Admin has been task with pulling together all the best tips for how to set up GrapheneOS, to see if there's enough in it for a video.

Here's the early work:

- PIN needs to be strong min 12-char if using numerical but you can do even better
- Do not use biometrics as in some places you can be compelled to unlock
- Duress PIN
- Auto shutdown after incorrect PIN tries (maybe 3)
- Auto reboot to put it into BFU mode after a certain number of hours of no use
- Make a call on Play Services and stick by it, if you are using PS...
- Create a profile under Owner which has it and don't put it elsewhere
- Create a separate profile with location services allowed and don't use it elsewhere
- Scramble your PIN
- Do not download apps that can just be opened as websites i.e. your bank

Anything else?