SafetyNet Compatible ROMs - Magisk

I maintain a few devices for my family members, and as I'm seeing more and more apps requiring SafetyNet checks for compatibility, I'm afraid I'm going to need to change my typical phh SuperUser setup I've been using in favor of using Magisk for root, since it can pass a SafetyNet check.
Are most ROMs out there able to pass SafetyNet if rooted with Magisk? I'm currently using OmniROM on most of my devices, but the dev team has explicitly stated that they don't support or recommend rooting. I know that a few ROMs specifically claim that they pass SafetyNet with Magisk. Is this the exception, or the norm?
What do I need to look for in a ROM to know if it will pass these checks?

wrkerr said:
I maintain a few devices for my family members, and as I'm seeing more and more apps requiring SafetyNet checks for compatibility, I'm afraid I'm going to need to change my typical phh SuperUser setup I've been using in favor of using Magisk for root, since it can pass a SafetyNet check.
Are most ROMs out there able to pass SafetyNet if rooted with Magisk? I'm currently using OmniROM on most of my devices, but the dev team has explicitly stated that they don't support or recommend rooting. I know that a few ROMs specifically claim that they pass SafetyNet with Magisk. Is this the exception, or the norm?
What do I need to look for in a ROM to know if it will pass these checks?
Click to expand...
Click to collapse
I think you need to have release keys and approved build fingerprint

Look at "Xiaomi SafetyNet Fix for Beta & C. ROMs" Xiaomi SafetyNet Fix for Beta & C. ROMsMagisk module. Use it as a base for your phone.
You can also look at the similar module for my device (LeEco Le Max 2)
https://forum.xda-developers.com/le-max-2/themes/magisk-how-to-pass-safetynet-check-t3617017
to see what changes should be made to Port the module to the new device.

Related

NEED HELP REVERTING TO PREVIOUS MAGISK VERSION AND FLASH

Hi,
I know MagiskHide is going away, and I am planning to upgrade to the Pixel 6 Pro in the next 1-2 weeks.
However, my Pixel 4 XL is still rooted on Android 11.
I opened Magisk last night and saw that there was an update and updated to:
Magisk: d7e7df3b (23010)
App: d7e7df3b (23010)
When I did this, Magiskhide and SafetyNet Check were completely removed. i know this will probably be inevitable in the future, but can anyone ptovide me link to the previous Magisk flash and app version, so I can reverse everything?
As of now, I can no longer use Android Pay and many of my previously hidden apps will no longer run.
diesteldorf said:
Hi,
I know MagiskHide is going away, and I am planning to upgrade to the Pixel 6 Pro in the next 1-2 weeks.
However, my Pixel 4 XL is still rooted on Android 11.
I opened Magisk last night and saw that there was an update and updated to:
Magisk: d7e7df3b (23010)
App: d7e7df3b (23010)
When I did this, Magiskhide and SafetyNet Check were completely removed. i know this will probably be inevitable in the future, but can anyone ptovide me link to the previous Magisk flash and app version, so I can reverse everything?
As of now, I can no longer use Android Pay and many of my previously hidden apps will no longer run.
Click to expand...
Click to collapse
If you are referring to the latest stable version, 23.0, it's in his Github.
GitHub - topjohnwu/Magisk: The Magic Mask for Android
The Magic Mask for Android. Contribute to topjohnwu/Magisk development by creating an account on GitHub.
github.com
Thanks.....so I'm planning to revert back to 23.0 and then use 23.0 to repatch the stock boot.img. Hoping that will restore Magiskhide and everything I had before the update.
At this point, I am planning to stick with Android 11 and just want to reverse the upgrade from last night.
Really appreciate your help.
You can try Magisk Alpha (t.me/magiskalpha)
It is a forked version of Magisk by one of its former lead developers. It has option to choose between zygisk and magisk hide. I tested it on Pixel 4 XL and 6 Pro where it was able to pass safetynet checks.

Can't pass safety net on LOS 19

I am having no luck passing SafetyNet on LineageOS 19 with the Magisk method on my Pixel 5. I have no issues getting it to pass on stock, PixelExperience, Proton ROMs.
Anyone had any luck with the latest LineageOS build?
Pixel86 said:
I am having no luck passing SafetyNet on LineageOS 19 with the Magisk method on my Pixel 5. I have no issues getting it to pass on stock, PixelExperience, Proton ROMs.
Anyone had any luck with the latest LineageOS build?
Click to expand...
Click to collapse
Universal SafetyNet Fix works great for most people to pass SafetyNet. However, since you're on a custom ROM, you may have to spoof a valid device fingerprint using MagiskHide Props Config.

questions about the right ROM for Note 8 (SM-N950F)

Hello,
my friend has a Samsung galaxy note 8 with the model SM-N950F and he was thinking about giving me his phone to install a custom ROM for him, the phone is running stock ROM.
my question is what is the most stable android 12/13 Rom ( AOSP ) that doesn't require rooting and has banking apps and the pen working fine, also what is the latest stable TWARP and Odin that works for that model ( because I had SM-G530h and some Odin versions didn't work with it ).
one more question is it available to go back to Stock ROM once again using Odin like with old Samsung phones and where can I find a trusted source as Sammobile doesn't seem to work for me for some reason?
thanks in advance for your help.
KingDark2010 said:
Hello,
my friend has a Samsung galaxy note 8 with the model SM-N950F and he was thinking about giving me his phone to install a custom ROM for him, the phone is running stock ROM.
my question is what is the most stable android 12/13 Rom ( AOSP ) that doesn't require rooting and has banking apps and the pen working fine, also what is the latest stable TWARP and Odin that works for that model ( because I had SM-G530h and some Odin versions didn't work with it ).
one more question is it available to go back to Stock ROM once again using Odin like with old Samsung phones and where can I find a trusted source as Sammobile doesn't seem to work for me for some reason?
thanks in advance for your help.
Click to expand...
Click to collapse
Your question is a contradiction. You're asking whether you can use a custom ROM without root but still pass Play Integrity and other checks? This is not possible. Simply having an unlocked bootloader makes your device fail. To pass Play Integrity and be able to use banking apps, the Universal SafetyNet Fix module is required for use with Magisk. Further, AOSP does not include any of the "frills" that Samsung preloads into their firmware, meaning that not all features may work, including the S Pen. If you want to try AOSP anyway, you can follow my guide here to install an AOSP GSI.
As for returning your device to stock using Odin, yes. Sammobile is a good source, but if it doesn't work for you, you can try Frija or Samfirm.js to download the firmware directly from Samsung's servers.
V0latyle said:
Your question is a contradiction. You're asking whether you can use a custom ROM without root but still pass Play Integrity and other checks? This is not possible. Simply having an unlocked bootloader makes your device fail. To pass Play Integrity and be able to use banking apps, the Universal SafetyNet Fix module is required for use with Magisk. Further, AOSP does not include any of the "frills" that Samsung preloads into their firmware, meaning that not all features may work, including the S Pen. If you want to try AOSP anyway, you can follow my guide here to install an AOSP GSI.
As for returning your device to stock using Odin, yes. Sammobile is a good source, but if it doesn't work for you, you can try Frija or Samfirm.js to download the firmware directly from Samsung's servers.
Click to expand...
Click to collapse
Frija is faster and I recommend it. SAMMobile forces users to register to their website and limit your DL-speed.
It's not strictly required to use Magisk. Some Custom ROMs by default spoof SafetyNet Attestation to BASIC and don't need Magisk.
But in the case of Custom ROMs like LineageOS (which doesn't spoof/hide the Unlocked Bootloader on purpose!), or Stock OneUI ROM, you do need to use Magisk + "MagiskHide Props Config" Magisk Module and set the fingerprint to Note8. If Note8 isnt available as a fingerprint, use SafetyNet-Fix Module.
Also, I don't use my Note 8 anymore, but we have Custom ROMs for Note8. I see we have LineageOS 20.0. Why use GSIs? They are much more unstable and buggy.
cyanGalaxy said:
Frija is faster and I recommend it. SAMMobile forces users to register to their website and limit your DL-speed.
It's not strictly required to use Magisk. Some Custom ROMs by default spoof SafetyNet Attestation to BASIC and don't need Magisk.
But in the case of Custom ROMs like LineageOS (which doesn't spoof/hide the Unlocked Bootloader on purpose!), or Stock OneUI ROM, you do need to use Magisk + "MagiskHide Props Config" Magisk Module and set the fingerprint to Note8. If Note8 isnt available as a fingerprint, use SafetyNet-Fix Module.
Also, I don't use my Note 8 anymore, but we have Custom ROMs for Note8. I see we have LineageOS 20.0. Why use GSIs? They are much more unstable and buggy.
Click to expand...
Click to collapse
LineageOS is largely developed as a GSI. Yes, in many cases, it is bundled with a device specific kernel as a complete ROM, but for Project Treble compliant devices, a Generic System Image is just that - a single generic system image that does not have any device specific functions and can be used with any kernel on any device. In that regard, the official AOSP GSIs are very stable, and any issues are usually involved with the kernel, not the system image.
KingDark2010 said:
Hello,
my friend has a Samsung galaxy note 8 with the model SM-N950F and he was thinking about giving me his phone to install a custom ROM for him, the phone is running stock ROM.
my question is what is the most stable android 12/13 Rom ( AOSP ) that doesn't require rooting and has banking apps and the pen working fine, also what is the latest stable TWARP and Odin that works for that model ( because I had SM-G530h and some Odin versions didn't work with it ).
one more question is it available to go back to Stock ROM once again using Odin like with old Samsung phones and where can I find a trusted source as Sammobile doesn't seem to work for me for some reason?
thanks in advance for your help.
Click to expand...
Click to collapse
To be able to use Banking Apps, the following practices are good.
Passing SafetyNet (you can check this with YASNAC from Play Store).
If you don't pass SafetyNet, use Magisk with one of the 2 modules mentioned above.
You may also need to enable Zygisk, Enforce DenyList, and add your Banking Apps to Magisk DenyList.
I use a Xiaomi Poco F3 with ArrowOS Custom ROM, it already contains patches to force SafetyNet to BASIC, and so I dont need any modules, but only Zygisk, Force DenyList, and add my Banking Apps to the DenyList and reboot ^^
V0latyle said:
LineageOS is largely developed as a GSI. Yes, in many cases, it is bundled with a device specific kernel as a complete ROM, but for Project Treble compliant devices, a Generic System Image means the system image can be used with the OEM kernel on any device, because everything specific to that device is contained within the kernel. In that regard, the official AOSP GSIs are very stable, and any issues are usually involved with the kernel, not the system image.
Click to expand...
Click to collapse
My Xiaomi Poco F3 (2021) supports Treble and GSI's are not at all usable/daily-drivable. Scratchy Sound, Missing Vibration etc..
cyanGalaxy said:
My Xiaomi Poco F3 (2021) supports Treble and GSI's are not at all usable/daily-drivable. Scratchy Sound, Missing Vibration etc..
Click to expand...
Click to collapse
What GSIs have you tried? I suspect that the device kernel is not fully Treble compliant.
V0latyle said:
What GSIs have you tried? I suspect that the device kernel is not fully Treble compliant.
Click to expand...
Click to collapse
V0latyle said:
What GSIs have you tried? I suspect that the device kernel is not fully Treble compliant.
Click to expand...
Click to collapse
Generic System Image releases | Platform | Android Developers
developer.android.com
The official Googley ones. Tho I don't mind, since I use an AOSP Custom ROM anyway (on my Xiaomi phone). My Note 8 is kept on OneUI 1.0... i miss the "Samsung Experience" dayz.. Yknow, the OS that came after TouchWiz. It had a rather professional-looking boxy design. Don't like the Huge padding and Rounded Corners of OneUI. The modern OneUI versions are also eh. Due to Samsung stuffing additional apps like TikTok and other rubbish as pre-installed apps.
cyanGalaxy said:
Generic System Image releases | Platform | Android Developers
developer.android.com
The official Googley ones. Tho I don't mind, since I use an AOSP Custom ROM anyway (on my Xiaomi phone). My Note 8 is kept on OneUI 1.0... i miss the "Samsung Experience" dayz.. Yknow, the OS that came after TouchWiz. It had a rather professional-looking boxy design. Don't like the Huge padding and Rounded Corners of OneUI. The modern OneUI versions are also eh. Due to Samsung stuffing additional apps like TikTok and other rubbish as pre-installed apps.
Click to expand...
Click to collapse
Huh. I've used both the "pure" GSIs from Android CI, as well as the Android Developer GSIs on my Tab A 8.0 with the CUK4 kernel. Everything works like it should. Make sure you're using the correct architecture and bitness for your device - most are arm64 - but in the off case that your Xiaomi isn't ARM, there will likely be a lot of issues.
Remember that while a Treble kernel should run any GSI, you still have to wipe data. You can't go from OEM firmware to GSI or vice versa without a data wipe; that cause a a lot of stability issues.
thanks for the replays and information guys regarding official releases of AOSP ROMs I haven't seen one that is higher than android 9 ( which is mainly the reason why we want to install a higher version due to compatibility issues with the company portal apps ) so any idea what is the most stable ROM for that model running android 10 or above

Question Mods to suggest?

Hi all, I am new to this kind of phone with stock Android, my last was Redmi Mi 9T with Magisk and Lsposed, safetynet passed and CustoMIUIzer.
With CustoMIUIzer I could disable the power menu while locked, now with my new Pixel 7 I really want to know which mods I can download, what apps do you recommend? For safetynet bypass I can simply install the usual mods from Magisk?
Thanks!
Er_Seraph said:
Hi all, I am new to this kind of phone with stock Android, my last was Redmi Mi 9T with Magisk and Lsposed, safetynet passed and CustoMIUIzer.
With CustoMIUIzer I could disable the power menu while locked, now with my new Pixel 7 I really want to know which mods I can download, what apps do you recommend? For safetynet bypass I can simply install the usual mods from Magisk?
Thanks!
Click to expand...
Click to collapse
SafetyNet is no longer relevant as it has been replaced by Play Integrity. See this thread.
Keep in mind that some modules may cause bootloops after updating. YMMV.

Question How to hide root and Magisk?

Objective : Be able to use UPI/Banking apps on rooted phone.
Problem : MIUI Security app detecting root access even after using 'Hide the Magisk App'.
I have a Redmi Note 11 (spes) running on xiaomi.eu - MIUI 13. It's rooted using Magisk v26.1.
I have hidden the Magisk app using it's in-built 'Hide the Magisk App' option. But when I do a security scan in the in-built MIUI Security app, it is able to detect root access and shows payment environment not secure.
How can I fix this?
Where did you get 26.2?
Sheist! said:
Where did you get 26.2?
Click to expand...
Click to collapse
My mistake, it's v26.1.
parker_04 said:
Objective : Be able to use UPI/Banking apps on rooted phone.
Problem : MIUI Security app detecting root access even after using 'Hide the Magisk App'.
I have a Redmi Note 11 (spes) running on xiaomi.eu - MIUI 13. It's rooted using Magisk v26.1.
I have hidden the Magisk app using it's in-built 'Hide the Magisk App' option. But when I do a security scan in the in-built MIUI Security app, it is able to detect root access and shows payment environment not secure.
How can I fix this?
Click to expand...
Click to collapse
This here: https://github.com/kdrag0n/safetynet-fix plus zygisk activated in magisk could be the way to go. Here's the thread of the project where you can find more information. Cheers
NeoPreacher said:
This here: https://github.com/kdrag0n/safetynet-fix plus zygisk activated in magisk could be the way to go. Here's the thread of the project where you can find more information. Cheers
Click to expand...
Click to collapse
Get the Displax version. Yes, with Zygisk and hide Magisk.
Release v2.4.0-MOD_1.2 · Displax/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - Release v2.4.0-MOD_1.2 · Displax/safetynet-fix
github.com

Categories

Resources