Post #4104096

2026-07-26 04:17 UTC

We've published an overview of how we protect against data extraction from locked devices with the recently improved secure element rate limiting, locked device auto-reboot, strong passphrases, 2nd factor fingerprint PIN, stronger exploit protections and more: https://discuss.grapheneos.org/d/40700-grapheneos-protections-against-data-extraction-from-locked-devices

Replies (4)

@GrapheneOS@grapheneos.social 2026-07-26 13:44

An edit has been made to the post to add the following information: > The duress PIN will also wipe the device when entered as a 2nd factor PIN for fingerprint unlock, but not a SIM PIN.

Open ##4113217
@libreovergratis@mastodon.social 2026-07-26 14:07

@GrapheneOS@grapheneos.social Just to be clear, is USB physically disconnected during both BFU and AFU locked states if set to "Charging only when locked"? This is something I've always wondered.

Open ##4206565
@csolisr@hub.azkware.net 2026-07-26 20:21

Are there plans to implement a dual profile depending on the pin inserted, similar to Veracrypt's hidden volumes? veracrypt.io/en/Hidden%20Volum…

Open ##4208985
@wod0bow@mastodon.social 2026-07-26 20:26

@GrapheneOS@grapheneos.social How about one more cool feature? Right now if User block mic, camera or disable location (by the toggle in quick settings) and the App ask about access for one of those it will reamain available/enabled after the APP closes. It will be great if it will return to the state before and the access was granted only for this specific App temporary. How can it work? I will explain in next post.

Open ##4248701