top | item 47445931

GrapheneOS: Duress Pin/Password

43 points| davikr | 13 days ago |grapheneos.org | reply

21 comments

order
[+] rendaw|13 days ago|reply
I've heard that duress pins/passwords and false roots and the like aren't actually helpful. IIRC the argument was that if they're familiar with your OS they're familiar with the duress pin capabilities.

But even if that's the case, there's no way to tell if a duress pin was used, right? And if you're in a place with weak legal processes and they decide possibility=guilty, then the duress pin doesn't make things worse, right? I.e. if they wanted to do something to you, then "lack of evidence due to duress pin" is no different than just "lack of evidence" i.e. the pin at least doesn't make things worse...

[+] stevefan1999|13 days ago|reply
Simple, "if you try to enter the duress pin, you and your family and your friends, will be beaten to death, and I will make you watch them die one by one, unless you tell me the real pin, and then kill you next"

Increasing the extreme and cruelty of violence. It always works. That also means the "investment" of each action will have higher stake, though.

It is not an intimidating thought experiment, it is being used in the 2026 Iranian Protest by the IRGC

[+] wps|12 days ago|reply
The main critique I’ve seen of the duress pin is that it causes undue trouble. The obvious counter argument is that if you genuinely have the need for a duress pin, it’s worth its weight in gold. If the severity of the charge or physical punishment (in countries without due process) would in any way be less by NOT having xyz data on your phone, then it’s helped. Say, the difference between 10 years for destruction of evidence and 80 years for espionage.
[+] dangus|12 days ago|reply
It also doesn’t have to be used against a government.
[+] yndoendo|13 days ago|reply
For people that don't know.

Duress PIN is a feature started by security systems. Entering the dress code would seam as if the security system was disabled while in the background it would contact the security company to send in the police.

[+] rendaw|13 days ago|reply
Maybe generally, but in this case it seems like it just wipes the device.
[+] dtm987654123|13 days ago|reply
I wonder if being able to block access to/hide specific apps, e.g. banking apps or whatever could be a good idea here?
[+] Royce-CMR|12 days ago|reply
If you need this, it’s a useful function.

For me, a expanded duress feature would be unlocking into a fake home screen/instance where my banking apps or messenger apps are not available, but otherwise the phone works. Or even unlocking into a mostly empty phone.. but wiping the main instance in parallel.

As someone who had their passport forcibly taken away while on foreign soil, when you are at the mercy of deranged people every option has its value. The key is to have those options… better than none at all.

[+] metalman|12 days ago|reply
Graphene sounds like a LOT of work. There is no pin or password on my phone, and no apps that access personal or financial info. Sign in every time.Ditched online banking, and subscribe only to web hosting. I am probably carrying a bunch of cash at any given time, and if ,as some have, there is a wrench(or hammer) waving in my face then that's just fine. Whats wrong with people?, stand up to the shit birds!, most people in desperate situations realy just want to be SEEN, and the cunning calculating types, wont risk a real fight. Perhaps I am spoiled, living in an area with the vestages of plain civilisation, but in any case I refuse to give into the FUD machine and more than other types of extortion.