Hacker News Reader

Most android phones I use provide an option to wipe the device if the wrong passcode is entered too many times.

There was a lot of talk about duress passcodes several years ago, but I don't think any phones ever got it. Sure would be nice to have

View on HN

GrapheneOS has the duress password feature [1]. I have it enabled, but have never needed to use it.

[1] https://grapheneos.org/features#duress

A duress password that booted into an innocuous "safe mode" without access to your full browser and chat history would be a whole lot less likely to get you into more trouble than one which wipes the phone...

Unfortunately your phone may get backdoored in that scenario anyway if it's known to have that feature. In graphene and most Android phones with unlocked flashing, easily achieved in a few minutes. (Special recovery. It's hard to catch if done right.)

There's no way around the wipe at least and better hope the bugger installed is not persistent in some firmware.

GrapheneOS explicitly supports and strongly recommendations locking the bootloader.

Reply on news.ycombinator.com