https://www.youtube.com/watch?v=IAoCfrqxIEg
www.youtube.com

This video demonstrates how to install apps on a Google Pixel running GrapheneOS, detailing a setup refined over three years. The presenter emphasizes starting users should use the standard Play Store before transitioning to a more complex app installation system for enhanced privacy and control. The process involves using multiple app sources, setting up user profiles for separation, and maintaining security through methods like Orbot and anonymous Google accounts.

Key Points

Setup Disclaimer

The presenter advises beginners to initially use the standard Play Store for easy app access and to adapt more smoothly before attempting the outlined complex setup.

User Profiles

After installing GrapheneOS, users operate under an owner profile and can create additional profiles to separate app usage, enhancing privacy.

Using Orbot

Orbot, a free proxy service, is installed to route all traffic over the Tor network, ensuring user anonymity when accessing the Play Store and downloading updates.

App Sources

The video outlines three primary sources for app installation: the default GrapheneOS app store, Crescent (an actively developed alternative app store), and Obtainium for open source apps. Each source plays a role in the app search process.

Creating Anonymous Google Accounts

For accessing the Google Play Store, the presenter suggests creating an anonymous account using temporary phone numbers to maintain privacy without linking back to personal identities.

Disabling Apps in Owner Profile

The installed apps are disabled in the owner profile to prevent accidental access, subsequently allowing users to install apps in a separate daily user profile where the apps are actually used.

Maintaining App Updates

Apps installed in the owner profile are updated across all user profiles, allowing for convenient management of applications without needing to update each profile separately.

Privacy Measures

The presenter discusses the importance of maintaining app permissions diligently and offers a solution for potential issues regarding the use of temporary phone numbers.

  • jetOPMAEnglish
    2·
    1 day ago

    TLDR:

    1. The owner account on the phone is only used for app stores, uses TorBot for all traffic.
    2. All apps are installed on the owner account, and immediately disabled, with network access denied.
    3. Apps are pushed to other accounts, like a daily driver, via settings in the owner account.
    4. All app updates must happen in the owner account.

    Very deliberate control of app store access, and updates, and permissions.

    This adds friction to using a phone, but it does allow for granular access of app stores.