I’m non-techy. I work for a public school district and visit with kids in about a dozen schools. I like having my work email on my phone so teachers can get in touch if they need me. For years we’ve just used the outlook app with no real issues that I’ve noticed. We’re seeing more and more micromanagement and it sucks. We recently got notice that we have to install Cisco Duo on our phones if we want to have our email on it. Should i do that? Or just say no and be ok with being out of contact?
If you have an android phone you can make a work and home profile so the two sessions are totally separate. It does mean swapping back ans forth between profiles.
No more swapping on modern Android. The apps just run side-by-side.
Im still having to swap User in the MultiUser profiles, if I want them sandboxed as separate. Do you have another method?
Settings > Passwords, etc. > Work
I replied but it got lost. That is for adding work accounts to your main profile storage area. If you go to system settings, multi user, it lets you create two separate sandboxed profiles, each can have accounts added to them that the other storage area doesn’t see. It is the only way to keep your stuff hidden from other accounts, especially when work IT has set that they are allowed device admin like remote wipe, app install/removal etc.
Yeah, I’m android, so I’ll look into that.
I work in IT and have implemented quite a few MDM systems. For Android, a work profile will be entirely isolated personal data wise. IT can’t see anything beyond the work walls, however, there are a few shared things.
If work enforces a tougher screen lock setting, it’ll take precedence over your regular lock screen setting. You might also have a few other things change while it’s active, like display time out (if work has a shorter setting).
We can also see certain shared info like device serial number, IMEI number, OS version, security update version etc. Depending on the configuration, GPS/location info can be obtained as well (via an force-installed policy app for example)
You can pause the profile at anytime which suspends ALL work profile app activity (So if there was an app they install that they could get GPS info from, that app would no longer be functional until unpaused again (no it can’t “run in the background” and collect info on the background either, it’s wholly suspended)) and the pause feature can be set on a schedule so if you have a 9-5 you can set it to that and avoid the whole “always available” problem.
I wish work profiles were more separate. My company’s work profile ended up locking me out of my phone (including the personal profile) and forced me to wipe and start over with it. They disabled fingerprint unlock and required my unlock password to change monthly, and I got the periodic “you have to change your password NOW” notice while plugged into my car with Android Auto. I couldn’t enter a new password and the phone never unlocked again.
I know, probably a super rare set of circumstances, but I’m not going to allow my work to root my phone again. They can buy me a phone if they need so much control.
Periodically rotating passwords is against NIST policy. Ask IT why the insist on using it when everyone, even the government, says it’s insecure
Even hard shutdown and rebbot brought you into work profile?
Well then, lemme give you something more specific to look into:
Most Android Phones kinda hide the option to turn the Work-Profile on. But it is implemented at the core of android and should really be available on any android device thats from the last 5 years.
Once you turn it on once you will be always able to see it. And you will also get one of those buttons available in your notification center. Just like those, that turn on and off your Wifi - this one will turn on your work profile. Or off - if Off, alllll the apps installed in the work profile will be disabled completely until you enable the work profile again.
Very handy for splitting private and work stuff - since you can just turn off work profile when you walk out of the office and wont be bothered anymore.
Lets get to the turnings thing on part:
You simply need one app to activate the work profile.
“Shelter” –> this app is not on the google playstore.
This app is in the F-Droid Store. Since this is also a new thing lemme explain this real quick. F-Droid is an store just like Google Play Store. You can download and install apps from there. It comes as an app for your device, or you can just simply browse it in the webbrowser and download the apps you want from it from there. The F-Droid Store is well known in the Opem Source Community and is the Go-To Place if you want privacy respecting apps. - I am saying this to make sure you can trust this new and to you unknown store.
Soooo. Back to the topic. Download either the complete F-Droid Store and in this app then search for the “Shelter” app - or simply download the shelter app once from the Website of F-Droid directly. Keep in mind if you go with the downloading F-Droid route: on its first launch, F-Droid will take ~30 secs to update its repositories and you wont find any apps in the search menu. So let it stay put for a few secs before starting your search.
To make it as less of a hassle as possible ill go forward and describe the route where we will install the app directly from the website.
I hope this helps ya!
Thank you! Thank you!! I’m on a pixel 7. I looked last night and saw that i can set my phone to have multiple users or guest. I think i used f-droid for Lemmy apps last year. I’ll work on shelter today. I think we have until the end of the month before they start requiring Cisco duo. One other thing- as a public school district we’re subject to open records requests. As i understand it, we can be required to share any device we’ve used for work. I wonder if having two profiles would limit what i would have to share to only the work profile
FYI there is also “Island” (white triangles on blue yellow background) on the Google Play Store which does similar if you don’t want to bother with FDroid.
I use it for isolating work apps, only oddity is having to install a second instance of my favourite keyboard and browser app, and if I want to attach a photo to say Teams, the file picker will show nothing until you switch it to browse personal files.
On pixel it should just be in multi User setting, but you will have to search for it in the settings search
You are welcome!
Yepp multiple users is a whole different but also great area.
Using the work apps feature thingy you wont have to switch profiles and push messages are more readily available (not as much delayed as if you chose to use a guest profile).