When I used CalyxOS, that work profile was something I appreciated a lot.
HOWEVER, you can only have work profile on the Owner profile, not another User Profile. So the way @passwordless has GrapheneOS set up, where Owner is just for installing apps to shuttle them to separate user profiles, is incompatible.
I personally do miss having the work profile and if I had known of this limitation ahead of time, I would be using the Owner profile as my main profile, which will have Shelter running and managing my work profile.
There is this other feature in Android called Private Space, which is similar to work profiles. Main difference is work profiles are managed by another app, while Private Space is a native Android feature and GrapheneOS recommends it over work profiles. But again, this is only available on the Owner profile.
EDIT: Even though Google says won’t work on secondary user profiles, GrapheneOS did some magic to allow Private Space to work on any user.
![]()
As all apps in GrapheneOS are sandboxed, many threat models might not even need separate user profiles, so it’s worth experimenting. It’s typical for users to go through multiple setups before finally settling on what they think works best for them.