Hi everyone
Writing this on my new (second hand) pixel with grapheneos. Have been watching this project for a few years and stoked to finally be here. I’m getting closer and closer to the online life I want all the time.
I have a few questions:
-
Sourcing apps - is it safer to use f-droid (in my case I like the neo-store) or obtainium?
-
For non open-source apps, Aurora or sandboxed google play?
-
Is it OK to use WiFi at my work? Or at the mall? What are the risks? I’ve got a VPN but using it prevents me from accessing my server via tailscale
-
WhatsApp - I’ve tried to set up whatsapp but I get stuck at retrieving the backup from google drive. I’m seeing conflicting views on weather or not this is possible. It’d be great but its a price I’m willing to pay if it means not using WhatsApp
-
Can any app be sandboxed?
-
What else should I know about operating the phone? I’m effectively an absolute beginner to grapheneos
-
My phone now won’t connect to the internet without the VPN, is this normal?
Any advice appreciated, thank you
7 - It’s in the Settings application of the phone. VPN > [Your VPN] > Block connections without VPN .
4 settings, apps, exploit protection compatibility
3 - I don’t do it without a VPN. Some places block VPN (happened to me in a hotel), in that case I don’t use Wi-Fi.
2 - While I personally prefer Aurora some banking apps are checking the installer referrer and don’t work if not originally installed with Google Play.
F-Droid is great.
Aurora is more effort than Google Play, but I find Aurora so much more honest about tracking technologies in each app.
Regarding sandboxing, I think so, but installing an app on GrapheneOS is already so much better than on any other operating system.
I just install apps normally and don’t give them any permission I don’t feel like they need.
If I realize why an app needs some permission, later - I can adjust the permissions and try again.
2: I have a separate user for closed source apps, and created a new Google account on the sandboxed google play store. Anonymous enough for me.
4 . I had the same problem; direct transfer didn’t work either, even with “exploit protection compatibility” enabled.
What worked for me was to copy the backup folder from the old (Android) phone to the new one (GrapheneOS), respecting the same directory structure:
Android/data/com.whatsapp
Welcome to this great OS!
4 - I found I had to give WhatsApp basically every permission it wanted to restore the backup, after restoring I could then revoke them again





