Buy a GrapheneOS Phone or Install It Yourself?
An honest comparison of cost, effort and what you get, whichever way you choose.
Read article →HONEST COMPARISON
Wasted vs PF Shield: Android Panic-Wipe Apps Compared
A panic-wipe app promises that if your phone is lost, stolen or taken, it erases itself before anyone can get at your data. Free apps like Wasted made that idea popular on Android. But an app that runs as an ordinary "device admin" has limits that matter exactly when you need it. Here's how they work, where they fall short, and how PF Shield on our GrapheneOS phone is different.
What a panic-wipe app does
Every app in this category does the same basic thing: when something happens (a button, a code, a timer running out), it factory resets the phone. On a modern encrypted phone, a reset destroys the encryption keys, so the data left behind can't be read. The differences are in what can trigger the wipe, and whether someone holding your phone can stop it from happening.
Wasted
Wasted is a free, open-source app by the developer x13a, available from F-Droid. It was a genuinely useful project and many privacy-minded people still recommend it. It can wipe the phone from a panic button, a quick settings tile, a secret code sent in a message, a USB connection while the phone is locked, or when the phone hasn't been unlocked for a set time.
It does all of this through Android's Device Administration API, which lets an ordinary app lock and wipe the phone once you allow it. That's also where its limits come from:
- Safe mode stops it. Holding "Power off" on most Android phones offers to restart in safe mode, which starts the phone with every downloaded app switched off. Wasted's own documentation says it doesn't work in safe mode. While the phone is in safe mode, its timer can't run out and its triggers can't fire, so anyone who knows this can keep the phone in safe mode for as long as they like.
- Its timer isn't guaranteed. The "not unlocked for X time" trigger runs as a scheduled background job. Android treats jobs like this as best effort and can delay them to save battery. Wasted doesn't use Android's exact-alarm permission, and it was built before Android 14 changed the rules for apps that keep a service running in the background. The wipe may fire later than you set, and you can't easily tell.
- Duress needs a second app. Wiping when a duress password is entered needs a separate companion app, Duress, which watches the lock screen through Android's accessibility service. That's the same access spyware asks for, and it is also switched off in safe mode.
- It hasn't been updated in years. The latest release on F-Droid is version 1.5.10, from September 2022, and it targets Android 12L. The developer has noted that the design would need to change because Google has changed the device policy API it depends on.
Sentry
Sentry, by the same developer, is the companion that tries to close some of those gaps. It can limit how many wrong passwords are allowed before a wipe, and it can disable safe mode and USB data. The catch: disabling safe mode and USB data needs Sentry to be made the phone's device owner, which means connecting it to a computer and running an ADB command, usually on a phone with no accounts added yet. Most people never get that far. Its latest F-Droid release, 1.1.2, is also from September 2022.
Other wipe and anti-theft apps
Most other panic, anti-theft and "self-destruct" apps on the Play Store use the same Device Administration API. That gives them the same weak spots: downloaded apps don't run in safe mode, a device admin can't switch safe mode or developer options off, and timers depend on how much background work Android allows them. Since Android 9, Google has also been retiring parts of the device admin API in favour of device owner and work profile management, so these apps get less to work with over time.
Why device admin isn't enough
Android has two levels of control an app can be given. A device admin is an app you allow to lock or wipe the phone; it can't stop the phone being started in safe mode, and safe mode switches it off. A device owner can control settings such as safe mode and USB data, but it has to be set up deliberately, normally before the phone is in use. A wipe app is only as strong as the easiest way to get around it, and for a device admin app that way is a restart into safe mode.
How PF Shield is different
PF Shield is the set of wipe and lock protections in the Security Protocol on our PF Secured GrapheneOS Device. It's set up on the phone before it ships, rather than downloaded afterwards, and it's designed so it can't be switched off by restarting the phone a different way:
- Safe mode and developer mode are disabled, so the protections can't be bypassed by booting with them off or connecting a computer.
- Lock Timer: wipes the phone if it isn't unlocked for 14 days by default, a time you can change.
- Network Loss Timer: wipes the phone if it's kept offline for a set time, for example in a shielded bag.
- Multiple duress PINs: several alternative PINs that wipe the phone instead of unlocking it, with no extra app needed.
- Quick wipe: press the power button 7 to 8 times within 2 seconds.
- Remote wipe: wipes the phone when it receives a message you've chosen in advance.
- Passcode attempts: wipes the phone after a set number of wrong passcodes.
- Lock and data protection: an anti-snatch lock, USB data and file transfer permanently disabled, RAM cleared every four hours, a VPN kill switch, and automatic reboot back to the phone's most protected state.
You can see each one in action on our phone security features page.
Side by side
| Feature | Wasted | PF Shield |
|---|---|---|
| How it gets its power | Android's Device Administration API (an ordinary app you install) | Part of the phone's setup, configured before it ships |
| Survives safe mode | No: the developer says Wasted doesn't work in safe mode | Safe mode is disabled, so it can't be booted around |
| Developer options / USB debugging | Left on or off as you set them | Disabled |
| Lock timer (dead man's switch) | A background job Android may delay | Yes, 14 days by default, adjustable |
| Network loss timer | No | Yes |
| Duress PIN | Needs a second app (Duress) with accessibility access | Several duress PINs, built in |
| Quick wipe by power button | No | Yes |
| Remote wipe by message | Yes, by secret code | Yes, by a message you choose |
| USB data | Can trigger on a USB connection while locked | USB data and file transfer permanently disabled |
| Last release | 1.5.10, September 2022 | Maintained by us |
What about GrapheneOS on its own?
To be fair to the alternatives: GrapheneOS already includes some of this without any app. It has its own duress PIN and password, and it restarts the phone automatically after it has been locked for a while, which puts it back in its most protected state (see AFU vs BFU). If you run GrapheneOS, those built-in features are a better choice than a device admin wipe app. PF Shield adds the timers, quick wipe, remote wipe, safe mode and USB lockdown on top, all set up for you.
Which should you choose?
Use Wasted if you want a free, quick improvement on a phone you already own and understand its limits: it will help against a casual thief, but not against someone who knows to restart into safe mode. Pair it with Sentry as device owner if you're comfortable with ADB.
Choose PF Shield if you need the protections to hold up when someone has your phone and knows what they're doing. It comes ready on the PF Secured GrapheneOS Device, or can be added to your own compatible Pixel with the Software Flash License.
Worried something is already on your phone? Run our free spyware scan first.
Privacy First is not affiliated with Wasted, Sentry, their developer or the GrapheneOS project. Details of Wasted and Sentry are from their public source code and F-Droid listings as of October 2026.