#GrapheneOS duress password in action. This is on a sacrificial Pixel 6a. I did it a few times, and let me tell you, DO NOT screw around with this. You get no second chance. It's gone. Instantly. And it's beautiful.
@final [GrapheneOS] π±ποΈβπ¨οΈ @sommerfeld
Login to reply
Replies (41)
I absolutely love the black gloves, the touchscreen pen and black background. Cipherpunk af!
But you can just flash it again right?
Does graphene come from AOSP or Cyanogen?
There was a app on fdriod that would wipe your phone with a password I can't remember the name of it though,π€
ASOP. They have made a bunch of contributions to the project too.
AOSP
Dang it... AOSP.
It was called Duress. This is supposed to be way more failproof and fast since it's implented at the OS level.
Nice! Thanks for recording that
Can you keep a backup easily somewhere?
Thank you for posting this footage here on Nostr!
Here is footage of the brand new #GrapheneOS duress password in action from a user, here on Nostr.
#GrapheneOS duress password in action. This is on a sacrificial Pixel 6a. I did it a few times, and let me tell you, DO NOT screw around with this. You get no second chance. It's gone. Instantly. And it's beautiful.
@final [GrapheneOS] π±ποΈβπ¨οΈ @sommerfeld
View quoted note →
BTW we never recommended those apps that used device admin APIs for resetting the device since you could deactivate them and interrupt the erasure. XRY had tutorial videos explaining how to bypass Duress and others by holding the buttons that would boot into Fastboot mode. Law Enforcement knew for long time. We also had criminal sellers using our work unlawfully and bundling those apps trying to lie, sell it and say whatever they sold was better than GrapheneOS at extortionate prices.
Duress feature took as long as it did because we needed a unique way to wipe the device without reboot, that couldn't be interrupted and was also as fast as possible. We had our own wipe-without-reboot then Google designed one for future Android after our reports so GrapheneOS backported that as part of the infrastructure for the Duress feature.
Hopefully those apps are redundant for GrapheneOS users now.
After the wipe it will boot to recovery as it can't access any data and then reset OS. After that it boots into the GrapheneOS setup wizard.
To flash to another OS or stock OS, make sure to enable OEM unlocking on the fresh GrapheneOS install after the duress happens.
Awesome feature 

Thought I'd keep the doxxing down to a dull roar. π
No problem. Thanks for building it for us.
I back up to a couple of USB sticks. That works well enough to get back from something like this. It'd be inconvenient, but better than giving them everything on your device.
No biggie. It was fun to blow the phone up a few times for science.
Cool. Very cool.
Best solution: Just write this pin on the back of your graphene mobile. π«‘
The encryption keys are deleted, yes the data is still written on the device but if the keys are shredded there is no way to read that data.
Interesting π€
Followed π
Itβs interestingβ¦
Iβll have to think more deeply about ever using this though
My threat model probably doesn't include this, but I'd fire it up around border checkpoints regardless.
better to have it and not need it than to need it and not have it
Fuck yussss. GrapheOS has a duress PIN feature that nukes the phone from orbit.
#GrapheneOS duress password in action. This is on a sacrificial Pixel 6a. I did it a few times, and let me tell you, DO NOT screw around with this. You get no second chance. It's gone. Instantly. And it's beautiful.
@final [GrapheneOS] π±ποΈβπ¨οΈ @sommerfeld
View quoted note →
Kill it with π₯
how do I set this up? I travel to the USA for work occasionally so I need this.
Settings > Security > Duress Password
You'll set a numeric pin and a text password. Entering either will wipe the phone.
Right. OS fires right back up like a new install. The device is fine.
OS will erase specific data to make the device unable to decrypt the OS, the device will fail to boot, then boot into recovery mode and the OS will reset like you installed GrapheneOS for the first time afterwards.
Thatβs badass. Maybe itβs time to switch my old (unused) Pixel 6 Pro from lineage to graphene
I've been daily driving GOS for years now. I'd make the switch if you've already got the Pixel.
Didnt know graphene had this feature.
Yep, gotta keep the backup current if you use that feature, though. There's no "are you sure" prompt. π
No second chances, thats scary.
π
Authenticator code