4 ms·

Would love to ditch google and use grapheneOS, however have so many banking and (stupid) outlook for work.

sheiyei 7mo ago
Apparently a lot of banking apps work with the sandboxed Google malwares. Not sure though, I'm not a user (wrong hardware)
- wafflemaker 7mo ago
  can confirm. And there are even some pages that list banking and other apps working on GrapheneOS. It's actually very few that don't work with sandboxed Google Play API. edit: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/ https://privsec.dev/posts/android/banking-applications-compa...
- microtonal 7mo ago
  Correct. I am using my Dutch bank and credit card apps without any issues. Someone linked the curated GrapheneOS banking list already. If your bank does not support it, you could either contact them. If they require remote attestation, this can be implemented for GrapheneOS as well: https://grapheneos.org/articles/attestation-compatibility-guide https://grapheneos.org/articles/attestation-compatibility-gu... If the bank is very hard-nosed about it, you could consider keeping an old iPhone or Pixel (because long security updates) for banking if it is practical to do for you. 95% without big tech is also a big win. Of course, if you need to have it with you at all times, that might not be a worthwhile option.
TobTobXX 7mo ago
The outlook webapp is quite decent. I've never used their native app, but I've manahed to get by fine with their webapp, even though notifications don't work (I just check it regularily). IIRC K9/Thunderbird also has support for exchange now.
amelius 7mo ago
You can check banking app compatibility here: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/ https://privsec.dev/posts/android/banking-applications-compa...
- CorrectHorseBat 7mo ago
  Even if it works now, how can you be sure the next app update doesn't break it in the name of security?
  - amelius 7mo ago
    Because it would cause public uproar.
    - CorrectHorseBat 7mo ago
      I very much doubt that
ninjasmosa 7mo ago
The outlook app works for me on GrapheneOS, is there something about it that doesn't work for you? Many banking apps do work on GrapheneOS, the list had already been linked to by others
kgwxd 7mo ago
Can you not setup your work email through a regular email client? I thought the days of being locked into Outlook specifically went away with Exchange. Everywhere I've worked since has been able to. Also, what kind of banking are people doing that requires an app? I genuinely don't know what it could be.
- wafflemaker 7mo ago
  It's way more comfortable to login with fingerprint and not going through a longer login to the website. Especially since in many countries it requires a national e-ID that is an app on your phone.
- duozerk 7mo ago
  > Also, what kind of banking are people doing that requires an app? I genuinely don't know what it could be. Close to every bank in the EU requires their user to have an app, for MFA (both for logging in and for validating transactions - transfers, payments). They use the smartphone's TPM. I have yet to see one that allows you to use your own MFA app. The few I've seen that don't require it will validate the same through text messages (not everyone has a smartphone); though if you associate their app even once, you're screwed - the app it is from now on.
  - bluebarbet 7mo ago
    >Close to every bank in the EU requires their user to have an app Possibly this was hyperbole but in any case it's not correct at all. Anecdotally, of my two EU (massive legacy French) banks, neither requires a mobile app. SMS all the way. Even Wise, a cutting-edge neobank, does not require you to use its app. And its website accepts standard TOTP authenticator for 2FA. Revolut is app-only, which is why I never use it.
    - microtonal 7mo ago
      Here in The Netherlands banks used to offer authenticator devices, which they are phasing out (you can still use them, but they wont replace them once they run out of battery). Pretty much all banks switched to app-only. No SMS at all (which is not surprising, because SMS is not secure). Also, IMO fingerprint/face-based authentication is much nicer/quicker, especially for online payment flows like iDEAL (Dutch predecessor to Wero). And banks here work on GrapheneOS, so not much is lost.
rkagerer 7mo ago
I don't much like the official Outlook app. Been using Nine for ages, it does everything I've needed.
ekjhgkejhgk 7mo ago
> Would love to ditch google and use grapheneOS grapheneOS only works with google phones.
- 4gotunameagain 7mo ago
  I would rather pay a one off ransom to google, than have them harvest all my data and profit from them in perpetuity. Better yet, you can buy a used pixel phone.
  - burningChrome 7mo ago
    Pixel 9 Pro handsets are going for around $500 on the secondary markets like ebay. That's a only a single generation off from their current Pixel 10 models and you still get OS and security updates until 2031. Not a bad deal and pretty crazy how fast smartphones depreciate now.
    - microtonal 7mo ago
      Indeed and Pixel 10 was 549 Euro here just a few weeks ago and Pixel 9a as low as 338 Euro.
- kruffalon 7mo ago
  For now[0]. And I don't really think that people mean using google hardware but rather being mined by google software. May I ask, if you (a) just want to be technically correct, (b) don't see the difference or (c) are trying to make a point I don't understand and if so would be willing to explain? --- [0] https://piunikaweb.com/2026/02/02/grapheneos-non-pixel-hardware-announcement/ https://piunikaweb.com/2026/02/02/grapheneos-non-pixel-hardw...
ekjhgkejhgk 7mo ago
Why do people need banking on their phones though? Banks have websites too.
- gyulai 7mo ago
  > Why do people need banking on their phones though? Banks have websites too. 2FA. I was a smartphone hold-out for longer than anyone I know, but banks mandating 2FA with no options for doing it in a standards-compliant way or any way that doesn't involve the app stores was what finally broke my resistance.
- pmontra 7mo ago
  This is asked again and again. Apparently you guys in the USA or in other parts of the world are still lucky, but in Europe banks must be compliant with regulation that more or less force them to do 2FA through their app with the biometric authentication of either an Android or an iOS phone. There are other ways (eg giving a hardware OTP generator to customers,) but apps are the cheapest solution.
  - fsflover 7mo ago
    You can still find banks in Europe that do not force Google and Apple on you. They may ask you to use their own security devices for instance.
  - kruffalon 7mo ago
    Do you have a link with information about this? I'm just wondering since I'm currently using 3 different European banks without any biometric authentication to unlock my phone, password manager or provide a 2FA. I'm asking so that I can adjust in time to any new regulations I'm not aware of.
    - pmontra 7mo ago
      This https://en.wikipedia.org/wiki/Strong_customer_authentication https://en.wikipedia.org/wiki/Strong_customer_authentication
zwarag 7mo ago
Theres e/OS where you can have a locked bootloader with some phones

Apparently a lot of banking apps work with the sandboxed Google malwares. Not sure though, I'm not a user (wrong hardware)

wafflemaker 7mo ago
can confirm. And there are even some pages that list banking and other apps working on GrapheneOS. It's actually very few that don't work with sandboxed Google Play API. edit: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/ https://privsec.dev/posts/android/banking-applications-compa...
microtonal 7mo ago
Correct. I am using my Dutch bank and credit card apps without any issues. Someone linked the curated GrapheneOS banking list already. If your bank does not support it, you could either contact them. If they require remote attestation, this can be implemented for GrapheneOS as well: https://grapheneos.org/articles/attestation-compatibility-guide https://grapheneos.org/articles/attestation-compatibility-gu... If the bank is very hard-nosed about it, you could consider keeping an old iPhone or Pixel (because long security updates) for banking if it is practical to do for you. 95% without big tech is also a big win. Of course, if you need to have it with you at all times, that might not be a worthwhile option.

TobTobXX 7mo ago

The outlook webapp is quite decent. I've never used their native app, but I've manahed to get by fine with their webapp, even though notifications don't work (I just check it regularily). IIRC K9/Thunderbird also has support for exchange now.

amelius 7mo ago

You can check banking app compatibility here: https://privsec.dev/posts/android/banking-applications-compatibility-with-grapheneos/ https://privsec.dev/posts/android/banking-applications-compa...

CorrectHorseBat 7mo ago
Even if it works now, how can you be sure the next app update doesn't break it in the name of security?
- amelius 7mo ago
  Because it would cause public uproar.
  - CorrectHorseBat 7mo ago
    I very much doubt that

ninjasmosa 7mo ago

The outlook app works for me on GrapheneOS, is there something about it that doesn't work for you? Many banking apps do work on GrapheneOS, the list had already been linked to by others

kgwxd 7mo ago

Can you not setup your work email through a regular email client? I thought the days of being locked into Outlook specifically went away with Exchange. Everywhere I've worked since has been able to. Also, what kind of banking are people doing that requires an app? I genuinely don't know what it could be.

wafflemaker 7mo ago
It's way more comfortable to login with fingerprint and not going through a longer login to the website. Especially since in many countries it requires a national e-ID that is an app on your phone.
duozerk 7mo ago
> Also, what kind of banking are people doing that requires an app? I genuinely don't know what it could be. Close to every bank in the EU requires their user to have an app, for MFA (both for logging in and for validating transactions - transfers, payments). They use the smartphone's TPM. I have yet to see one that allows you to use your own MFA app. The few I've seen that don't require it will validate the same through text messages (not everyone has a smartphone); though if you associate their app even once, you're screwed - the app it is from now on.
- bluebarbet 7mo ago
  >Close to every bank in the EU requires their user to have an app Possibly this was hyperbole but in any case it's not correct at all. Anecdotally, of my two EU (massive legacy French) banks, neither requires a mobile app. SMS all the way. Even Wise, a cutting-edge neobank, does not require you to use its app. And its website accepts standard TOTP authenticator for 2FA. Revolut is app-only, which is why I never use it.
  - microtonal 7mo ago
    Here in The Netherlands banks used to offer authenticator devices, which they are phasing out (you can still use them, but they wont replace them once they run out of battery). Pretty much all banks switched to app-only. No SMS at all (which is not surprising, because SMS is not secure). Also, IMO fingerprint/face-based authentication is much nicer/quicker, especially for online payment flows like iDEAL (Dutch predecessor to Wero). And banks here work on GrapheneOS, so not much is lost.

rkagerer 7mo ago

I don't much like the official Outlook app. Been using Nine for ages, it does everything I've needed.

ekjhgkejhgk 7mo ago

> Would love to ditch google and use grapheneOS grapheneOS only works with google phones.

4gotunameagain 7mo ago
I would rather pay a one off ransom to google, than have them harvest all my data and profit from them in perpetuity. Better yet, you can buy a used pixel phone.
- burningChrome 7mo ago
  Pixel 9 Pro handsets are going for around $500 on the secondary markets like ebay. That's a only a single generation off from their current Pixel 10 models and you still get OS and security updates until 2031. Not a bad deal and pretty crazy how fast smartphones depreciate now.
  - microtonal 7mo ago
    Indeed and Pixel 10 was 549 Euro here just a few weeks ago and Pixel 9a as low as 338 Euro.
kruffalon 7mo ago
For now[0]. And I don't really think that people mean using google hardware but rather being mined by google software. May I ask, if you (a) just want to be technically correct, (b) don't see the difference or (c) are trying to make a point I don't understand and if so would be willing to explain? --- [0] https://piunikaweb.com/2026/02/02/grapheneos-non-pixel-hardware-announcement/ https://piunikaweb.com/2026/02/02/grapheneos-non-pixel-hardw...

ekjhgkejhgk 7mo ago

Why do people need banking on their phones though? Banks have websites too.

gyulai 7mo ago
> Why do people need banking on their phones though? Banks have websites too. 2FA. I was a smartphone hold-out for longer than anyone I know, but banks mandating 2FA with no options for doing it in a standards-compliant way or any way that doesn't involve the app stores was what finally broke my resistance.
pmontra 7mo ago
This is asked again and again. Apparently you guys in the USA or in other parts of the world are still lucky, but in Europe banks must be compliant with regulation that more or less force them to do 2FA through their app with the biometric authentication of either an Android or an iOS phone. There are other ways (eg giving a hardware OTP generator to customers,) but apps are the cheapest solution.
- fsflover 7mo ago
  You can still find banks in Europe that do not force Google and Apple on you. They may ask you to use their own security devices for instance.
- kruffalon 7mo ago
  Do you have a link with information about this? I'm just wondering since I'm currently using 3 different European banks without any biometric authentication to unlock my phone, password manager or provide a 2FA. I'm asking so that I can adjust in time to any new regulations I'm not aware of.
  - pmontra 7mo ago
    This https://en.wikipedia.org/wiki/Strong_customer_authentication https://en.wikipedia.org/wiki/Strong_customer_authentication

zwarag 7mo ago

Theres e/OS where you can have a locked bootloader with some phones