for that in the first place.
Aurora is a foss wrapper with fewer anti-features like ads. You could trust the client more ig if you’re using Aurora. I use F-Droid for most things and then Aurora for like 3 apps I’m not willing to give up and have no foss alternatives. I mostly just use Aurora out of principle for the apps I can’t get from F-Droid, but also I guess out of a lack of trust for Google (which I suppose is related to the principle of not using proprietary software anyway)
Even if apps you use depend on play store one of the things you can do on GrapheneOS is temporarily disable it and only turn it back on when apps refuse to run, another option is just keeping those apps in a separate work profile.
all android phones can temporarily disable an app until you turn it back on.
No, that only applies to (some, not all) system apps. GrapheneOS allows this for all (including user-installed apps): https://grapheneos.org/features#user-installed-apps-can-be-disabled
adb shell pm disable-user PACKAGE_NAMEworked for me with Signal on a stock pixel
Sure you can do it through adb, but Graphene exposes this option in the settings. They also recommend against enabling developer settings and using adb for security reasons.
But you said “no” before… I was just showing that it is indeed possible with non-system apps.
Yeah you’re right, I didn’t think of adb while writing that comment. It’s not possible through the settings is what I meant.
yes also including uaer apps: for example I can disable whatsapp by putting it in deep sleep and disabling its allowed network for extra measures, then it wont ring, wont update store version, wont recive calls, nor messages all while I’m online watching youtube for 2 hrs, then I can enable allow mock location and once online I’ll appear in brussel. btw I all non-rooted Androids can but Apple Users cant do any of that with their phones
Not all of them can disable google play service apps
I would argue you shouldn’t be using those apps in the first place since they all contain proprietary blobs (yes that includes Signal, see Molly-FOSS for a non-blobbed fork).
Absolutely, my suggestion was just for folks who have apps that still require play services, not everyone can avoid it, but you can minimize usage if you do need them.
Molly also includes other useful features like database encryption and UnifiedPush support.
Yes but for me it is a non-starter for legal reasons because screenshots do not work with fingerprint lock turned on. I don’t understand why the user cannot choose to enable this or not like other apps can (including Signal).
Not google services
Check out Heliboard (also on F-Droid) and follow the instructions to enable gesture typing. I also suggest Futo for on-device voice to text.
What specific apps are you using that you can’t deal going away from? Other than some social media or gamr or something. Even then it seems like there are replacements a lot of the time
Sometimes it feels meaningless committing to this whole thing because I’m not perfectly private
every small change matters
Exactly. I don’t even think of myself as having escaped surveillance capitalism. I’ve made it less lucrative though. All that data they’re mining? I’ve done a little bit of work to make sure the mines are tapped out. I’m gonna keep working to convince others that there’s value in doing the same. Its all part of telling these greedy shitheads we won’t accept their global destruction anymore
Aurora store and F-droid will be your besties, you don’t need play store unless you have purchased something.
I suggest Droid-ify over the F-Droid store for ease of use, but both work fine
I personally like the F-droid app way better. It is pretty polished and has the benefit of being first party
The latest f-droid release has been causing me headaches and I’ve switched (for the time being) to droid-ify. Which also has some headaches but no show stoppers. Of the two, I can definitely say I prefer f-droid. I hope this helps someone find what they want in an app installing app
You don’t need Play Store if you’ve purchased something. I had to use a paid app for a few years and installed it through Aurora. You can install paid apps on Aurora if you log into the google account you bought it on.
Thanks for the heads up.
I like neo store
deleted by creator
Automatic updates were added about six months ago. https://gitlab.com/AuroraOSS/AuroraStore/-/issues/719
They’ve been working well enough for me.
deleted by creator
Is it really a massive inconvenience? I would hardly even call it a minor inconvenience. I get a notification maybe twice per week that there are updates pending, and I just accept them in bulk. Your life must be absolutely perfect and ridiculously easy if that simple infrequent action can be classified as a massive inconvenience.
There are much more annoying things when de-googling and using graphene OS than this IMO. This hardly even registers as annoying. Not being able to use my government 2FA app or NFC payments, now that is massive inconvenience.
