I don’t understand. So if I only lock my phone (turn the screen off) without rebooting it, it is not fully encrypted (considering that the device storage encryption is enabled)?
Something like that. I’m not familiar with the exact details, but there is an additional layer of encryption that applies before the first unlock after a reboot.
Parts of the OS have to be unencrypted for it to function properly.
As long as “auto” doesn’t mean “forced”.
But knowing current trends, especially with Android, it likely will be.
Option to enable automatically rebooting the device when no profile has been unlocked for the configured time period to put the device fully at rest again, which is enabled by default at 18 hours. This can be configured at Settings > Security > Auto reboot.
https://grapheneos.org/features#auto-reboot
But it’s a security measure to get it to BFU, where data is at rest and secure, in case your phone is out of your possession for an extended period of time (someone steals it, police take it, etc) so it becomes harder to exploit. I’ve set mine to 12. Some do 4 or even less. Feel free to turn it off.
I wish Graphene would choose a better phone than ugly-looking Pixels.
“pretty phones over privacy” is a wild take ngl
