Phone Security. LineageOS and why you should root a phone

TG1

Staff member
Every so often I get people asking me what phone they should buy. With more and more concerns over google, apple, and phone manufacturers collecting information it becomes a priority.

To start with, DONT TRUST APPLE. I get people like iphones. The security of the OS is fine even tho a few companies claim to be able to hack them easily. For those that know me well, I love android and hate ios devices. Recently I purchased an ipad and not very found of it other then for basic browsing and games. Primarily it will sit there and I will only use it for games. In comparison to android the app selections suck anyway and they dont allow some safety features in the same apps that you can get with android.

I use the term android, but I dont exactly mean google android as an operating system. Its just easier to tell someone android. Ill explain further but consider phone and specs different then operating systems.

Now lets first decide on a device. If you want the most secure and hardened phone, then you need a pixel 3. Some of you may have heard of Copperhead OS. Copperhead was secure but they violated some rules along with open source code and wanting to be a “company” rather then open project. The main developers left Copperhead and now continuing their work on Graphene OS. But its a limited group and not much support so they only work with google pixel phones.

https://grapheneos.org/

Lets say you want some more features and more choices of devices. Now you’ll look at LineageOS. In my opinion the best support and options for what the phone should have. Lets look at the list of phones they offer support on:
https://wiki.lineageos.org/devices/

When checking here you dont want to check discontinued devices and you dont want to look for the most obscure phone on the list. For a good working phone and supported Id choose the Xiaomi Pocophone F1.

You can check more on the phone here:


Now your going to look at how to unlock the phone and then install lineage OS. You dont need google options but if you want it you can install the play store and then install your apps and delete any google services later. You do need to root “su” options when installed for later. Install LineageOS on beryllium | LineageOS Wiki

Once you follow the instructions you need to make sure and install nova loader. It gives much more flexibility in the design ui on the phone the other options.

From then you need all the basics.
  • AFWall+: a firewall app. go into the settings and enable tor and vpn. the decide which apps need access to the network and which apps dont. For example I have brave browser accessible to VPN only and I have mycellium wallet forced over TOR.
  • NordVPN or other vpn app: I prefer nord only because it offers a setting of VPN over tor an also double vpn. Most other vpn apps dont have that option. After you decide and install you need to go into the main settings and under the vpn profile, connect to vpn always. This will drop all phone connections if the vpn drops. Allow the VPN app in the firewall access to the main wifi or mobile network you have. Consider this a tunnel so apps only access thru VPN or Tor
  • IPWidget: shows you on home screen what ip is showing easily
  • Orbot: Tor app
  • Built in settings: privacy guard. Check the settings and enable system apps. This is your permissions center to block and allow permissions. Its much better then usual permissions and you can turn on or off anything.
  • Titanium Backup pro: this will not only allow you to backup but also freeze services or remove them as well. Including things like gps and other location functions to get them to stop working. Also the pro version allows for encrypted backups to sd card.
  • island: allows you to create an isolated app in work profile. allows multiple apps and settings to lock.
The encryption should be on default but you may want to double check the settings. If its a supported phone then should have zero problems. As example I have a spare Samsung S8 with lineage and no encryption option. but the reason is only S7 and S9 are supported due to hardware.

Theres obviously other good apps to use but these are a few that are a must.
 
Back
Top