Comment by verdverm
4 days ago
You do not have to give them your pin, by law. They can use biometrics to open your device, which is why you should not use biometrics for device unlocking.
GraphenOS has a couple of settings, a distress pin that wipes the device, and a number of failed attempts that will wipe the device. If the person handed over their "pin", they didn't need to
It doesn't wipe after a certain number of failed attempts but rather the secure element only permits a total of 20 attempts and heavily throttles the rate those can be done. That's a standard feature for Android 16 QPR2 and later for devices implementing the recommendations. The list of devices with it likely currently only includes Pixels but we'll make sure to have it on the upcoming Motorola Mobility devices.
We wrote an overview of the features we provide:
https://discuss.grapheneos.org/d/40700-grapheneos-protection...
GrapheneOS does not offer a feature to wipe the device based on failed attempts.
I thought I read about it in their docs, but perhaps I'm hallucinating that from a forum post requesting the feature.