Does Beeswax work on my phone?
Beeswax has only been tested on GrapheneOS and stock Pixel OS so far. Other versions of Android haven't been tested yet.
Do I need a computer or a factory reset?
You need a computer with ADB once, during setup. Android only lets Beeswax manage a phone with no accounts, no other user profiles and no Private Spaces, so you'll remove those first. A factory reset always works if that's easier.
What if I forget my lock code?
Without your lock code, you can't access new apps you install and can't access apps you've blocked. You can still export all your data and access the apps you already have. If you need to install new apps or unblock apps, you'll need to factory reset your phone.
What doesn't work with Beeswax?
- You can't use Private Spaces or create other user profiles.
- Links that would open in a browser don't open while Beeswax is locked, unless you've allowed a browser.
- Apps with a built-in browser, like a help link or an in-app browser, may still open websites. Choose the apps you keep with that in mind.
Can an app I've allowed start letting me browse later?
Yes. Updates to an allowed app go through without your lock code, so an app could add a way to browse the web in a later update. If one does, enter your lock code and switch it off.
Can ADB get around Beeswax?
No. Once Beeswax is locked, it blocks debugging features until you deactivate it, so ADB can't be used to get around the lock.
How do I remove Beeswax?
Enter your lock code, tap Unlock, then tap Deactivate and confirm. See the setup guide (https://beeswax.getflourish.org/setup/) for more info.
Does Beeswax use AI?
Yes. This app was developed with Claude Opus 5.5. Its code was reviewed with Opus 5.5 and all issues were fixed or found inconsequential. More reviews are welcome.
Is Beeswax secure?
Beeswax uses the intended way to restrict devices on Android. It's tiny, requests one permission, and only does what it says. See more info in PRIVACY.md (https://beeswax.getflourish.org/privacy/). You can verify you got the real Beeswax APK using the SHA256 Signing Certificate (https://beeswax.getflourish.org/privacy/#verifying-a-release), and verify that its source code matches the released APK through reproducible builds (https://beeswax.getflourish.org/privacy/#reproducible-builds).
Is Beeswax privacy respecting?
Yes. There's no telemetry, one permission, and no network access.
What are the risks?
One risk with Beeswax, and device-owner apps in general, is the amount of trust you have to put in them. Device-owner apps are given a huge amount of permissions by Android. Beeswax uses only the few listed in PRIVACY.md (https://beeswax.getflourish.org/privacy/#device-management-apis-used), and they can be undone. See Risks to using Beeswax (https://beeswax.getflourish.org/privacy/#risks-to-using-beeswax) for more.
Will I always need ADB to activate Beeswax?
In the future, depending on GrapheneOS, Beeswax may be updated so you can install it and make it the device owner without ADB, through QR code provisioning during initial device setup (issue (https://github.com/GrapheneOS/platform_packages_apps_SetupWizard2/issues/35) / earlier attempt, closed (https://github.com/GrapheneOS/platform_packages_apps_SetupWizard2/pull/40)). You can add reactions to the issue to show support, but please only comment if you have something meaningful to add.
If GrapheneOS adds support for QR code provisioning, it will likely be added and then work on other Android devices.
What if I have an iPhone or iPad?
You should use Apple Configurator (guide1 (https://redlib.catsarch.com/r/nosurf/comments/1731ozp/how_to_turn_your_your_iphone_into_dumb_phone/) / guide2 (https://stopa.io/post/297)) to manage your devices, remove the browser and prevent new app installs. A macOS device and a factory reset of your iPhone/iPad are required for the initial setup. A new app (https://news.ycombinator.com/item?id=49982974) that claims to allow this setup without a factory reset has been released but I have not looked into it.