Hello guys. I recently acquired a Pixel 8A and it was Google stock os I bought it from a man locally all with cash I brought It home and I flashed grapheneos onto this phone.
What else needs to be done to anonymous this phone and make it a privacy phone and a spy free phone no tracking phone no interception phone and no monitored phone.
Any advice welcome!
Thanks.
You always need to ask: which data do you want to protect.
If its position data and calls: nothing, it really doesn’t matter what phone you use if the connection is not secure.
If its communication via messenger like matrix: you are already quite good protected with graphene os and matrix from a safe source.
If its Trojans from the police: don’t download any software/apps/services that are not open source and widely reputable. (Most rich western states can probably still get full control if they want to because of zerodays)
If you want privacy for calls: get a simcard without your name/Iban/PayPal/creditcard etc attached to it in any way (prepaid with cash), Reset the phone, drive somewhere where you don’t work or live with phone off Insert simcard and turn on phone. Wait Turn off phone and disable sim card Use only WiFi until you really need sim service (best not at your home or work).
If you want to protect data on phone: don’t have biometric login (you can be forced to put your finger on the sensor, you can’t be forced to type in a password as easily)
Netguard, shelter, only FOSS software, regular updates, no cloud, no google is never a bad idea, also only communicate via safe encrypted protocols (matrix, xmpp, pgp, https, etc., NOT WhatsApp, Facebook, unencrypted mail, http, SMS, calls)
EDIT: people here mentioned that graphene has a build in firewall, which you can use instead of netguard. I have netguard running though as I know the interface and options, have separate profiles for shelter and normal and don’t use a VPN anyway.
Shall I run netguard 24/7 Always in this phone? Will that help? Is the default netguard enough or must I use a hosts file imported into netguard to?
You don’t need NetGuard. GrapheneOS has a built in, more reliable firewall. You can access it by going to the settings -> privacy -> permission manager and selecting Network. Also, you can’t use a VPN when using NetGuard, so I recommend dropping NetGuard and using a VPN, as well as the built-in firewall instead.
Are there any other good free VPN other then proton VPN?
Check out Calyx VPN and Riseup VPN. They are run by voluntary, non-profit organizations. If you need maximum security, consider routing your traffic through Tor, using the Orbot app (it’s not in the main F-Droid repo, you need to add the Guardian Project repo). There’s also Windscribe VPN, but it has limited bandwidth.
deleted by creator
This is about free VPNs.
Again. It’s down to what your threat model is
Running a VPN, and a firewall, protect you from some threats but not all threats
You can’t run a VPN and NetGuard at the same time.
deleted by creator
It does. And exactly that is the problem. Because NetGuard is already set as your VPN, you can’t use another VPN app.
What is best host file to use? Hagezi is fine? With just always on VPN switch on Netguard without block connections switch. Is this a good setup to use always?
https://www.privacyguides.org/en/dns/
Yes this link has RethinkDNS app am I better of using that app always?
At this point I think the best thing for you to do is just read all of privacy guides. I cannot give you advice