One of GrapheneOS’s most powerful features is something most users never discover: multiple isolated user profiles. This guide covers everything you need to know about using profiles to separate your privacy-sensitive apps from everything else.
What Are User Profiles in GrapheneOS?
User profiles are like having separate phones on one device. Each profile is its own space — completely isolated from the others.
Think of it like your work truck and your personal truck. They might look the same, but what is in one stays in one.
Each profile has:
- Its own set of apps
- Its own photos, files, and data
- Its own Google account (if you want one)
- Its own settings and passwords
The magic: Apps in one profile cannot see or touch anything in another profile. Not even if something goes wrong.
Why This Matters
Standard Android and iOS give you one space. Everything lives together — your banking apps, your personal apps, your photos. If one app gets compromised, everything is exposed.
GrapheneOS’s user profiles change the game. Your main profile stays completely clean — no Google, no tracking. Your secondary profile has everything you need for apps that require Google.
The two profiles never meet.
The Privacy Model
Your main profile = 100% private. No Google. No tracking. No compromise.
Your secondary profile = Where Google apps and problematic apps live.
The two never meet.
Pros of Using Multiple Profiles
1. True Separation
Apps in one profile cannot access or interfere with apps in another profile. Even if an app goes rogue, it stays locked in its own profile.
2. Keep Your Main Profile 100% Clean
Your primary profile stays completely de-Googled. No Google Play Services. No tracking. Pure privacy.
3. Banking App Compatibility
Most banking apps need Google Play to work. Put them in a separate profile with Sandboxed Google Play — your main profile stays clean.
4. Work and Personal Stay Separate
No need for complex business software. Keep work apps in one profile, personal apps in another. Better separation than any corporate solution.
5. Easy Reset
Something go wrong with an app? Wipe that profile. Your main profile with all your personal data? Completely untouched.
6. Multiple Google Accounts
Need different Google accounts for different apps? Each profile can have its own.
Cons of Using Multiple Profiles
1. Switching Profiles Takes Effort
You cannot run apps from both profiles at the same time. Need to switch profiles to access different apps. Some people find this inconvenient.
⚠️ Important
You cannot run two profiles simultaneously. This is a fundamental limitation — you must switch between profiles when you need apps from each.
2. Shared Storage
All profiles share the phone’s storage space. If one profile fills up, it affects the whole phone.
3. Separate Notifications
Each profile shows its own notifications. You will need to check both profiles for messages.
4. Setup Time
Getting profiles configured takes 30-60 minutes initially. After that, it just works.
5. Not All Apps Work
Some banking apps have strict security checks that even Sandboxed Google Play cannot bypass. Always check compatibility first.
Quick Comparison
| Without Profiles | With Profiles | |
|---|---|---|
| Google in main profile? | Maybe, if you need banking apps | No — keep it clean |
| Banking apps work? | Usually | Yes — in separate profile |
| Apps isolated from each other? | Basic protection | True separation |
| Setup complexity | Low | Medium (one-time) |
| Flexibility | Limited | High |
Step-by-Step: Setting Up Multiple Profiles
Step 1: Create a New User Profile
- Open Settings
- Go to System → Multiple users
- Tap Add user
- Select User (not “Work profile”)
- Give it a descriptive name like “Google” or “Apps”
- Set up a PIN or password for the profile
Step 2: Switch to the New Profile
- Swipe down from the top of your screen
- Tap the profile switcher tile (shows your current profile)
- Select your new profile
- Enter the PIN/password you set up
Step 3: Install Sandboxed Google Play
- In your new profile, go to Settings → Apps
- Tap Install app
- Download Sandboxed Google Play from the GrapheneOS website
- Open it and follow the prompts
- Sign in with your Google account when asked
Pro Tip
Create a separate Google account for this profile. Do not use your primary Google account — it reduces tracking surface area even further.
Step 4: Install Your Apps
- Open Google Play Store in your new profile
- Install banking apps, ride-share apps, or other apps that require Google Play
- Configure each app’s settings as needed
Step 5: Return to Your Main Profile
- Swipe down from the top
- Tap the profile switcher
- Select your main profile
- Your main profile is untouched — still clean, still private
Profile Setup Summary
| Profile | Purpose | Google Play | Apps |
|---|---|---|---|
| Main Profile | Privacy-first daily use | None | Signal, Firefox, OsmAnd, etc. |
| Secondary Profile | Banking, work, Google-dependent apps | Sandboxed Google Play | RBC, Uber, Instagram, etc. |
Quick Switching Tip
Once you have multiple profiles set up, the fastest way to switch:
- Swipe down from the top of your screen to open quick settings
- Look for the profile icon in the top-right corner
- Tap it to see all profiles
- Tap the profile you want — instant switch
What About NFC Payments?
NFC payments (Google Pay, contactless payment apps) require Google Play Services and typically do not work in the sandboxed environment. This is one limitation of GrapheneOS’s isolation model.
Workaround: Some users keep a stock Android device for payments while using GrapheneOS for everything else. Others use physical cards or cash.
The Bottom Line
GrapheneOS’s user profiles are one of the most powerful privacy features available on any smartphone platform. They allow you to have genuine isolation between your private life and apps that require Google.
The trade-offs are real — switching profiles, shared storage, setup time — but for users who need banking app compatibility without sacrificing privacy, profiles are the solution.
Need Help Setting This Up?
We offer de-Googling services that include full profile setup — we configure your phone with multiple profiles, Sandboxed Google Play, and your banking apps working properly.
Contact us for a free 30-minute consultation.