One of the most important security concepts in GrapheneOS — and therefore in every SaferPhone — is the Sandboxed Profile. Instead of letting apps run directly in the main system, GrapheneOS isolates certain app environments in their own, strictly sealed-off user profile.
What does "sandboxing" actually mean?
Every app that runs in the Sandboxed Profile has no automatic access to data, files or sensors outside its own environment. Even if an app were compromised or contained malicious code, the damage would stay confined to this isolated profile — your main profile, with its personal data, contacts and messages, remains untouched.
Why is this better than conventional app permissions?
- Isolation at the operating-system level rather than mere app permissions — significantly harder to circumvent
- Separate storage areas for each profile, with no shared use of the clipboard or files without explicit approval
- Full control over which apps are installed in the Sandboxed Profile in the first place
Combined with the removal of the camera and microphone at the hardware level, this creates a multi-layered security concept: even if software protections were to fail at some point, at the physical level there is simply no longer a camera or microphone that could be read out.