# Private Space

**<— Return to:** @[https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/profiles-UiYjt5uT5E](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/profiles-UiYjt5uT5E) 


---

**<— Previous lesson:**  @[https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/user-profiles-k0zWrDjR62](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/user-profiles-k0zWrDjR62) 

**—> Next lesson:** @[https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/work-profile-shelter-TgPu6g3VL9](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/work-profile-shelter-TgPu6g3VL9) 


[https://iframe.mediadelivery.net/embed/158816/8c00f2d8-fee4-4c48-89a8-743025288eae?autoplay=false&loop=false&muted=false&preload=true&responsive=true](https://iframe.mediadelivery.net/embed/158816/8c00f2d8-fee4-4c48-89a8-743025288eae?autoplay=false&loop=false&muted=false&preload=true&responsive=true)


With Android 16 a new feature was integrated into Android, called ***Private Space***.

The idea with *Private Space* is to have a separated container of Apps that are strictly isolated from the rest, like separate user profiles. However, in contrast to user profiles, a *Private Space* is directly integrated into a user interface (similar to a work profile, but more strictly isolated).

There are some advantages with this approach in terms of usability and convenience, because the main user would still be accessible directly from the same place.

## Two proper use cases for a Private Space:

**A.** Create a separate container keep specific **valuables extra secure**. In this case you'd want to create a different unique screen lock for your Private Space.

**B.** Create a separate container for specific invasive apps to only have them running on demand and separate from the main user environment.

Also note that __each user profile can have its own *Private Space*__, so you can also make use of this feature inside a secondary user, creating another separated container inside of it.

You'd probably just want to use your Private Space for one use case OR the other.

A *Private Space* doesn't have any calling functionalities within itself, so the apps inside of it can't make use of the SIM card tied calling account. This means that all permissions targeting a phone number on a SIM card are redundant (e.g. permissions like *Phone*, *SMS* & *Call logs*). The user however still has direct access to SIM card based calling accounts from the main user profile, since this is also active and visible at the same time.


__Let's look at an example to illustrate this better:__  
Say a user wants to install WhatsApp, which is an invasive that will prompt to get access to SIM card based permissions and requires to receive a login code via SMS to be able to log in.  
When installing it in a Private Space, WhatsApp will not be able to directly get any phone number / SIM card based data (because the Private Space has no calling functionality). Yet the user is still able to receive the necessary login code via SMS (text message) from the SMS app on the main user to be able to log in to the account.

Also note that in terms of VPNs the *Private Space* works like any other user / work profile, meaning that it has its own VPN slot. So when using invasive proprietary apps it is recommended to first install and set up a VPN inside the *Private Space*.

 

## Creating a Private Space

Navigate to ***Settings > Security & Privacy > Private Space***

After putting in your screen lock PIN you'll be introduced to the *Private Space*. During the setup you'll be asked to set a screen lock for the *Private Space* itself. You have two options there:  
1) use the same screen lock as your main user. This is arguably more convenient but less secure. Anybody who knows your screen lock will also be able to get access to the *Private Space*. However, if you intend to use the *Private Space* to isolate invasive apps (**usecase B**), this option might be fine.

2) set up a unique screen lock only for the *Private Space*. This option is more secure and will still allow you to keep the *Private Space* locked up even if someone would know your screen lock of the main user. This option is recommended if you want to store extra sensitive data / apps inside your Private Space (**usecase A**)

Apart from PINs (numbers) you can also use passwords (letters) and fingerprint unlock. Note that when using fingerprint unlock offered by the OS, your biometrics will stay offline and won't be sent to any Big Tech company..

Once your Private Space is created, you can access it at the bottom of the app drawer (pull up from the home screen). Note that all apps inside the *Private Space* will show a small bubble with a key icon in it at the bottom right of its app icon. This way you can easily differentiate from apps inside the *Private Space*.

Note that with apps inside of the *Private Space* it's not possible to create app shortcuts on the home screen.

 

## Settings for Private Space

To access the settings specific to the Private Space, look for the gear icon next to the *'Lock'* button on the top right of the Private Space section.

From there you can access some important settings.

***Lock Private Space automatically***  
You can decide whether the *Private Space* will stay open and active or if it will lock up once the screen is off. Note that all apps inside will be shut off too once the *Private Space* is locked.

For certain use cases you may want to change this setting so that your apps inside the Private Space can keep running, for example if you're using Android Audio & navigation with Google Maps inside the *Private Space*.

  
***Hide Private Space***  
When enabled, the *Private Space* will not show in the App drawer at all when locked. You can still access it via ***Settings > Security & Privacy > Private Space***

The idea here would be if you keep specific valuables inside the *Private Space* as described in usecase A, you can cover up all traces of some separated section being there on your device.

  
***Cross-profile shared clipboard***  
You can decide whether the text you copy from either your main user or your Private Space would be shared directly.

  
***Install available apps***  
Like with separate user profiles, here it is possible to directly install an instance of an app into the *Private Space* that is already installed inside the main owner user profile. Note that the version of this app will have it's own data and will work completely independently of the same app installed in the main user.

To easily install proprietary apps in the Private Space, you can enable Aurora Store via the 'Install available apps' section and then set it up and log in anonymously (or with a Google account for previously purchased apps).

 

## Transferring Files

File transferring is fully supported by using the *Files* app. After selecting some files and selecting the *'Share' button* (3 dots connected like an open triangle) it's possible to select where to save a file to. 

The prompt showing from the bottom will give you the option to share the selected file(s) directly with apps from your *'Personal'* user section or from your *Private Space*. To actually save the file, you can select the 'Save' function. This option will only show if you have this is actually a hidden app installed: [Save on Device](https://f-droid.org/en/packages/name.lmj001.savetodevice/) which is available on F-Droid.  
To have this option inside of your *Private Space* section, you'll want to enable inside the *'Install available apps'*, mentioned before.

 

## Google Play Services / Android Auto

With the GrapheneOS integrated App Store (black & white cube icon) it is possible to install the unprivileged version of sandboxed Google Play and Android Auto. Simply open this 'App Store' that have a tiny key icon at the bottom right of it's App icon bubble and install the components from there. 

For privacy protection we recommend to first set up a VPN inside the *Private Space* before installing and using Google Play Services and dependent apps.

Note that after installing Android Auto it still needs to be set up via the ***Private Space settings > Sandboxed Google Play > Android Auto***  
It may also require Google Maps and the Google Home app (installable via the Aurora Store) for certain functionalities.

---

**Documents**

- [Getting Started](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/getting-started-2PIp21MpGq)
- [Application Guides](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/application-guides-jAjlxuCIBy)
- [Above Essentials](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/above-essentials-KkbCdqt7F7)
- [Profiles](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/profiles-UiYjt5uT5E)
- [Migrating from other devices](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/migrating-from-other-devices-h0cJeSFPOe)
- [Backup & Restore](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/backup-restore-8eA0cmjC3G)
- [FAQs](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/faqs-HUNU8JOych)
- [Privacy Strategies](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/privacy-strategies-uHCZH7KxdC)
- [Older Above Phones](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/older-above-phones-fG3zUVbYnS)