Android Private Space Versus a Work Profile and Cloned Apps

Choose Android 15+ Private Space when you need sensitive personal apps completely stopped and hidden whenever the space locks, choose an Android Work Profile when an employer manages work apps and policies alongside your personal apps, and choose OEM cloned apps only for a second messaging login on your main home screen. Picking the wrong container either leaves private apps visible in Settings and the Photo Picker or halts background sync and notifications that work, messaging, and medical apps require.

• Private Space (android.os.usertype.profile.PRIVATE, Android 15+): Stops the profile user completely when locked, silencing notifications, blocking sensor access, and hiding apps from the launcher, Recents, Settings, Sharesheet, Photopicker, and DocsUI. AOSP Private Space · Android Help
• Work Profile (android.os.usertype.profile.MANAGED, Android 5.0+): Starts at boot alongside the primary user, displays briefcase-badged apps and inline notifications under a Device Policy Client (DPC), and pauses only when toggled off or scheduled. AOSP Managed Profiles · Android Enterprise Help
• OEM Cloned Apps (such as Samsung Dual Messenger): Places a second badged copy of a supported messaging app on the main Apps screen with no separate profile lock, no pause switch, and a shared contact list unless you manually separate contacts. Samsung Dual Messenger Support
• Coexistence on Android 15+: A Private profile can exist on the same device alongside both a Work profile and a Clone profile, provided the phone is unmanaged and stays within Android’s 4-user/profile limit. AOSP Private Space · Android Help

This breakdown sits with our other Android how-to setup and troubleshooting guides.

How do Private Space, a Work Profile, and cloned apps compare at a glance?

The core architectural difference is whether the container stops its user process and disappears from system pickers when locked, stays active under enterprise policy until paused, or simply duplicates a messaging app on your main home screen. On Galaxy phones and tablets, Samsung also offers Secure Folder, which uses its own passcode and notification rules distinct from both Android 15 Private Space and Dual Messenger. AOSP Private Space · AOSP Managed Profiles · Samsung Secure Folder Support

Sources: AOSP Security and Enterprise specifications, Google Android Help, Google Android Enterprise Help, and Samsung Support US documentation. AOSP Private Space · Android Help · AOSP Managed Profiles · Android Enterprise Help · Samsung Dual Messenger · Samsung Secure Folder

How do Android user IDs and profile types separate these spaces?

Android isolates full profiles by assigning each profile user a separate user ID (userid), which shifts every app’s Linux process UID and points its private storage to a separate /data/user/userid directory. When you install an app inside Private Space or a Work Profile, Android treats it as a separate installation in that profile with its own account list and isolated data directory rather than sharing the main user’s app sandbox. AOSP Private Space · AOSP Managed Profiles

In AOSP’s managed-profile architecture, a profile operates as a secondary user associated with the primary user (userid = 0). The system computes each running app’s process UID using the formula:

uid = 100000 * userid + appid

Example calculation (assuming appid = 10145 for an installed app across userid = 0 and a secondary profile userid = 10):

• In the primary user profile (userid = 0), the process UID is 100000 × 0 + 10145 = 10145, and app data lives under /data/user/0.
• In a profile with userid = 10, the same package receives UID 100000 × 10 + 10145 = 1010145, and its app data is segregated under /data/user/10. AOSP Managed Profiles

Because AccountManagerService maintains a separate account list per user and apps cannot communicate across the profile boundary without holding INTERACT_ACROSS_PROFILES permission or App-ops, two instances of the same app run independently. In Private Space (android.os.usertype.profile.PRIVATE), installing an app is always treated as a fresh app install—Android Help explicitly notes that you cannot move an app’s existing data from the main space into Private Space. AOSP Private Space · Android Help · AOSP Managed Profiles

Why Android 15+ Private Space has strict eligibility gates

Unlike an OEM app cloner, Private Space cannot be enabled on every phone or user account. Google’s Android Help documentation specifies that Private Space is available only when all of the following conditions hold:

1. OS and hardware: The device runs Android 15 and up on supporting hardware, and the feature has not been disabled by the device manufacturer or an Enterprise Admin.
2. No whole-device management or supervision: The phone is not a managed device, and no supervised account is signed in on the main space.
3. Main user only: You are signed in as the main user of the device (never a guest user or a secondary user), and only one instance of Private Space can exist on a device.
4. User and profile ceiling: The device does not have more than 4 users or profiles. AOSP Private Space · Android Help

You can verify whether a multi-user phone still has room for Private Space with a direct slot check:

remaining_profile_slots = 4 - current_users_and_profiles

Example calculation (assuming a phone has 1 main user, 1 Work Profile, 1 secondary user, and 1 guest/clone profile): current_users_and_profiles = 1 + 1 + 1 + 1 = 4, leaving 4 - 4 = 0 additional slots before crossing the "more than 4 users or profiles" exclusion. Adding a fifth user or profile blocks Private Space creation until an existing secondary user or profile is removed. Android Help · AOSP Custom User Types

Dominant failure mode: Following a “Dual Apps” or “Dual Messenger” guide on a phone running Android 14 or an enterprise-managed phone, assuming an app cloner provides Private Space isolation. Prevention: Check Settings > Security & privacy > Private space first; if the phone is below Android 15 or is a managed device, Dual Messenger will not hide the app or stop its background processes. Android Help · Samsung Dual Messenger

How Samsung Dual Messenger differs from a full privacy profile

On Galaxy phones and tablets (Settings > Advanced features > Dual Messenger), Dual Messenger is built strictly to let you sign in to a second account inside supported messaging or social media apps. Once installed, the second copy sits directly on your main Apps screen with a small Dual Messenger badge on its icon. Samsung Dual Messenger

Dual Messenger provides no passcode lock, no hidden launcher container, and no profile pause toggle. By default, the second app also shares your main contact list unless you return to Settings > Advanced features > Dual Messenger, tap Use separate contacts list, turn on the switch, and manually select which contacts the second app may see. Images downloaded inside a Dual Messenger app may not show up in the main Gallery app; Samsung routes them to My Files > Internal storage (Dual Messenger) > DCIM > Messenger app folder. Samsung Dual Messenger

What stops when you lock Private Space versus pausing a Work Profile?

Locking Android 15+ Private Space stops the entire private profile user immediately, whereas a Work Profile keeps running alongside your personal apps until you or a schedule explicitly pause it. That runtime difference determines whether alarms, medical sensors, chat sync, and push notifications survive when you put the phone in your pocket. AOSP Private Space · Android Help · Android Enterprise Help

Private Space locked vs. unlocked state

When Private Space is locked (UserManager.isQuietModeEnabled in AOSP), the private profile user is placed in a stopped state:

• Zero foreground or background execution: Apps inside Private Space are completely stopped and cannot perform foreground or background activities.
• Zero notifications: Stopped Private Space apps cannot post notifications. Only when Private Space is unlocked do notifications appear, marked with the Private Space lock icon.
• No sensor access: While locked, Private Space apps cannot read device sensors or perform background tracking. Google Android Help specifically warns that medical apps cannot track health information when locked, so apps that must run continuously in the background do not belong in Private Space. Apps outside Private Space keep running normally. AOSP Private Space · Android Help

Inside Private Space settings (Private space > Settings > Lock private space automatically), Android 15+ gives you three automatic lock timers:

1. Every time device locks: Private Space locks whenever the phone’s screen locks.
2. 5 minutes after screen timeout: Private Space locks 5 minutes after the display times out from inactivity (Settings > Display > Screen timeout).
3. Only after the device restarts: Private Space stays unlocked across normal screen locks and locks automatically only when the phone restarts (restart locking also applies by default to the other two options). Android Help

Work Profile running vs. paused state (Android 7.0+)

An Android Work Profile is designed to stay awake during your workday. It starts with the primary user at boot time, shares the activity stack via ActivityManagerService, and displays briefcase-badged notifications inline with personal notifications. AOSP Managed Profiles · Android Enterprise Help

When you pause (“turn off”) a Work Profile on Android 7.0 or higher, the system disables the work profile via WorkModeSwitch:

• What stops when paused: Work apps do not run, generate notifications, or consume mobile/Wi-Fi data or battery life, and work widgets become inaccessible. Tapping a grayed-out work app prompts you to turn the Work Profile back on.
• Three ways to pause: Toggle the Pause work apps switch at the bottom of the Work tab in the app drawer, tap the Work tile in Quick Settings (dimmed when paused, illuminated when running), or set an automatic schedule under Settings > Digital Wellbeing > Work apps schedule > Schedule work apps.
• Two scheduling and enterprise limits: First, Google Android Enterprise Help states that Work Profile scheduling does not allow work apps to be paused continuously for consecutive days (such as over a weekend). Second, on a company-owned device, your IT administrator can cap how long the Work Profile is allowed to stay paused and call setPersonalAppsSuspended to suspend access to your personal apps and data until you turn the Work Profile back on. AOSP Managed Profiles · Android Enterprise Help

How Samsung Secure Folder handles locked notifications

On a supported Galaxy phone or tablet, locking Secure Folder does not automatically stop background work or silence alerts the way locking Private Space does. Inside Settings > Security and privacy > More security settings > Secure Folder > Notifications, Samsung provides a toggle to allow notifications from apps in Secure Folder to be displayed even when Secure Folder is locked. Samsung Secure Folder

To stop all apps and notifications inside Secure Folder completely, you must open Secure Folder, tap More options (three vertical dots) > Encrypt. Samsung notes that while encrypted, all apps and their notifications stop working until you reopen Secure Folder and tap Decrypt. In addition, starting from Android 16 with One UI 8, Samsung removed the “Each time I leave an app” auto-lock option—making When screen turns off the default auto-lock setting—and added a manual More options > Lock and exit command inside Secure Folder. Samsung Secure Folder

Rule of thumb: If an app must deliver real-time push alerts or read health/location sensors while the phone sits locked in your pocket, keep it out of Android 15 Private Space (or set Private Space auto-lock to Only after the device restarts only if you accept the space staying unlocked between reboots). If an app in your main profile stops alerting even when no Private Space lock or Work Profile pause is active, run through our Android notification troubleshooting checks. Android Help

Which system surfaces, pickers, and files cross the profile boundary?

A Work Profile separates app data and corporate policy without hiding the existence of your work apps, whereas a locked Private Space removes its apps and media from the launcher, Recents, Settings, Sharesheet, Photopicker, and DocsUI. Understanding which system surfaces change state prevents both accidental data exposure and confusion when searching for files. AOSP Private Space · Android Help · AOSP Managed Profiles

Sources: AOSP Private Space and Managed Profile specifications, Google Android Help, and Google Android Enterprise Help. AOSP Private Space · Android Help · AOSP Managed Profiles · Android Enterprise Help

Hiding the Private Space container and reading disguise prompts

By default, locking Private Space collapses its apps into a locked bar at the bottom of All Apps. For stronger visual privacy against someone borrowing your unlocked phone, open Private Space, tap Settings, and enable Hide private space when it’s locked (which takes effect the next time Private Space locks). Android Help

When the container is hidden and locked, you unlock it by opening All Apps and typing "Private space" into the search bar, then tapping Private space: Tap to set up or open. Google Android Help notes two deliberate anti-enumeration details in the UI:

1. Searching "Private space" can display Private space: Tap to set up or open even on a phone where Private Space has never been set up.
2. Under Settings > System > Reset Options, the Delete private space (“Reset private space”) action also appears when no Private Space exists on the phone. Android Help

Neither prompt lets a casual observer prove that a hidden Private Space is configured on the device. Note, however, that third-party launcher apps must hold android.permission.ACCESS_HIDDEN_PROFILES and the ROLE_HOME role (RoleManager.ROLE_HOME) to support Private Space; Google warns that some non-default launcher apps do not support Private Space. For broader differences between Google’s Pixel launcher and Samsung’s One UI home screen and Secure Folder menus, see our Pixel Android vs. Samsung One UI software comparison. AOSP Private Space · Android Help

Moving or copying files into Private Space vs. Secure Folder

When you want to bring existing documents or photos from your main profile into Private Space, Google Android Help documents opening Private Space and tapping + Add > Add files (a system file-picker workflow that AOSP’s security specification labels In Android 16 QPR2 and higher). After selecting one or more files from main storage, you choose between two actions:

• Copy: Leaves the original file in your main profile and places a copy in the Downloads folder of your Private Space storage.
• Move: Adds the file to the Private Space Downloads folder and deletes the original from your main profile once the foreground transfer service finishes. AOSP Private Space · Android Help

Android Help notes that a file transfer into Private Space fails if the file is currently in use, is renamed or deleted after the transfer starts, exceeds available device storage, or if Private Space locks while the files are moving. On a Galaxy device using Secure Folder, you can move local or SD-card files in at any time from Gallery or My Files via More > Move to Secure Folder (even without signing into Secure Folder first), whereas files stored only in a cloud account cannot be moved directly into Secure Folder. Android Help · Samsung Secure Folder

What can an employer see in a Work Profile—and where does Private Space still leak?

In a BYOD Work Profile, your employer’s IT admin controls only the work container and cannot inspect your personal apps or photos, whereas in Private Space the biggest privacy leaks come from reusing your main Google Account, assuming your main VPN covers Private Space, or connecting the phone to a computer. Android Help · AOSP Managed Profiles · Android Enterprise Help

BYOD vs. company-owned Work Profile boundaries

When you enroll a personal phone in a Bring Your Own Device (BYOD) Work Profile (Android 5.0+), an Enterprise Mobility Management (EMM) Device Policy Client (DPC) app acts as the profile owner via DevicePolicyManager:

• Personal space stays private: Google Android Enterprise Help and AOSP state that the organization manages only the work profile (work apps, work accounts, and work data), while your personal apps, data, and usage remain private.
• Shared device-level exceptions: Settings enforcement is restricted to the work profile except for lockscreen and encryption settings, which apply across the entire device. Wi-Fi, Bluetooth, NFC, input methods (IME), and accessibility services are also shared system-wide.
• Hardware identifier protection (Android 12+): On personal devices with a work profile running Android 12 or higher, Android removes admin access to hardware identifiers (IMEI, MEID, and serial number) and substitutes an organization-scoped enrollment-specific ID that stays stable across factory resets for inventory tracking.
• Company-owned devices with a work profile (Android 11+): If the phone is owned or provided by your employer (isOrganizationOwnedDeviceWithManagedProfile()), the admin gains additional device-wide policies outside the work profile—including installSystemUpdate, setScreenCaptureDisabled, and setPersonalAppsSuspended (which can suspend personal apps if the work profile stays paused past an admin-defined limit). AOSP Managed Profiles · Android Enterprise Help · Android Enterprise Pause Help

Note that you cannot set up a Work Profile inside Private Space, and Private Space is blocked entirely on fully managed devices or when disabled by an Enterprise Admin. Android Help

Four Private Space exposure paths to check before relying on it

Google’s Android Help documentation explicitly warns that Private Space is not invisible to every channel on the phone. Check these four boundaries during setup:

1. Main Google Account sync leaks: Private Space does not automatically read accounts from your main profile, but if you sign into Private Space using the same Google Account that is signed in on your main space or another device, synced data will surface outside Private Space. Google lists synced photos, files, emails, contacts, calendar events, app download history and recommendations, browsing history, bookmarks, saved passwords, and suggested content from Private Space activity. Always use a dedicated Google Account that is not signed in elsewhere.
2. Device VPN bypass: Android Help states flatly that Private Space apps bypass virtual private network (VPN) connections on the device. Do not rely on a VPN running in your main profile to tunnel traffic from apps inside Private Space.
3. One-way Bluetooth, no Quick Share receive, and no widgets: Private Space apps can send content over Bluetooth without the shared file or metadata revealing Private Space, but they cannot receive content over Bluetooth (Private Space does not appear as a Bluetooth share target or display incoming Bluetooth share notifications) and cannot receive content directly from Quick Share. Private Space also blocks adding home-screen widgets or shortcuts, dragging files to Workspace, pairing smart home devices, using Find Hub, and using voice commands.
4. Computer (adb), device logs, and app detection: You cannot hide the existence of Private Space from people who connect your phone to a computer (including Android Debug Bridge (adb) commands), read device logs, install apps on your phone, or use other installed apps capable of detecting Private Space and the apps inside it. Android Help

How do backups, new-phone transfers, and forgotten passcodes behave across each space?

Standard Android cloud backups and initial setup cable/wireless transfers do not back up or restore Private Space, cannot restore a personal Google Account backup onto a work-profile setup, and provide no passcode recovery if you forget a custom Private Space lock. Before switching phones or locking away important files, verify how your chosen container handles migration and credential loss. Android Help · Samsung Secure Folder

• Private Space backup and forgotten-lock rules:
  • No device backup: Private Space app data and on-device files are not backed up or restored as part of an Android device backup. Only data that an individual app syncs to its own cloud servers returns when you reinstall and sign in to that app.
  • No unlock factor recovery: If you set a separate PIN, pattern, or password for Private Space and forget it, there is no unlock factor recovery—you cannot access the space. Your only option is to delete/reset Private Space using your main device PIN under Settings > System > Reset Options > Delete private space (or inside Settings > Security & privacy > Private space > Delete private space if you still know the lock), which permanently deletes all Private Space apps and unbacked-up local data. Android Help
• Work Profile backup and removal rules:
  • Personal backup exclusion during setup: Google’s Android backup rules state that you cannot use a personal Google Account device backup when setting up a personal device with a work profile, a work-only device, or a company-owned device.
  • Removing a Work Profile: On a personally owned device (or a company device whose ownership was relinquished to you), opening Settings > Passwords and accounts > Work tab > Remove Work Profile > Delete removes all work apps and local data within that profile while leaving your personal profile intact. Android Enterprise Help
• Samsung Secure Folder migration and passcode reset:
  • Smart Switch transfer: Samsung states that cloud backup is no longer supported for Secure Folder (though you can still restore data from previous Samsung account backups under Secure Folder > More options > Settings > Restore from backup). To move an active Secure Folder to a new Galaxy device, open Smart Switch, connect the phones by USB cable or place them within 4 inches of each other for a wireless transfer, expand Apps, and select Secure Folder.
  • Forgotten passcode recovery: You can reset a forgotten Secure Folder PIN, pattern, or password (Forgot > Reset) only if you enabled Reset with Samsung account when you set up the security method. If Reset with Samsung account was left off, access cannot be recovered; you can only uninstall/remove Secure Folder (optionally moving media files out during regular uninstallation when unlocked). Samsung Secure Folder

Before erasing an old device, walk through our complete new Android phone setup, transfer, and backup verification checklist so files inside Private Space Downloads, Internal storage (Dual Messenger) > DCIM, or Secure Folder are exported first. Android Help · Samsung Dual Messenger · Samsung Secure Folder

Which Android isolation boundary matches your goal?

Use the three scenarios below to match your exact privacy, enterprise, or multi-account requirement before installing apps or moving files:

For more step-by-step device configuration and troubleshooting walkthroughs, return to our Android how-to guides.

Technical sources

1. Android Open Source Project (AOSP): Private space (Security Features documentation, last updated 30 September 2026 UTC), covering android.os.usertype.profile.PRIVATE, stopped-user behavior when locked, launcher/Settings/Sharesheet/Photopicker/DocsUI visibility, telephony intent routing, single-instance main-user rules, and Android 16 QPR2+ file transfers into Private Space Downloads.
2. Google Android Help: Hide sensitive apps with private space (Android 15 and up documentation), covering eligibility requirements, the 4-user/profile ceiling, stopped-app and medical-sensor warnings, the three auto-lock timers, hiding the container, file Copy/Move behavior, dedicated Google Account recommendations, VPN bypass, Bluetooth/Quick Share limits, ADB/computer discovery, and non-backed-up deletion/reset rules.
3. Android Open Source Project (AOSP): Employ work profiles (Enterprise Managed Profiles specification, last updated 22 September 2026 UTC), covering uid = 100000 * userid + appid process isolation, /data/user/userid storage, DevicePolicyManager and DPC profile owners, INTERACT_ACROSS_PROFILES, Android 12+ enrollment-specific IDs on BYOD, company-owned device policies, WorkModeSwitch, and blue (#1A73E8) briefcase badging.
4. Google Android Enterprise Help: What is an Android Work Profile? (Android 5.0 and later documentation), covering personal-space privacy on BYOD devices, Android 11+ personal SMS/MMS access restrictions, Android 14+ Settings searchability, and removing a Work Profile.
5. Google Android Enterprise Help: Pause or turn on your Work Profile (Android 7.0 and later documentation), covering paused app/notification/battery behavior, company-owned pause limits, Work tab and Quick Settings toggles, and the Digital Wellbeing Work apps schedule consecutive-day weekend limitation.
6. Android Open Source Project (AOSP): Implement custom user types (Enterprise Multi-user specification, last updated 22 September 2026 UTC), covering config_user_types.xml profile definitions and android.os.usertype.profile.MANAGED badge and restriction attributes.
7. Samsung Support US: Set up Dual Messenger on your Galaxy phone or tablet (Answer ANS10001650), covering Settings > Advanced features > Dual Messenger setup, Use separate contacts list, Internal storage (Dual Messenger) > DCIM media storage, and Delete all my data removal.
8. Samsung Support US: Use the Secure Folder on your Galaxy phone or tablet (Answer ANS10001401), covering Secure Folder setup, optional Reset with Samsung account passcode recovery, locked notification display vs. manual More options > Encrypt, Smart Switch wireless (within 4 inches) and wired transfers, and Android 16 with One UI 8 When screen turns off and Lock and exit changes.