I now have two profiles on GrapheneOS. This is mainly to use Waze and my banking app. Everything else, so far, can be done with no problems on my secure Owner profile.
For those who are watching this later than Nov 2022. Cross profile notifications are available on graphene os now. Yay! No more using third party services for that.
That's probably one of the most useful features they've included. I also covered it in this video if anyone needs some more information on the feature - th-cam.com/video/WjrANjvrSzw/w-d-xo.html
I don't know why, but I'm extremely finicky on Liking videos. Your vids on graphene, and especially this very timely video earned the coveted Like and Subscribe. Seriously, outstanding work. Please keep it up and I look forward to more videos!
Woo! Thank you very much, I do my best to keep my videos only as long as they need to be yet detailed enough that they are still useful. Glad to hear they earned a like and sub. Thanks again!
@@sideofburritos you just uploaded one! :) I believe this kind of video is good to bring more users to grapheneOs. For example, performance. How apps runs on graphene? The camera. I keep seen updates for their camera, but how it compares to stock Google camera? App replacements etc. One other suggestion is to cover their updates…I see many twitter threads with new os versions. Maybe review the changes? How that improved (or not) the system. Thanks again!
@@sideofburritos i am new to degoogling and grapheneos But from what I understand if I follow your process I will be able to use maps as usual And apps like youtube and others I have to run in the browser? Or can I downliad the app as apk and install?
Just want to say I appreciate you so much! ^^ Really love your channel and the new banner is great hahaha right to the point. It's taken me ages but finally getting the Pixel 6 Pro this week and will go through the de-google process >:D I hope I don't fuck anything up lol
You're very welcome :D! Glad you like the new banner, I figured it summed up my content well. Congrats on getting the 6 Pro! Thankfully the process is pretty forgiving, so you should be safe.
Another excellent, quick and to the point guide to GrapheneOS, much obliged!👍 Maybe one suggestion which would probably make your vids a tiny bit longer but it would add another benefit to them... if you could little bit slow down when tapping on new windows so it's easier to memorize steps which should be taken. I think it would make them more accessible to wider public and people who are not as skilled configuration of their AndroidOS. GrapheneOS is so much needed in today's world and deserves respect and support (donation)! Adding cross user notifications would be an excellent enhancement👏
You have quickly become THE guy on GrapheneOS help videos! Thanks for all your labors. Can you answer this... I have a number of purchased apps on the Play Store. I installed it in order to verify those purchases (didn't want to risk getting banned by using Aurora Store with my login). Here's the question: do you know if I can uninstall Play Store now that I've installed all my paid apps and start using Aurora Store for everything else?
You're very welcome! So you *could* uninstall Play Store, but those paid apps won't get any updates. I haven't tested to personally confirm that statement, but I'm 99.9% sure that's what would happen. Those paid apps won't be available on Aurora if you use one of the anonymous accounts. Depending on how frequently you use those paid apps you could put them on a separate User profile and only use them there where you have play services installed.
Glad you covered this aspect - although I still find it somewhat confusing. Is there any real advantage to installing GFS and / or any of the other apps if they are still able to identify the device by the IMEI number? Less tracking if the G-Apps are on a different profile but ultimately, Google can identify the device and the fact that different profiles are present on the device will only, in. a sense, provide Google with additional 'intel' on the user (who is likely tracked somewhere else and by other means). Any thoughts?
As far as hardware identifiers go, installing those services does not expose your IMEI/serial to google. On GrapheneOS Google services are just "apps" and as of Android 10, apps can not access non-resettable hardware identifiers. So while you do give up some privacy installing those services, no hardware identifiers are exposed. To me, GrapheneOS + Google Services is still significantly better than the stock OS. This link has some solid details on the topic - grapheneos.org/faq#hardware-identifiers
@@sideofburritos Yes, you are right to point that out and I was 'aware' of the limitations imposed on Google services - I guess, I find it hard to believe that Google isn't harvesting some data somewhere along the line. As you say, GrapheneOS is still better than the stock OS.
@@sideofburritos Been trying to find more info on this...but what exactly is being sent to google when using GSF or GPS with certain apps? Obviously IP, but using a solid VPN has that covered. Maps sends location, but what else is being sent that can compromise privacy?
@@SamBskateBuilt speedometer perhaps, I do know that they peep at that to know when your moving around in tandem with GPS, no idea if the 2 are connected
On another video you stated you had a problem with Google pixel 6 with Blu tooth in your car. Has that problem been resolved? What Google pixel phone do you recommend and why?
It has, I no longer have any issues with bluetooth at this time. Hmm, so size wise and overall form factor I like the Pixel 5a. For "future proofness" and better hardware security - Pixel 6. My main issue with the 6 is that it's just a very large phone. I'm hoping the Pixel 6a is a bit smaller like the 5a, if it is, then I would suggest that.
The big question is how to use the Google Camera fake API in one profile (main) for only the google camera to work, but in the same time in another profile installing the whole sandboxed Google API's for bank apps and yada yada... I even tried to disable them in the google profile but it didnt help :\ ..
Hmm, now that is a great question. Unfortunately you're stuck with having to use Google services if you want to use the camera due to the ID being reused. That is disappointing.
Hi mate, thank you for your time and to be clear in your video also for not english native speaker like me. I wanted to ask you if the google play services are needed in order to receive the notifications of apps like Signal, Telegram and WA on Graphene os. Could you please clarify? Thank you in advance.
Is this still relevant today? I’m frustrated with my new P7 and GOS. I see prominent TH-cam security privacy advocates preaching to not install Google play but go to FDroid ? Get installs directly from code repository? Seems counter intuitive and sketchy to me. Is there any point in using a different profile if all apps are installed from Google play store? What security is to be gained if all is sandboxed?
The only thing I don't like about the different profiles thing is that all my contacts do not come across. So if I'm using maps on my phone and I get a call the numbers won't show up. So I could just export/import the numbers but this will not do. I frequently add new contacts and sometimes delete old ones. This would be so annoying to do this over 2 or 3 profiles. Anyone know if syncing contacts between profiles is possible? What's the risks of just installing framework? Ive found apps that I wouldn't think work actually work and simple apps like classified type apps don't.
So i tried to install maps without enabling sandboxing (aurorastore) and it worked, would it be more private to enable this setting, keep my current configuration, or do something else? For clarification i want to be able to use some google applications without having all of them shoved down my throat. Thanks
So if a person wants the fancy dancy google camera, having a totally separate profile that has google play services enabled seems like the way to go about it then? The stock cam is not the greatest, and I am exploring options. Nice Videos btw, you now have a new sub!
If the *only* thing you want is google camera to work, I would suggest installing gcam services provider (github.com/lukaspieper/Gcam-Services-Provider also available on F-Droid). Instead of installing all the google services, it simulates the exact services needed for the camera to function. This is what I use on my personal device and I have it installed on my owner profile. I also made a video on it a while back if it helps - th-cam.com/video/Pi8RwvnJiRw/w-d-xo.html Glad to hear, and thanks for the sub!
I just flashed my Pixel 5 - running android 13 - the menu above you described above does not exist! IOt is not bundled with on the Graphene OS web install gave me. so,,,,,,, how do I get Google services Framework? I need to install, so i can install and eSim!! And your previous instruction are no longer valid
I'm looking to switch to a more private Android fork but I'm trying to find a middle ground between better privacy but still compatible apps and working notifications. Would you say GrapheneOS + Sandboxed Google Play Services or CalyxOS + MicroG? I'm not so naive as to think I'll be achieving 100% anonymity with either but what in your opinion is the best balance between privacy, compatibility and security?
Hmm, good question. My primary choice would be GrapheneOS + Google Services, if you find that doesn't suite your needs then I would go to CalyxOS. Both are great OS's, but my personal preference is GrapheneOS.
help. i am trying to use the messages app for sms texting and i keep getting an error: "google play services error. please complete action required by Messages". when i click that error popup, another popup comes up that says: "this app won't work properly unless you allow google play services' request to access the following: files and media. to continue, open settings, then permissions, and allow all listed items". so i click the settings button and the settings page for google play services comes up. i click permissions and i give it every permission, and it still doesn't work. the error still keeps coming up when i try to use the Messages app.
@@sideofburritos Offline means, less chance of MITM (Basically an offline install means more privacy depending on the threat models) Plus, it's nice to know anyway
Great video and one question, if I may. I tried to use this GrapheneOS app ("Apps") on a LineageOS installation (my device isn't Pixel), trying to install google services on a separate profile, manually. I was getting notifications that GSF crashed constantly. Does any of you having any clue if I 'm missing any dependencies from grapheneos?
Hmm, no, I don't have a clue. On an unrelated note, I would suggest against using LineageOS. From a security perspective, the inability to re-lock the bootloader is a big issue since you're lacking full verified boot.
Is it possible to use Google Pay using these services? I'm pretty much moving away from tap pay, but it does come in handy now and again. Would be cool if you can use it.
Do you have Aurora store installed on your main owner profile? There's only "one version" installed across the entire OS. It's likely you're trying to install an older version on your new profile which is conflicting with the version on your main owner profile. It's also possible the one on your owner profile was installed from F-Droid, and the new one you're trying to install from the aurora website. Try this instead: Settings -> System -> Multiple Users -> *select the new user profile you created -> Install available apps -> and then select aurora store. This feature allows you to "push" any apps on your main owner profile to the new user. It doesn't copy any of the user data as that's separate across user profiles, it only pushes the app.
What permissions did you allow when you opened the camera after installing Google Play Services? I'm trying to figure out for privacy reasons. Thank you.
So I watched your video 3 times and followed it step by step! One note:. When you are in guest mode you can't install aurora store. I don't know how to allow unknown services. Please advise
Hi Phil, I think the issue is that you created a guest profile instead of a user profile. When you're in the "Multiple users" setting, make sure to select "Add user" instead of "Add guest". Once you do that you should be able to install any apps you need. Hope that helps!
@@sideofburritos So I added new user named it "Private" and attempted to install Fdroid. It looked good at first but when I went back to see the app nothing was there. I tried aurora store would not install. I can install Google services and play store only in private user section. I was hoping not to have to install play store. Just wanted to give you the update. If you have another solution please share it. Thanks Phil
I have a similar issue. I created a new user but can't install f-droid. I get a message that says "App not installed as package appears to be invalid".
very helpfull video...can you pls advice me if i can create a separete profile but install the google services in owner profile (that run on boot of phone) and when i need switch to separete profile clean without google and keep all benefits of separation you showed?
I don't have the "Apps" app in my app drawer and can't seem to find is anywhere to download. I have a Pixel 2XL with android version 11. What can I do?
I found it on github but when I try to install it, I get the error: "there was a problem parsing the package". USB debugging is enabled and unknown sources is enabled for vanadium. What am I missing?
You aren't able to select which app in a User Profile has access to Play Services. The best way I know of to control which apps have access to Play Services, is to use separate profiles. One with Play Services, one without.
When I create a separate profile I am unable to install f-droid or aurora store APK. I get a message that says " App not installed as package appears to be invalid." Any idea how to resolve this? Everything works fine on the main profile
You have to make sure you're installing the most recent versions of the apps on the second profile. F-Droid hosts an old version on their webiste which is why you can't install it. For Aurora Store, make sure to update it to the lastest version on your owner profile, then try to install it again on your second user profile. It's being blocked due to Android rollback protection
Hello, you can go to auroraoss.com in the phone browser on the profile you want to install it from. Once you load that site you can download and install the apk.
@@sideofburritos I get a notification that i can not install apps in the guest mode. This is how guest profile should work right? I have to make another Owner profile to be able to install apps. Am i correct?
@@kostasLeib On the profile screen there's an option to "add guest" and "add user" right below that. It sounds like you selected "add guest" which blocks apps. Use "add user" and you should be good to go.
5-10 years ago the process was much more involved, so I think phone that had it preinstalled would have made more sense back then. The installation process is so simple now that I don't see any reason to buy a phone preloaded with it. I think for a majority of people, purchasing a Pixel and installing it themselves is the best option.
I haven't delved into GrapheneOS yet but that is a hell of a nice solution. Have you tried if that Sandboxed profile can feed a car Android Auto setup?
It is a great solution, they really nailed it with their implementation. Sadly, it doesn't work with Android Auto. I've tried multiple times in different configurations and the car just doesn't read it. I think something might be missing in GrapheneOS, so Android Auto doesn't pick it up.
@@sideofburritos All good, my current setup works well enough aniway : I have a spare cellphone that I leave in my car that pretty much only have Spotify and Google Maps installed, with no internet connection. I download Maps and music over Wi-Fi and it work well enough (I dont get traffic status but honestly I cant really think of a time where I thought to myself "thank god for traffic optimized routes"
@@sideofburritos I have android auto available to me with the new head unit but I've never (wanted to) connected a phone to it. Just me but I prefer my stand alone GPS unit and yes, an MP3 player (I like the more robust FLAC files for music). Call me old school 😁
The main issue still is with the camera and banking apps. If I just install the Sandbox Google services and just install all the apps I need then I pretty much won't have any benefit, right? or?
No. Besides installing them on a separate user profile so only select apps can access them, you also get the benefits of how they're installed on GrapheneOS. "Google Play receives absolutely no special access or privileges on GrapheneOS as opposed to bypassing the app sandbox and receiving a massive amount of highly privileged access. Instead, the compatibility layer teaches it how to work within the full app sandbox. It also isn't used as a backend for the OS services as it would be elsewhere since GrapheneOS doesn't use Google Play even when it's installed." Source: grapheneos.org/features#sandboxed-google-play
Does it defeat the purpose of GOS if I just use one owner profile and install play services on it? I've been using it for a few weeks switching between the owner and a play services profile.
No, I don't think so. Being a sandboxed service on GrapheneOS it's treated like a normal app which is a huge advantage. It's forced to respect the permission controls like any other app installed on your device. Compared to a stock OS install that has Google services baked in at a system level.
It depends. Apps can't access hardware identifiers, but there is other data they could access and build a persona on what it collected. It all depends on how you use play services, do you sign in, do you use a VPN, etc. This link has details on what information apps can and can't collect (hardware/non-hardware identifiers) - grapheneos.org/faq#hardware-identifiers
Hey! So my main phone is a 6a. I've just installed graphene on my 5a to mess around with it and try to understand it. My MAIN issue is I do door dash, spark, Uber, etc for work. I'm under the impression I can create a "work" profile with Google play services and it should be fine? I'm still figuring it all out and waiting until I get a grasp on things before installing on my 6a but if you have any insight id appreciate it. You think it'll work? Not work?
You could create a separate User Profile and install the Google services there. I cover work vs. User profile in this video - th-cam.com/video/20C0FD7mGDY/w-d-xo.html. The unofficial stat is that with Sandbox Play Services 99% of apps work. I just downloaded the 3 you mentioned and all opened successfully (I don't have accounts, so I can't log in to test further). I would imagine you won't have any issues. My suggestion for you would be to create a new User Profile, install the 3 Google Services, and you should be all set to test them out. The nice thing with User Profiles is that you can create one for testing, and then just delete it later. They're very flexible.
Hi, guys I need some help, I downloaded GPS on a second profile which worked ... decided I needed it on my main now I can't get it to work I uninstalled, reinstalled tried reloading the apps nothing works the apps are saying GPS is not installed when it is
@@chutuk111 I fixed my issue. You need to install the play store as well. You don't have to use it, it just need to be there because some apps will need it EDIT : Just realized your problem is a bit different sorry, you can give it a shot tho
To me it is unfortunately not clear how the GrapheneOS Google Services are different to GS on a stock device? Do GrapheneOS GS communicate with Google servers? If I would assume there are properly sandboxed, why an extra profile then? What`s the difference to MicroG? -> Sorry for so many questions.
On stock android OS the services have special permissions. On GrapheneOS they're just simply sandboxed apps. That's why the permission toggles exist for them as apps, vs stock android. They do communicate with Google servers otherwise they wouldn't function as expected (firebase notifications etc) The extra profile let's you separate which apps have access to the sandboxed services. When they're installed any apps on that profile will be able to use them. Creating a separate profile let's you only put apps on that profile that you want to use the sandboxed play services. I have one app that won't run without Play services, so I have that on a separate profile with play services installed. On my main profile, I don't use play services. This is a great write up that goes into more detail on the topic - grapheneos.org/features#sandboxed-google-play
@@sideofburritos thanks, how do i get the wipe option when i wanna shut the phopne off i wanna be able to wipe it quickly in case if someone wants my phone. how can i add that? been looking everywhere.
I know this isn't a scientific answer...but I would say it's "pretty good". It's around the same as my 5a. I can't give a better answer than that because it really depends on what specific things you do. If you spend most of your time video chatting the battery life will be much lower. If you use it sparingly, then it will be considerably longer.
Keep getting this error code when trying to get Play store installed. (DF-DFERH-01) I've tried the steps according to googles forum to fix it but no luck. Anyone Help me?
Do you have GCAM services provider installed by chance? If you do, you'll need to uninstall it first. I would also try removing then reinstalling Google Services Framework, Google Play Services, and Google Play Store.
people forget that google can identify you even without google services and framework ! anonymity is in the head and graphene os, gives you the opportunity, to use that anonymity to the maximum
It's funnu how google needs our device's location for GPS when it's actually not required. With the proper app (non-Google app), you can use GPS offline and in airplane mode without anyone having the phone's location.
Excellent Video. You have a great way of explaining things, all the needed info is there in one sentence but you keep going with the task at hand that the "mission" is completet, while one is still capable of listening. A lot of explaining videos make me angry not yours.
Do you install Google Services on your device? If you do, owner profile or separate profile?
trying to do seperate profiles but the stress is high :x
@@oldaccount7463 Or not.
I have the google services and other dubious apps locked in Shelter.
I now have two profiles on GrapheneOS. This is mainly to use Waze and my banking app. Everything else, so far, can be done with no problems on my secure Owner profile.
@@necroblog what is shelter? (New to Graphene)
For those who are watching this later than Nov 2022. Cross profile notifications are available on graphene os now. Yay! No more using third party services for that.
That's probably one of the most useful features they've included. I also covered it in this video if anyone needs some more information on the feature - th-cam.com/video/WjrANjvrSzw/w-d-xo.html
I don't know why, but I'm extremely finicky on Liking videos. Your vids on graphene, and especially this very timely video earned the coveted Like and Subscribe. Seriously, outstanding work. Please keep it up and I look forward to more videos!
Woo! Thank you very much, I do my best to keep my videos only as long as they need to be yet detailed enough that they are still useful. Glad to hear they earned a like and sub. Thanks again!
Our source for quality GOS content! Great vid!
Thanks :D
Another great video! Thanks! I love your videos about graphene, calyx etc. You could do more of these “real life use”, like the road trip.
Thanks! I have a few ideas for some of those type of videos, any suggestions?
@@sideofburritos you just uploaded one! :) I believe this kind of video is good to bring more users to grapheneOs. For example, performance. How apps runs on graphene? The camera. I keep seen updates for their camera, but how it compares to stock Google camera? App replacements etc. One other suggestion is to cover their updates…I see many twitter threads with new os versions. Maybe review the changes? How that improved (or not) the system. Thanks again!
@@sideofburritos i am new to degoogling and grapheneos
But from what I understand if I follow your process I will be able to use maps as usual
And apps like youtube and others I have to run in the browser? Or can I downliad the app as apk and install?
@@wanderer397 so i do graphene os and dowload google services but i dont give them previlages?
Just want to say I appreciate you so much! ^^ Really love your channel and the new banner is great hahaha right to the point.
It's taken me ages but finally getting the Pixel 6 Pro this week and will go through the de-google process >:D
I hope I don't fuck anything up lol
You're very welcome :D! Glad you like the new banner, I figured it summed up my content well. Congrats on getting the 6 Pro! Thankfully the process is pretty forgiving, so you should be safe.
09/23: the apps mentioned at 03:00 don't appear after the latest installation of Graphene OS.
Another excellent, quick and to the point guide to GrapheneOS, much obliged!👍 Maybe one suggestion which would probably make your vids a tiny bit longer but it would add another benefit to them... if you could little bit slow down when tapping on new windows so it's easier to memorize steps which should be taken. I think it would make them more accessible to wider public and people who are not as skilled configuration of their AndroidOS.
GrapheneOS is so much needed in today's world and deserves respect and support (donation)! Adding cross user notifications would be an excellent enhancement👏
I'm envious of the System76 laptop that was on your desk when your camera opened. Many thanks for the tutorial!
You're very welcome!
You have quickly become THE guy on GrapheneOS help videos! Thanks for all your labors. Can you answer this... I have a number of purchased apps on the Play Store. I installed it in order to verify those purchases (didn't want to risk getting banned by using Aurora Store with my login). Here's the question: do you know if I can uninstall Play Store now that I've installed all my paid apps and start using Aurora Store for everything else?
You're very welcome!
So you *could* uninstall Play Store, but those paid apps won't get any updates. I haven't tested to personally confirm that statement, but I'm 99.9% sure that's what would happen. Those paid apps won't be available on Aurora if you use one of the anonymous accounts. Depending on how frequently you use those paid apps you could put them on a separate User profile and only use them there where you have play services installed.
Nice. Just what I needed
Glad to hear!
OMG thank you - was following the old video and it done my head in...as it has all changed. I had this error too..Legend.
I also recommend disabling network permissions unless you want to sign in and use it as your Google account's authenticator.
Aurora store is great for looking up dependencies of other apps, in case it doesn't work right.
Glad you covered this aspect - although I still find it somewhat confusing. Is there any real advantage to installing GFS and / or any of the other apps if they are still able to identify the device by the IMEI number? Less tracking if the G-Apps are on a different profile but ultimately, Google can identify the device and the fact that different profiles are present on the device will only, in. a sense, provide Google with additional 'intel' on the user (who is likely tracked somewhere else and by other means). Any thoughts?
As far as hardware identifiers go, installing those services does not expose your IMEI/serial to google. On GrapheneOS Google services are just "apps" and as of Android 10, apps can not access non-resettable hardware identifiers. So while you do give up some privacy installing those services, no hardware identifiers are exposed.
To me, GrapheneOS + Google Services is still significantly better than the stock OS.
This link has some solid details on the topic - grapheneos.org/faq#hardware-identifiers
@@sideofburritos Yes, you are right to point that out and I was 'aware' of the limitations imposed on Google services - I guess, I find it hard to believe that Google isn't harvesting some data somewhere along the line. As you say, GrapheneOS is still better than the stock OS.
@@sideofburritos Been trying to find more info on this...but what exactly is being sent to google when using GSF or GPS with certain apps? Obviously IP, but using a solid VPN has that covered. Maps sends location, but what else is being sent that can compromise privacy?
@@SamBskateBuilt speedometer perhaps, I do know that they peep at that to know when your moving around in tandem with GPS, no idea if the 2 are connected
Great video!
Love what you are doing here
Glad you enjoyed it!
Sweet, thx for the update!
This is a sweet os and getting better all the time..
On another video you stated you had a problem with Google pixel 6 with Blu tooth in your car. Has that problem been resolved? What Google pixel phone do you recommend and why?
It has, I no longer have any issues with bluetooth at this time.
Hmm, so size wise and overall form factor I like the Pixel 5a. For "future proofness" and better hardware security - Pixel 6. My main issue with the 6 is that it's just a very large phone. I'm hoping the Pixel 6a is a bit smaller like the 5a, if it is, then I would suggest that.
The big question is how to use the Google Camera fake API in one profile (main) for only the google camera to work, but in the same time in another profile installing the whole sandboxed Google API's for bank apps and yada yada...
I even tried to disable them in the google profile but it didnt help :\ ..
Hmm, now that is a great question. Unfortunately you're stuck with having to use Google services if you want to use the camera due to the ID being reused. That is disappointing.
Hi mate, thank you for your time and to be clear in your video also for not english native speaker like me. I wanted to ask you if the google play services are needed in order to receive the notifications of apps like Signal, Telegram and WA on Graphene os. Could you please clarify? Thank you in advance.
You're welcome! I've only used signal out of that list, and it does not require google play services for notification.
Is this still relevant today?
I’m frustrated with my new P7 and GOS. I see prominent TH-cam security privacy advocates preaching to not install Google play but go to FDroid ? Get installs directly from code repository? Seems counter intuitive and sketchy to me.
Is there any point in using a different profile if all apps are installed from Google play store?
What security is to be gained if all is sandboxed?
The only thing I don't like about the different profiles thing is that all my contacts do not come across. So if I'm using maps on my phone and I get a call the numbers won't show up. So I could just export/import the numbers but this will not do. I frequently add new contacts and sometimes delete old ones. This would be so annoying to do this over 2 or 3 profiles. Anyone know if syncing contacts between profiles is possible? What's the risks of just installing framework? Ive found apps that I wouldn't think work actually work and simple apps like classified type apps don't.
So i tried to install maps without enabling sandboxing (aurorastore) and it worked, would it be more private to enable this setting, keep my current configuration, or do something else?
For clarification i want to be able to use some google applications without having all of them shoved down my throat. Thanks
Just use Shelter to separate the profiles without having to switch between the profiles every time.
Hi there, that would work but each has it's pros and cons. I made a video recently on the topic - th-cam.com/video/20C0FD7mGDY/w-d-xo.html
Ty Sir 🍻
So if a person wants the fancy dancy google camera, having a totally separate profile that has google play services enabled seems like the way to go about it then? The stock cam is not the greatest, and I am exploring options. Nice Videos btw, you now have a new sub!
If the *only* thing you want is google camera to work, I would suggest installing gcam services provider (github.com/lukaspieper/Gcam-Services-Provider also available on F-Droid). Instead of installing all the google services, it simulates the exact services needed for the camera to function. This is what I use on my personal device and I have it installed on my owner profile. I also made a video on it a while back if it helps - th-cam.com/video/Pi8RwvnJiRw/w-d-xo.html
Glad to hear, and thanks for the sub!
I just flashed my Pixel 5 - running android 13 - the menu above you described above does not exist! IOt is not bundled with on the Graphene OS web install gave me. so,,,,,,, how do I get Google services Framework? I need to install, so i can install and eSim!! And your previous instruction are no longer valid
I'm looking to switch to a more private Android fork but I'm trying to find a middle ground between better privacy but still compatible apps and working notifications. Would you say GrapheneOS + Sandboxed Google Play Services or CalyxOS + MicroG? I'm not so naive as to think I'll be achieving 100% anonymity with either but what in your opinion is the best balance between privacy, compatibility and security?
Hmm, good question. My primary choice would be GrapheneOS + Google Services, if you find that doesn't suite your needs then I would go to CalyxOS. Both are great OS's, but my personal preference is GrapheneOS.
help. i am trying to use the messages app for sms texting and i keep getting an error: "google play services error. please complete action required by Messages". when i click that error popup, another popup comes up that says: "this app won't work properly unless you allow google play services' request to access the following: files and media. to continue, open settings, then permissions, and allow all listed items". so i click the settings button and the settings page for google play services comes up. i click permissions and i give it every permission, and it still doesn't work. the error still keeps coming up when i try to use the Messages app.
Is that the stock messages app you're referring to? Are you using it on your main owner profile or a separate user profile?
Will you make a offline-version of Graphene_OS installation??
(via the CLI way)
Hmm, I wasn't planning on it as I figured most people would just want to use the web version. Do you think it would be beneficial to have one?
@@sideofburritos Offline means, less chance of MITM
(Basically an offline install means more privacy depending on the threat models)
Plus, it's nice to know anyway
Earned my sub. Good solid content.
Question: have you any insight into how to install a custom boot animation on graphene?
Thanks for the sub! No, that's not something I've messed with.
What do I do if I don't see Google play services or Any of that stuff in the app?
Great video and one question, if I may. I tried to use this GrapheneOS app ("Apps") on a LineageOS installation (my device isn't Pixel), trying to install google services on a separate profile, manually. I was getting notifications that GSF crashed constantly. Does any of you having any clue if I 'm missing any dependencies from grapheneos?
Hmm, no, I don't have a clue. On an unrelated note, I would suggest against using LineageOS. From a security perspective, the inability to re-lock the bootloader is a big issue since you're lacking full verified boot.
Is it possible to use Google Pay using these services? I'm pretty much moving away from tap pay, but it does come in handy now and again. Would be cool if you can use it.
Cannot install the Aurora Store to my new profile get the message "App not installed as package conflicts with an existing package". Any thoughts?
Do you have Aurora store installed on your main owner profile? There's only "one version" installed across the entire OS. It's likely you're trying to install an older version on your new profile which is conflicting with the version on your main owner profile. It's also possible the one on your owner profile was installed from F-Droid, and the new one you're trying to install from the aurora website.
Try this instead:
Settings -> System -> Multiple Users -> *select the new user profile you created -> Install available apps -> and then select aurora store. This feature allows you to "push" any apps on your main owner profile to the new user. It doesn't copy any of the user data as that's separate across user profiles, it only pushes the app.
What permissions did you allow when you opened the camera after installing Google Play Services? I'm trying to figure out for privacy reasons. Thank you.
I allowed access to photos, so the camera could save photos and denied everything else like location. It should work fine with only that enabled.
@@sideofburritosthanks
For some reason, I installed both Play Services and Services framework and GCam still doesn't work
Hmm, I would try uninstalling gcam, rebooting the phone, then reinstalling it.
@@sideofburritos thanks for the response, I just fixed it by removing and then reinstalling Play Services again.
Anyone know of Android Auto is at all available to work by installing Google Framework and Services?
I tested this a few days ago with different methods, and I wasn't able to get it to work.
@@sideofburritos Appreciate you looking into this. 👍
@@sideofburritos perhaps with wireless mode? I use a dongle from Motorola not sure if it could work with GrapheneOS.
So I watched your video 3 times and followed it step by step! One note:. When you are in guest mode you can't install aurora store. I don't know how to allow unknown services. Please advise
Hi Phil, I think the issue is that you created a guest profile instead of a user profile. When you're in the "Multiple users" setting, make sure to select "Add user" instead of "Add guest". Once you do that you should be able to install any apps you need. Hope that helps!
@@sideofburritos So I added new user named it "Private" and attempted to install Fdroid. It looked good at first but when I went back to see the app nothing was there. I tried aurora store would not install. I can install Google services and play store only in private user section. I was hoping not to have to install play store. Just wanted to give you the update. If you have another solution please share it. Thanks Phil
I have a similar issue. I created a new user but can't install f-droid. I get a message that says "App not installed as package appears to be invalid".
very helpfull video...can you pls advice me if i can create a separete profile but install the google services in owner profile (that run on boot of phone) and when i need switch to separete profile clean without google and keep all benefits of separation you showed?
Correct! You would have the same benefits I described, but reversed.
@@sideofburritos thx
I don't have the "Apps" app in my app drawer and can't seem to find is anywhere to download. I have a Pixel 2XL with android version 11. What can I do?
I found it on github but when I try to install it, I get the error: "there was a problem parsing the package". USB debugging is enabled and unknown sources is enabled for vanadium. What am I missing?
how can I check/select which apps are allow to use Play Services on my main profile?
You aren't able to select which app in a User Profile has access to Play Services. The best way I know of to control which apps have access to Play Services, is to use separate profiles. One with Play Services, one without.
When I create a separate profile I am unable to install f-droid or aurora store APK. I get a message that says " App not installed as package appears to be invalid." Any idea how to resolve this? Everything works fine on the main profile
You have to make sure you're installing the most recent versions of the apps on the second profile. F-Droid hosts an old version on their webiste which is why you can't install it. For Aurora Store, make sure to update it to the lastest version on your owner profile, then try to install it again on your second user profile. It's being blocked due to Android rollback protection
Helped a lot!
Hey. Any ideas on how i can install Aurora Store in Guest profile?
Hello, you can go to auroraoss.com in the phone browser on the profile you want to install it from. Once you load that site you can download and install the apk.
@@sideofburritos I get a notification that i can not install apps in the guest mode. This is how guest profile should work right? I have to make another Owner profile to be able to install apps. Am i correct?
@@kostasLeib On the profile screen there's an option to "add guest" and "add user" right below that. It sounds like you selected "add guest" which blocks apps. Use "add user" and you should be good to go.
Do you have any thoughts, pros, cons on buying a graphene loaded phone such as Nitro? Or something more hardened like Ano-phone?
5-10 years ago the process was much more involved, so I think phone that had it preinstalled would have made more sense back then. The installation process is so simple now that I don't see any reason to buy a phone preloaded with it. I think for a majority of people, purchasing a Pixel and installing it themselves is the best option.
I haven't delved into GrapheneOS yet but that is a hell of a nice solution. Have you tried if that Sandboxed profile can feed a car Android Auto setup?
It is a great solution, they really nailed it with their implementation. Sadly, it doesn't work with Android Auto. I've tried multiple times in different configurations and the car just doesn't read it. I think something might be missing in GrapheneOS, so Android Auto doesn't pick it up.
@@sideofburritos All good, my current setup works well enough aniway : I have a spare cellphone that I leave in my car that pretty much only have Spotify and Google Maps installed, with no internet connection.
I download Maps and music over Wi-Fi and it work well enough (I dont get traffic status but honestly I cant really think of a time where I thought to myself "thank god for traffic optimized routes"
@@sideofburritos I have android auto available to me with the new head unit but I've never (wanted to) connected a phone to it. Just me but I prefer my stand alone GPS unit and yes, an MP3 player (I like the more robust FLAC files for music). Call me old school 😁
The main issue still is with the camera and banking apps. If I just install the Sandbox Google services and just install all the apps I need then I pretty much won't have any benefit, right? or?
No. Besides installing them on a separate user profile so only select apps can access them, you also get the benefits of how they're installed on GrapheneOS.
"Google Play receives absolutely no special access or privileges on GrapheneOS as opposed to bypassing the app sandbox and receiving a massive amount of highly privileged access. Instead, the compatibility layer teaches it how to work within the full app sandbox. It also isn't used as a backend for the OS services as it would be elsewhere since GrapheneOS doesn't use Google Play even when it's installed."
Source: grapheneos.org/features#sandboxed-google-play
Does it defeat the purpose of GOS if I just use one owner profile and install play services on it? I've been using it for a few weeks switching between the owner and a play services profile.
No, I don't think so. Being a sandboxed service on GrapheneOS it's treated like a normal app which is a huge advantage. It's forced to respect the permission controls like any other app installed on your device. Compared to a stock OS install that has Google services baked in at a system level.
Thank you very much
If you installed google play services across 3-4 different user accounts would google see this as one phone identity or 3-4 separate phone identities?
And will google be able to tell if the identities are associated in any way?
It depends. Apps can't access hardware identifiers, but there is other data they could access and build a persona on what it collected. It all depends on how you use play services, do you sign in, do you use a VPN, etc.
This link has details on what information apps can and can't collect (hardware/non-hardware identifiers) - grapheneos.org/faq#hardware-identifiers
I installed pixel cam without google servces and it works, odd?From aurora store too!
Hey, Thanks, I really owe you one...
I have a Pixel 7 w/GrapheneOS installed. Is there a tracker such as Samsung Smart tag that is compatable ?
Hey! So my main phone is a 6a. I've just installed graphene on my 5a to mess around with it and try to understand it. My MAIN issue is I do door dash, spark, Uber, etc for work. I'm under the impression I can create a "work" profile with Google play services and it should be fine? I'm still figuring it all out and waiting until I get a grasp on things before installing on my 6a but if you have any insight id appreciate it. You think it'll work? Not work?
You could create a separate User Profile and install the Google services there. I cover work vs. User profile in this video - th-cam.com/video/20C0FD7mGDY/w-d-xo.html. The unofficial stat is that with Sandbox Play Services 99% of apps work. I just downloaded the 3 you mentioned and all opened successfully (I don't have accounts, so I can't log in to test further). I would imagine you won't have any issues.
My suggestion for you would be to create a new User Profile, install the 3 Google Services, and you should be all set to test them out. The nice thing with User Profiles is that you can create one for testing, and then just delete it later. They're very flexible.
can one do the same except this time with MicroG instead of Google_Play_Services ?
Possibly? Never tried it. If you wanted to use MicroG I would suggest using CalyxOS instead.
Thanks a lot!
Hi, guys I need some help, I downloaded GPS on a second profile which worked ... decided I needed it on my main now I can't get it to work I uninstalled, reinstalled tried reloading the apps nothing works the apps are saying GPS is not installed when it is
Did you find any solution? I have GPS on my work profile using shelter and it is not detected by the apps installed there
@@anonazerty165 not yet I guess I will try to reinstall
@@chutuk111 I fixed my issue. You need to install the play store as well. You don't have to use it, it just need to be there because some apps will need it EDIT : Just realized your problem is a bit different sorry, you can give it a shot tho
@@anonazerty165 YES ! So far SO GOOD
@Chris, exactly the solution!
To me it is unfortunately not clear how the GrapheneOS Google Services are different to GS on a stock device? Do GrapheneOS GS communicate with Google servers?
If I would assume there are properly sandboxed, why an extra profile then? What`s the difference to MicroG?
-> Sorry for so many questions.
On stock android OS the services have special permissions. On GrapheneOS they're just simply sandboxed apps. That's why the permission toggles exist for them as apps, vs stock android. They do communicate with Google servers otherwise they wouldn't function as expected (firebase notifications etc)
The extra profile let's you separate which apps have access to the sandboxed services. When they're installed any apps on that profile will be able to use them. Creating a separate profile let's you only put apps on that profile that you want to use the sandboxed play services. I have one app that won't run without Play services, so I have that on a separate profile with play services installed. On my main profile, I don't use play services.
This is a great write up that goes into more detail on the topic - grapheneos.org/features#sandboxed-google-play
@@sideofburritos Thank you for the detailed answer. I appreciate it!
mine doesnt even have aurora store, why?
You need to install Aurora if you want it, it doesn't come with it.
auroraoss.com/
@@sideofburritos thanks, how do i get the wipe option when i wanna shut the phopne off i wanna be able to wipe it quickly in case if someone wants my phone. how can i add that? been looking everywhere.
@@Peywan You can checkout the duress pin - th-cam.com/video/Q7oM0IB-IiM/w-d-xo.html
docs - grapheneos.org/features#duress
for what need profiles?
I made this video that goes into some details regarding that question - th-cam.com/video/20C0FD7mGDY/w-d-xo.html
Does google pay (wallet) work?
How is battery life with Graphene on your Pixel 6?
I know this isn't a scientific answer...but I would say it's "pretty good". It's around the same as my 5a. I can't give a better answer than that because it really depends on what specific things you do. If you spend most of your time video chatting the battery life will be much lower. If you use it sparingly, then it will be considerably longer.
Keep getting this error code when trying to get Play store installed. (DF-DFERH-01) I've tried the steps according to googles forum to fix it but no luck. Anyone Help me?
Do you have GCAM services provider installed by chance? If you do, you'll need to uninstall it first. I would also try removing then reinstalling Google Services Framework, Google Play Services, and Google Play Store.
@@sideofburritos I fixed it, Thank you. I ended up just reinstalling Graphene on it.
@@MrIisAmazing Nice! Glad you got it working.
thank you
people forget that google can identify you even without google services and framework ! anonymity is in the head and graphene os, gives you the opportunity, to use that anonymity to the maximum
It's funnu how google needs our device's location for GPS when it's actually not required. With the proper app (non-Google app), you can use GPS offline and in airplane mode without anyone having the phone's location.
it is safe ?
I may not have been able to figure out where you live, but I am creepy
Excellent Video. You have a great way of explaining things, all the needed info is there in one sentence but you keep going with the task at hand that the "mission" is completet, while one is still capable of listening. A lot of explaining videos make me angry not yours.
Thank you so much for that comment! I'm glad to hear it came across that way, that's my goal with my videos.
cant it support whatsapp telegram fb and bigo chat