I just bought a Pixel 8a and I'm planning to install GrapheneOS on it. Are there any other recommendations?
So today I finally took the plunge and bought a new Pixel 8a to install GrapheneOS on. It will be my new daily driver, replacing my current phone. It's getting delivered tomorrow, and I'd like to make sure I'm getting the full privacy/security benefits from the device. What other recommendations would you provide?
F-droid session installer, aurora store for google play apps, second profile or 3 for main non invasive apps, google apps, then tor privacy app usage on 3rd. Create backups of each on a flash drive use experimental app data feature in settings. Storage scopes for google app usages, deny most permissions in all profiles, use the camera and mic block toggles. Setup distress in the settings. Download wasted app on fdroid if you like it for extra precaution and settings. Use private messengers. FUTO makes good voice dictation, password storage bit warden its pretty seamless to use. Don't use fingerprint or face ID. Go through the settings and tweak as you need.
For me, it's the first time I've had a keyboard capable of doing dictation since I stopped using Google keyboard in 2019 when I started using lineage OS. Personally, I am very happy to have that feature back.
Yeah Heliboard with the swipelib is closest to gboard for me, better than Futo, however, Futo has a voice typing app also that is incredibly accurate, and punctuates near perfectly. So I use Heliboard with Futo Voice Typing.
Regarding profiles, having two is generally recommended - your main profile with no Google services, and a secondary profile only for apps that absolutely require Google Play Services. Personally, I just dump everything in one profile and deny nearly every permission to anything Google, and on top of the sandboxing that's enough of an improvement over stock Android that I don't bother with two profiles.
I'm glad there are other GOS users out there with only one profile and Play services. I tried out multiple profiles, and even though there might be benefits to it, it was just too inconvenient and inefficient for me. Hopefully Google doesn't steal all my device contents though lolz
One thing I wish I knew going in, apps installed via Aurora store (google play store front end), for example ProtonMail typically rely on google play services to correctly send push notifications unfortunately.
You can remedy this with a seperate profile that can run in the background with google play services and apps that you want notifications for if you take issue with running google software running on your main profile.
Other than that, I've actually found GrapheneOS on my pixel 8 to be a much better software experience than my previous S22 without any tampering at all, both privacy (obviously) and functionally.
Congrats and enjoy your new freedome phone, you won't ever look back!
I will add on top of all the other recommendations, in F-Droid settings, turn off all anti-features. If after doing that, an app you are looking for is not available, check what anti-feature it has for why it's not listed.
This seems really inconvinient, especially because the app page already shows the anti-features.
Anti features are also often not comparable, but they are presented that way. Relying on some random proprietary API owned by some random company is not the same as using Wikipedia or OSM.
Can do this or they natively list apps that have anti features on the app page as well as the search page under the app title. Whatever strikes your liking.
The suggestions people are making are good but I want to point out that GrapheneOS has good defaults so you don't need to do much except use your phone. If you don't have a particularly high threat model you shouldn't need to make any other considerations (beyond just what software you use on your phone, like if you use something like discord or whatever)