Can I install my bank app on it yet?
I remember having problems with attestation in the past.
What about full application backups?
I’ve got a few offline apps, I’d like to transfer the data to/from. However, I thought grapheneOS needed the application developer to “approved” this backup/restore method - or you needed root (which invalidated attestation)… I don’t recall which it was (but I really miss titanium backup).
Wow, this is exactly what I was looking for. Thank you.
Original, I thought “hey, everything will work”… but then I started to look into the details. For example, Revolut, it works, then it doesn’t work (due to attestation), then works (after people complain).
I really need to ask myself, if this is the kind of experience I want with my daily driver. On the other hand, I know this is just Google strong arming me into their walled garden. Man, I really hate this dystopian future.
No, it doesn’t. The sandboxing ensures that the Google services have none of the broad access to the operating system they have on a normal Android. For example Google won’t get access to your location unless you explicitly give the permission.
This one also needed me to enable “exploit protection compatibility mode” for the app to get it to stop crashing immediately on launch, but it doesn’t complain about attestation or anything. I get right to the login screen. Seems fine from what I can see without a login!
I had to enable “exploit protection compatibility mode” for the app. Otherwise it just sits on the logo indefinitely. But after enabling that compatibility mode it launches fine, asked me for location permissions (which I denied), and I can get to where I enter User ID to login.
I had to enable “exploit protection compatibility mode” for the app to get it to stop crashing immediately on launch, but it doesn’t complain about attestation or anything. Seems fine from what I can see without a login!
And as a follow up question to this, are there any container apps to run those apps that won’t work in a way that they think they are running on stock android?
Depends on the bank. Graphene has support for seedvault backups, or you could use syncthing-fork to sync the data over. Or any one of those Foss airdrop clones
I also went Graphene, and it’s privacy for me too.
I really don’t want Google Play Services running, and GrapheneOS gives me that option. I have three profiles:
main - no Google Play Services, most apps are from F-Droid
work - Google Play Services, and only the apps I need for work
“google” - Google Play Services, and only apps I need occasionally (e.g. Google Watch/Wallet, Maps, etc)
I spend 99% of my time on main, and most of the rest in “work” (need it for MFA). My phone reboots every 4 hours, so Google Play eventually stops running in the background (tried more frequently, and it was annoying).
There are other Android ROMs, but GrapheneOS has really rapid security updates, perhaps faster than anywhere else. The other projects are good too, it’s just the first I tried and I’ve liked it so far.
I really should switch to Graphene
Can I install my bank app on it yet? I remember having problems with attestation in the past.
What about full application backups? I’ve got a few offline apps, I’d like to transfer the data to/from. However, I thought grapheneOS needed the application developer to “approved” this backup/restore method - or you needed root (which invalidated attestation)… I don’t recall which it was (but I really miss titanium backup).
here is a list of compatible banking apps, however the list is crowd sourced so trust but verify.
Wow, this is exactly what I was looking for. Thank you.
Original, I thought “hey, everything will work”… but then I started to look into the details. For example, Revolut, it works, then it doesn’t work (due to attestation), then works (after people complain).
I really need to ask myself, if this is the kind of experience I want with my daily driver. On the other hand, I know this is just Google strong arming me into their walled garden. Man, I really hate this dystopian future.
They have sandboxed Google services if you need it. But kind of defeats the purpose of Grpahene OS.
I have been on Calyx for a year now. Bank apps in my country totally works with microg.
No, it doesn’t. The sandboxing ensures that the Google services have none of the broad access to the operating system they have on a normal Android. For example Google won’t get access to your location unless you explicitly give the permission.
I assume Graphene won’t work with my employer’s MDM software. :/
my bank app is specificially listed as working but i would def check
Which banking app? I can try to install and launch it, tho I probably won’t ask for your login to test that, haha
Does Stanford Federal Credit Union launch?
This one also needed me to enable “exploit protection compatibility mode” for the app to get it to stop crashing immediately on launch, but it doesn’t complain about attestation or anything. I get right to the login screen. Seems fine from what I can see without a login!
We appreciate your community service.
You’re gonna get piled on with requests now.
…on that note, any chance you’d try the Servis Credit Union app?
Be careful about mentioning who you bank with on the internet, using an account that anyone can browse your comment history.
Fair, but good luck guessing my password
Can’t find that app, is it “Servus” instead?
It is indeed, whoops
I had to enable “exploit protection compatibility mode” for the app. Otherwise it just sits on the logo indefinitely. But after enabling that compatibility mode it launches fine, asked me for location permissions (which I denied), and I can get to where I enter User ID to login.
Seems fine from what I can see without a login!
Can you give RBC (royal bank of Canada) banking app a shot for me if you don’t mind?
I had to enable “exploit protection compatibility mode” for the app to get it to stop crashing immediately on launch, but it doesn’t complain about attestation or anything. Seems fine from what I can see without a login!
Hey thanks a lot! I appreciate that you took time out of your day to check for me :)
Welcome! Seems like a fairly low-effort way for me to help nudge folks towards GrapheneOS <3
You’re a nice person. Keep being you!
Just use the browser
And as a follow up question to this, are there any container apps to run those apps that won’t work in a way that they think they are running on stock android?
Depends on the bank. Graphene has support for seedvault backups, or you could use syncthing-fork to sync the data over. Or any one of those Foss airdrop clones
Nope, but you can use their web apps.
Not sure about backing up apps, never looked into it.
What’s making you choose Graphene?
I also went Graphene, and it’s privacy for me too.
I really don’t want Google Play Services running, and GrapheneOS gives me that option. I have three profiles:
I spend 99% of my time on main, and most of the rest in “work” (need it for MFA). My phone reboots every 4 hours, so Google Play eventually stops running in the background (tried more frequently, and it was annoying).
There are other Android ROMs, but GrapheneOS has really rapid security updates, perhaps faster than anywhere else. The other projects are good too, it’s just the first I tried and I’ve liked it so far.
Thank you for this answer. I’m interested in using something like this rather than the mainstream OSs.
Lots of reasons but mostly privacy and a boner for doing nerdy shit.
Privacy