From my experience, its overall good. Its basically stock android, meaning no google smart features and apps by default, with more control over apps and google services. But for caution, some apps may break. You will have to mess around with the app settings to fix them. Also some apps will not work such as the google wallet app due to the OS not being acknowledged as official by google.
In short, its a more security focused OS that may require more involvement in configuration.
I switched to it a year ago and I like it. The biggest draw for me is it gives me back control and ownership over my phone. It gives you actual and thorough control over what apps can do on your phone including Google’s apps, which on other typical Android OS are being given all or most permissions with no ability for you to deny access to any of them.
To gain almost all the functionality of a regular Android OS you can install Google Play Services and run it sandboxed, which means it will only do what you allow it to do and access only what you will allow it to access, which for me is the bare minimum before things stop working too much for my tastes.
Besides Android auto for now, the only thing that won’t work for me on it is my banking app, probably because of all the security checks involved in it. But I just use the browser-based online service to do my banking operations instead.
Banking apps can usually be defeated by Magisk in Zygist mode, then you use the deny list to hide things from the app. Some might check with Google for security, which is much more difficult and maybe even impossible to circumvent, but in my experience these days they work fine.
Magisk also allows app spoofing, which may be something of a security risk, but using it to bypass things like banking app checks is one of the benefits. Personally, I like having root, and to me the benefits are worth the risk.
It may even be that GrapheneOS uses a little bit of Magisk’s type of functionality. At least, that’s how LineageOS4MicroG works - you need app spoofing to install MicroG, however this ROM comes with it preinstalled but disabled for anything else, so it closes the security hole. However, you probably can’t defeat Google’s SafetyNet with MicroG anymore.
Is Graphene OS good? Any downsides? I need to get a new phone soon.
From my experience, its overall good. Its basically stock android, meaning no google smart features and apps by default, with more control over apps and google services. But for caution, some apps may break. You will have to mess around with the app settings to fix them. Also some apps will not work such as the google wallet app due to the OS not being acknowledged as official by google.
In short, its a more security focused OS that may require more involvement in configuration.
is there any way to do NFC payments with grapheneos?
Google Wallet didn’t work last time I checked, but contactless payments worked perfectly well by setting my banking app as the payment app.
Not all banking apps work due to the system integrity checks they do. Support for your banking app can probably be confirmed here.
I switched to it a year ago and I like it. The biggest draw for me is it gives me back control and ownership over my phone. It gives you actual and thorough control over what apps can do on your phone including Google’s apps, which on other typical Android OS are being given all or most permissions with no ability for you to deny access to any of them.
To gain almost all the functionality of a regular Android OS you can install Google Play Services and run it sandboxed, which means it will only do what you allow it to do and access only what you will allow it to access, which for me is the bare minimum before things stop working too much for my tastes.
Besides Android auto for now, the only thing that won’t work for me on it is my banking app, probably because of all the security checks involved in it. But I just use the browser-based online service to do my banking operations instead.
I got my banking app working by going into App Info for it, and toggling this to on.
This is also what I use to get 3 banking apps working
Banking apps can usually be defeated by Magisk in Zygist mode, then you use the deny list to hide things from the app. Some might check with Google for security, which is much more difficult and maybe even impossible to circumvent, but in my experience these days they work fine.
Don’t you need to root to use Magisk? You can’t root in GrapheneOS
Magisk is how you get root.
Magisk also allows app spoofing, which may be something of a security risk, but using it to bypass things like banking app checks is one of the benefits. Personally, I like having root, and to me the benefits are worth the risk.
It may even be that GrapheneOS uses a little bit of Magisk’s type of functionality. At least, that’s how LineageOS4MicroG works - you need app spoofing to install MicroG, however this ROM comes with it preinstalled but disabled for anything else, so it closes the security hole. However, you probably can’t defeat Google’s SafetyNet with MicroG anymore.