# Sandboxed Google Play Services **<— Return to:** @[https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/app-functionality-z5d0OKQz8m](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/app-functionality-z5d0OKQz8m) --- **<— Previous lesson:** @[https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/exploit-protection-compatibility-z2rdMnVfgu](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/exploit-protection-compatibility-z2rdMnVfgu) :::info **Are there certain applications that you cannot live without?** Necessary for work? No viable F-droid alternative? As you may have found, some Android apps require ***Google Play Services*** to be installed on your phone in order to operate properly. ::: You can easily install Google Play Services on GrapheneOS to enable nearly all applications to work on the phone. While this is not fully de-googled, there is a fairly private way to set them up so they are not always running in the background. Your above phone will still be superior to a stock android or apple device, even with Sandboxed Google Play Services installed. ### Unlike a normal android phone: * You can remove Google Play Services whenever you like, they are not baked into the operating system. * Google Play Services are treated as application and are 'sandboxed' or restricted from accessing data from other apps on your phone. * Google Play Services have no special privileges and are limited to the permissions you set. * Backend Services, like geolocation, are still handled by GrapheneOS by default. You can simply install the Google Play Services apps and skip setting up a separate user profile to create a similar experience to stock android. We recommend trying to use two profiles first to see if it fits your needs. You can always delete the second profile and install the Google Services on your main profile. The best configuration for privacy is to use multiple user profiles. You will be able to quickly & easily switch between the profiles, between a Google-Enabled phone and a Fully De-Googled phone. The private user on your phone will not communicate with Google while the other user can have fully compatibility to use any applications you desire. ### **Using a separate User Profile** User profiles do not have access to files within the other profile. Applications installed in the main profile will not be available in the other out of the box. This provides further isolation & control over when & what apps have access to Google Services. Unfortunately, this means you will need to setup the new user profile from scratch. 1\. Create a second profile * Open Settings * Scroll down, press System * Multiple Users * Enable Multiple Users * Add User * Press Ok & give it a name From here, you may choose to allow phone calls / SMS to be forwarded to the new profile. If you do not enable this setting, you may miss phone calls from your main profile while you are logged into the second profile. Keep "Disallow installing apps" disabled. ### Tap Install Available Apps You will want to go ahead and install F-Droid and Aurora Store to the new profile so that you can install apps right away. This new profile will have almost no apps installed out of the box * Tap ***Install Available Apps*** * Select the toggle next to ***Aurora Store*** * consider setting up your VPN in this user profile as well for added privacy :::tip Above Suite users can use Above VPN — note that each profile counts as a separate device ::: * If you need to transfer files across profiles: Select the toggle next to ***Inter Profile Sharing*** [Data transfer via Inter Profile Sharing](/doc/7f4df715-8af4-4018-99cd-0bbbf5964e88) ![](https://kb.above.im/content/images/2022/04/test.gif " =257x560") :::success You're ready to setup the profile. Press the **← back arrow**, then ***Switch to* "*User*"** ::: ### Setting up your new Profile/User * Press ***Start***, choose your preferred language * Keep **Location services** enabled (if you want) * Set a **PIN / Biometric** if you want (you can do this later) * Skip **Restore apps and data**, then press ***Start*** ![](https://kb.above.im/content/images/2022/04/setup-profile_optimized.gif " =257x560") You now have a fresh vanilla install of GrapheneOS in a separate profile on your phone. ### Install Google Play Services GrapheneOS provides app versions of Google Play Services in the "Apps" app. You can install all of the apps needed by installing the Google Play Store first. While in the profile you want to have access to Google Services: * Open the Apps app * Install the following apps * Google Play Store (This one will automatically install the others) * Google Services Framework * Google Play services Once installed, you will need to initialize the Google Play Store. You do NOT need to login to a Google account. ### Initialize Google Play Store: * Open the Play Store app * Press Sign In * Wait for Initializing to complete (wait until you see the login screen) * Close the application ![](https://kb.above.im/content/images/2022/04/install-google-play_optimized.gif " =300x654") ### **Access Google Play Services Settings** * Open ***Settings*** * Tap on ***Apps*** * Tap on ***Sandboxed Google Play*** * wait until the installation is finished (look for ***Play Store*** in the app drawer) :::success That's it! You should be able to use applications that require Google Play Services. ::: --- **Documents** - [Getting Started](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/getting-started-2PIp21MpGq) - [Application Guides](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/application-guides-jAjlxuCIBy) - [Above Essentials](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/above-essentials-KkbCdqt7F7) - [Profiles](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/profiles-UiYjt5uT5E) - [Migrating from other devices](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/migrating-from-other-devices-h0cJeSFPOe) - [Backup & Restore](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/backup-restore-8eA0cmjC3G) - [FAQs](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/faqs-HUNU8JOych) - [Privacy Strategies](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/privacy-strategies-uHCZH7KxdC) - [Older Above Phones](https://learn.above.im/s/12aef602-75ec-4367-b619-07ad051e2a6f/doc/older-above-phones-fG3zUVbYnS)