Currently no issues noted.

Duress wipe

Tested with device: Pixel 6a
No eSims on the device
GrapheneOS keyboard with a Norwegian keyboard layout used unless otherwise noted

GrapheneOS 2024051600 (first release based on AOSP QPR3)

Duress PIN

Duress PW

Wiped using

Wiped from

Wiped?

Comments

5478

torrent-gaily-fuji-atheling-lucifer

Duress PW

Safe mode, from the lockscreen of a secondary profile that was created in a previous boot into safe mode. Profile not at rest.

✓

English keyboard layout.

314159

3.14159

Duress PIN

Lockscreen of Owner, AFU.

✓

Accessibility settings set to max. display and font size.

314159

3.14159&@

Duress PW

Settings > Network & internet > Internet > [network name] > QR share

✓

Heliboard, Norwegian keyboard layout (duress password set and entered into QR share credential screen with Heliboard).

Accessibility settings set to max. display and font size.

GrapheneOS 2024060500

Duress PIN

Duress PW

Wiped using

Wiped from

Wiped?

Comments

1337

puppy unrolled the toilet paper roll

Duress PW

Lockscreen of Owner, BFU.

✓

Duress PW entered with a physical keyboard.

English keyboard layout.

GrapheneOS 2024060400

Duress PIN

Duress PW

Wiped using

Wiped from

Wiped?

Comments

2134

sandpit passage grope backup jaywalker unkind collapse confined

Duress PW

Safe mode. Lockscreen, BFU.

✓

English keyboard layout.

1234

**********

Duress PW

Lockscreen of Owner, AFU.

✓

English keyboard layout.

Duress PW literally all asterisks.

GrapheneOS 2024053100

Duress PIN	Duress PW	Wiped using	Wiped from	Wiped?	Comments
2580	matrix is p**p	Duress PW	The lockscreen of a secondary profile.	✓	Backup restored from Seedvault prior to wiping.
78956242	mothercool!	Duress PIN	Settings > Security > Fingerprint. PIN confirmation screen.	✓
1337	MATRIX has p00r moderation tools (uncomfortable truth).	Duress PW	Vanadium: unlock screen for locked incognito tabs.	✓	English keyboard layout.
4567	carpool majesty semisweet ashen buckwheat pentagram umbilical	Duress PW	Owner lockscreen, AFU.	✓	USB stick plugged in. English keyboard layout.
4727363	Graphene0s	Duress PIN	Guest user lockscreen, AFU.	✓
2580	matrix is p**p	Duress PW	The setup wizard during the creation of a secondary profile. Created an unlock PW and set it to the same as the duress PW.	No.	Intended behaviour. If the unlock PIN/PW is set to the same as the duress PIN/PW, the unlock PIN/PW takes precedence. Confirmed by a dev on Discord.
123456	GRAPHENE@#$%&-+()*"':;!?	Duress PW	Lockscreen, BFU.	✓
123456	This is a passphrase with 128 charactersThis is a passphrase with 128 charactersThis is a passphrase with 128 characters12345678	Duress PW	Owner lockscreen, AFU.	✓
1234	screwyou	Duress PW	FIDO2 security key PIN prompt	No.	Intended behaviour. This is not a screen where you are asked for your GrapheneOS device credentials, only the credentials of your security key.
62442	62442	Duress PIN	Settings > About phone > Tap build number repeatedly. PIN confirmation screen.	✓
1337	~` \|<>.,={}	Duress PW	Lockscreen of an at-rest secondary profile.	✓
226262	banana	Duress PIN	Signal's unlock screen (which provides a device credential lockscreen).	✓
4321	Pantry0-Rejoicing2-Subtotal5	Duress PW	Secondary profile. Bitwarden Authenticator's unlock screen (which provides a device credential lockscreen).	✓	Backup restored from Seedvault prior to wiping.
1337584	1337584	Duress PIN	From the lockscreen booted into safe mode, BFU.	✓	English keyboard layout.
1337	hotel abundant dog	Duress PW	From the lockscreen booted into safe mode, BFU.	✓	English keyboard layout.
256710	advanced attacker	Duress PIN	From the lockscreen of a secondary profile not at rest, with phone booted into safe mode.	✓	English keyboard layout.

Setup UI

Tested with device: Pixel 8. And duress input fields on a Pixel 6a.

Relevant UI: Settings > Security > Duress password

✓ = all good

Clear feature description ✓
No typos observed ✓
Locking device while viewing the UI: unlocking skips back to the Security section ✓
Switching from the UI to a different app and then back to the UI skips back to the Security section ✓
Screenshotting the UI is blocked ✓
Attempting to screenshot using the app switcher overview skips back to the Security section ✓
Attempting to screenshot with Power + volume down does not skip back to the Security section. Can't see how this is an actual issue. ✓
Comment by a dev:
muhomorr — Today at 3:39 PM
Attempting to screenshot with Power + volume down does NOT skip back to the Security section.
[3:39 PM]
It's same behavior as with regular PIN/password
[3:40 PM]
Screen contents are blacked out
Password input fields correctly recognized as such by Gboard, which disables its swiping and autocorrect features ✓
No password manager autofill prompt shown when Duress password entry field is selected. Keyboard: Gboard. ✓
The 'Paste' option is not shown when pressing on the duress input field. Forces the user to enter the password manually. ✓
Gboard: if text is copied to the clipboard, Gboard allows the user to paste the text into the duress password field. However, this is only possible once, so can only be pasted into one of the fields. The user will have to confirm the password by entering it manually in the remaining input field. ✓
Gboard: shows a 'Scan password' button when Duress password field is selected. Unclear what implications this has. Probably a new Gboard feature which GrapheneOS is unlikely to be able to control. But the feature doesn't appear to actually work: shows the text 'Failed to scan'. ✓

Notes to self:

The warning label texts in the duress PIN and PW fields are localized. Sourced from AOSP?

Special characters not allowed, in addition to locale-specific ones such as æøå: «»•√π÷×§∆°©®

Duress password QA testing