I have a rooted (magisk 24.3) Nord N10 5G, I have enabled zygota and installed the safetynet fix from github.
Using "yet another safetynet checker" app, my phone went from fail to pass in both SafetyNet checks.
I've also installed Snapchat and verified that it works (supposedly it shouldn't if you don't pass safetynet?).
However, Google Pay says "Phone does not meet security requirements"
So... is there any way to make it work?
AVAndronov said:
I have a rooted (magisk 24.3) Nord N10 5G, I have enabled zygota and installed the safetynet fix from github.
Using "yet another safetynet checker" app, my phone went from fail to pass in both SafetyNet checks.
I've also installed Snapchat and verified that it works (supposedly it shouldn't if you don't pass safetynet?).
However, Google Pay says "Phone does not meet security requirements"
So... is there any way to make it work?
Click to expand...
Click to collapse
Make sure you have Magisk Props Config, Universal Safetynet fix, and if those don't work try Shamiko https://t.me/magiskalpha
Download the latest Release.zip from telegram and install through Magisk. Then you'll have to enable the Denylist in the settings and then select Google Pay app and all your Google services and apps etc. Afterwards untick the "enforce denylist" since Shamiko will enforce your denylist now. Shamiko uses the Magisk list I believe but you must have it disabled after you're done selecting your apps like I said above.
JazzieBoi said:
Make sure you have Magisk Props Config, Universal Safetynet fix, and if those don't work try Shamiko https://t.me/magiskalpha
Download the latest Release.zip from telegram and install through Magisk. Then you'll have to enable the Denylist in the settings and then select Google Pay app and all your Google services and apps etc. Afterwards untick the "enforce denylist" since Shamiko will enforce your denylist now. Shamiko uses the Magisk list I believe but you must have it disabled after you're done selecting your apps like I said above.
Click to expand...
Click to collapse
Thank you.
For some reason, it did not occur to me that I should Denylist the Google apps. After I've added GPay to the list, it now passes all security checks., and I don't need any props config or Shamiko, just the Safetynet fix is enough!
AVAndronov said:
Thank you.
For some reason, it did not occur to me that I should Denylist the Google apps. After I've added GPay to the list, it now passes all security checks., and I don't need any props config or Shamiko, just the Safetynet fix is enough!
Click to expand...
Click to collapse
Okay I'm pleased to hear you've fixed it. Essentially, you'd only need Shamiko if you're having problems with certain apps like bank apps and things of that nature. Glad you can use GPay now. Enjoy your phone.
Is anyone one else having any issues getting GPay to work on the latest 11.0.10 security patch by chance?
I think I may have just done something out of order. I have 2 Nord N10 5Gs, one is on 11.0.0 and working fine, and I'm trying to setup the other one on 11.0.10 ... and I'm currently having issues.
I actually am able to get safetynet to pass the checks fine, but sometimes GPay seems to still insist that the "Phone does not meet security requirements". I even have zygisk enabled and GPay and services blocked.
One thing though, Google Play Services never stays checked in the Deny List for me. Does anyone else experience this too?
In general, it seems that with the latest security patch, i have to freeze the Magisk app otherwise several apps seem to detect it now, even with zygisk, hide, and renaming the magisk app package.
EDIT: The answer was too simple. MagiskHidePropsConfig, and spoof a valid device profile.
Related
Been out of the root game for about 2 years now. I want to root the pixel 6. I take it it'll be the same as a couple years ago that root will cause gpay to not work even if safetynet passes. Is there a workaround to get gpay working at the moment?
Is there any other feature / apps that will stop working
Thanks
If you're planning to root, GPay will most likely detect your device was been tempered with unless you install Magisk to hide your root.
I'm using GPay on my Pixel 5 with Magisk 23014 and Universal SafetyNet Fix 2.2.0.
Download Magisk Canary 23014
In Magisk, go to Settings, enable Zygisk, enable Enforce DenyList
Download USNF 2.2.0 and install it in Magisk.
Reboot.
Open Magisk again, go to Settings, Configure DenyList.
Enable DenyList on ALL components of Google Play Services, Google Play Store, and GPay.
SafetyNet should now pass, and GPay should work.
You don't need to deny anything. My deny list is empty and off.
LLStarks said:
You don't need to deny anything. My deny list is empty and off.
Click to expand...
Click to collapse
Huh. I was just doing the same thing I did on Magisk 23001 with USNF 2.1.1.
Some apps will need to have root and Magisk hidden in order to function.
V0latyle said:
Huh. I was just doing the same thing I did on Magisk 23001 with USNF 2.1.1.
Some apps will need to have root and Magisk hidden in order to function.
Click to expand...
Click to collapse
This is unnecessary for current GPay operability.
Magisk 23014 + Hide Magisk (for all those apps that may specifically look for it) + USNF 2.2 + Zygisk Enabled + DenyList (add specific apps (not GPay or Google Play *) that still detect root (YMMV)).
SafetyNet (i.e. YASNAC to check, etc.) should pass and GPay should work.
It was even put in to USNF 2.2:
magisk: Remove Play Services from DenyList earlier · kdrag0n/[email protected]
This ensures that GMS will never start before it's removed from the DenyList, even if another module's service.sh is blocking our script. Suggested-by: osm0sis <[email protected]>
github.com
pershoot said:
This is unnecessary for current GPay operability.
Magisk 23014 + Hide Magisk (for all those apps that may specifically look for it) + USNF 2.2 + Zygisk Enabled + DenyList (add specific apps (not GPay or Google Play *) that still detect root (YMMV)).
SafetyNet (i.e. YASNAC to check, etc.) should pass and GPay should work.
It was even put in to USNF 2.2:
magisk: Remove Play Services from DenyList earlier · kdrag0n/[email protected]
This ensures that GMS will never start before it's removed from the DenyList, even if another module's service.sh is blocking our script. Suggested-by: osm0sis <[email protected]>
github.com
Click to expand...
Click to collapse
Nifty. Thanks for the update.
Hi all,
I'm trying to get safetynet to pass when using magisk alpha with Zygisk disabled. The reason I'm doing this is that there is an app I used that seemed to rely on the pre-zygisk Magisk setup, which no longer works when Zygisk is enabled.
So far I have patched the boot.img with the latest Magisk Alpha, have disabled Zygisk, and have both enabled MagiskHide and configured it (I assume even though it's configured in the deny list section, this still acts as the list of apps to hide). I've then installed Riru and USNF 2.1.3 (the latest non-zygisk version), however when using YASNC, both the checks fail.
I've tried enabling/disabling MagiskHide as well as clearing caches, but YASNC continues to report failures.
Has anyone got a setup like the one I describe passing with a Pixel 6 or Pixel 6 pro?
Lets try it
Is that the Zygisk version? Or is there a 2.2.1 for riru?
Olorin92 said:
Is that the Zygisk version? Or is there a 2.2.1 for riru?
Click to expand...
Click to collapse
Im using it with riru
So when I use that it tells me it's disabled because Zygisk is disabled - I assume you have Zygisk enabled?
I'm trying to make it work without Zygisk.
TThis?
Yep when using that one I get a message saying it's not compatible when zygisk disabled.
Is yours working with zygisk disabled? Maybe you could send a screenshot of your setup and modules?
As the title suggests, I can't get google pay etc to work with magisk enabled. I followed the procedure:
1) open magisk manager 25.1, go to settings activate zygisk and target:
PlayStore, wallet, Google playservice
2) install modules:
-universal safetynetfix 2.3.1
-lposed zygisk
-shamiko zygisk
I Hide a app magisk to the settings
Delete data to wallet, playservice and playstore reboot system
3) open lsposed and install xprivacylua and reboot
To reboot select Googleplayservice and framework "restrict"
Delete again data to PlayStore service and wallet and restart
Meets_device_integrity not pass a test
By installing the magisk hideconfing props module, and putting a certified "pixel 6pro" fingerprint I was able to get it through. The only problem is that the realme gt2 pro is not in the device list and thus the fingerprint sensor stops working!
Is there a solution?
Sorry for my bad english, i'am italian
I am running
Magisk 25.2
Shamiko 0.5.1
Universal safetynet fix 2.3.1
DenyList configured for bank/transit apps but not enabled, Zygisk enabled
Magisk is not hidden
Global A18 (but also had A16, A17)
No issues with fingerprint/payment
These are not required
lposed zygisk
-shamiko zygisk
Jusf Hide magisk, enable zygisk, hide all google apps. clicking on app will expend sub processes also. You need to tick all.
Quake94 said:
I am running
Magisk 25.2
Shamiko 0.5.1
Universal safetynet fix 2.3.1
DenyList configured for bank/transit apps but not enabled, Zygisk enabled
Magisk is not hidden
Global A18 (but also had A16, A17)
No issues with fingerprint/payment
Click to expand...
Click to collapse
I have a bonded version of magisk "hitman7" banking apps but as soon as I turn on magiskhide or zygisk my fingerprint doesn't work anymore
when you have done all the above (deny list, hide magisk etc etc) then continue to FREEZE THE HIDDEN MAGISK with SD MAID (function under App control) or similar apps. That did the trick for me!
I just rooted my phone and wanted to put out there how I got my bank (Santander UK) app working.
Hiding Magisk, using the Deny List and Zygisk, and using the Universal SafetyNet Fix package did not work.
What did work was using the Shelter app to create a sandbox and installing the Santander app in that.
Edit: It stopped working after a while, and I'm not quite sure why it worked at all in the sandbox when it wasn't unsandboxed. The phone passes safetynet so it ain't that. I'm wondering if its detecting the unlocked bootloader in some other way, and not the root.
Eavolution said:
I just rooted my phone and wanted to put out there how I got my bank (Santander UK) app working.
Hiding Magisk, using the Deny List and Zygisk, and using the Universal SafetyNet Fix package did not work.
What did work was using the Shelter app to create a sandbox and installing the Santander app in that.
Click to expand...
Click to collapse
Man! I wanted to use Shelter on my stock A52 4G to put proprietary apps in, but since it's had a custom OS on it before I can't use work accounts anymore. When I go back to LOS I'll have to try this, thanks!
@Eavolution what rooted phone/OS do you have? I'm unable to install Shelter on my rooted SG10Exynos/OS9 and get the same "Cannot create work profile.. a custom OS has been installed"
nukescript said:
@Eavolution what rooted phone/OS do you have? I'm unable to install Shelter on my rooted SG10Exynos/OS9 and get the same "Cannot create work profile.. a custom OS has been installed"
Click to expand...
Click to collapse
I'm on a redmi note 10 pro, rooted using a magisk modified boot.img with an unlocked bootloader on miui14, android 13. Weirdly the banks app only worked for a bit then put up a warning again and wouldn't let me use it. I wonder why it worked for a bit in a sandbox but not unsandboxed, and how it clocked from within the sandbox that the thing was rooted.
My phone passes safetynet with magisk set up how it is so it ain't using that, I have a suspicion that it's not detecting the root, but the unlocked bootloader.
I've got issues with both Barclays & Santander apps. I pass SafetyNet with the help of Magisk 26.0 & safetynet-fix-v2.4.0-MOD_1.2. It's the Play Integrity API that I cant bypass, and that these banking apps are using.
I have the same issue with Barclays App.
I found that using Magisk Delta, Barclays works again.
Unfortunately, Google Wallet doesn't work with Magisk Delta; it can detect root, but with the official version of Magisk Google Wallet works.
Basically:
Magisk Delta: Barclays works and Google Wallet doesn't work
Official Magisk: Barclays doesn't work (error 00006) and Google Wallet works
edit:
I'm on Samsung Galaxy A71 with Android 13 (Secirity patch level 1 April 2023)
These are the two Magisk setups I used:
Magisk v26.1 (Barclays doesn't work - Google Wallet Works)
MagiskHide Props Config v6.1.2-v137 (installed using this guide https://forum.xda-developers.com/t/magisk-google-wallet-pay-with-magisk.4471279/page-7)
Universal SafetyNet Fix v2.4.0 installed and enabled
Zygisk enabled
Enforce DenyList enabled
Magisk App hidden
Magisk Delta 25210 (Barclays works - Google Wallet doesn't work)
MagiskHide Props Config v6.1.2-v137 (installed using this guide https://forum.xda-developers.com/t/magisk-google-wallet-pay-with-magisk.4471279/page-7)
Universal SafetyNet Fix v2.4.0 installed and enabled
Zygisk enabled
Enforce SuList enabled
Magisk Delta App hidden
xsecret said:
I have the same issue with Barclays App.
I found that using Magisk Delta, Barclays works again.
Unfortunately, Google Wallet doesn't work with Magisk Delta; it can detect root, but with the official version of Magisk Google Wallet works.
Basically:
Magisk Delta: Barclays works and Google Wallet doesn't work
Official Magisk: Barclays doesn't work (error 00006) and Google Wallet works
edit:
I'm on Samsung Galaxy A71 with Android 13 (Secirity patch level 1 April 2023)
These are the two Magisk setups I used:
Magisk v26.1 (Barclays doesn't work - Google Wallet Works)
MagiskHide Props Config v6.1.2-v137 (installed using this guide https://forum.xda-developers.com/t/magisk-google-wallet-pay-with-magisk.4471279/page-7)
Universal SafetyNet Fix v2.4.0 installed and enabled
Zygisk enabled
Enforce DenyList enabled
Magisk App hidden
Magisk Delta 25210 (Barclays works - Google Wallet doesn't work)
MagiskHide Props Config v6.1.2-v137 (installed using this guide https://forum.xda-developers.com/t/magisk-google-wallet-pay-with-magisk.4471279/page-7)
Universal SafetyNet Fix v2.4.0 installed and enabled
Zygisk enabled
Enforce SuList enabled
Magisk Delta App hidden
Click to expand...
Click to collapse
Does this still work for you with latest barclays app?
first_damned said:
Does this still work for you with latest barclays app?
Click to expand...
Click to collapse
Actually I found a workaround, I'm currently using Magisk Alpha (26100) + Universal SafetyNet Fix (v2.4.0-MOD_1.2), and now I can use both Google Wallet and Barclays (latest version v2.79.0).
I think the modded version of Universal SafetyNet Fix fixed the problem, I think it works with Magisk Delta too (but I haven't tested it).
[MODULE] [MOD] Universal SafetyNet Fix
Universal SafetyNet Fix [MOD] Magisk module Hello. This is my modification [FORK] of the original Universal SafetyNet Fix module from @kdrag0n. Created for the (temporary?) restoration of working capacity in the conditions of constant change...
forum.xda-developers.com
xsecret said:
Actually I found a workaround, I'm currently using Magisk Alpha (26100) + Universal SafetyNet Fix (v2.4.0-MOD_1.2), and now I can use both Google Wallet and Barclays (latest version v2.79.0).
I think the modded version of Universal SafetyNet Fix fixed the problem, I think it works with Magisk Delta too (but I haven't tested it).
[MODULE] [MOD] Universal SafetyNet Fix
Universal SafetyNet Fix [MOD] Magisk module Hello. This is my modification [FORK] of the original Universal SafetyNet Fix module from @kdrag0n. Created for the (temporary?) restoration of working capacity in the conditions of constant change...
forum.xda-developers.com
Click to expand...
Click to collapse
Soumds promising. Please can you detail exactly what you did to get it working? And how did you install magisk alpha? Also on which rom does this work on? As I want to use it on lineage os. Thank you in advance this is very much appreciated!
first_damned said:
Soumds promising. Please can you detail exactly what you did to get it working? And how did you install magisk alpha? Also on which rom does this work on? As I want to use it on lineage os. Thank you in advance this is very much appreciated!
Click to expand...
Click to collapse
There's not much to explain, I just rooted my Galaxy A71 (with Android 13) following this guide:
How to Install Magisk on your Android Phone
Magisk is a powerful tool that can help you customize some aspects of your phone or even grant you root access. Here's how you can install it!
www.xda-developers.com
Then I installed Magisk Alpha v26.1 (when prompted, give root permissions to Magisk Alpha)
GitHub - vvb2060/magisk_files
Contribute to vvb2060/magisk_files development by creating an account on GitHub.
github.com
Then in Magisk Alpha I enabled the Zygisk and Enforce DenyList settings.
Then in Magisk Alpha under Configure DenyList settings select all the apps you want to hide the root, I suggest all your banking apps, Google Play Store, Google Services Framework, Google Wallet.
Some apps are not visible, so you need to turn on the Show system apps setting.
Then hide your Magisk Alpha app, so select Settings>Hide the Magisk app
Then I uninstalled Magisk (official), before uninstall Magisk (official) make sure that Magisk Alpha is correctly installed, otherwise you will lose the root and have to start from the beginning, so just make sure that (in Magisk Alpha) next to Zygisk and Ramdisk it says Yes.
Then I installed the Universal SafetyNet Fix v2.4.0 [MOD_1.3] module in Magisk Alpha:
Releases · Displax/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - Displax/safetynet-fix
github.com
Just download the zip file, and go Magisk Alpha>Modules>Install from storage and select the zip file to install the safety net fix, and reboot your phone.
By the way I just reinstalled Magisk (Official) v26.1 + SafetyNet v2.4.0 MOD_1.3, but Barclays app immediately detected the root (Google Wallet works), I guess Barclays implemented some algorithm to detect Magisk (official), maybe some files that are only present when Magisk (official) is installed?
Other tests I've done:
Barclays App works even if you don't hide Magisk Alpha app.
Barclays App works even if you don't uninstall Magisk (official), so if Magisk Alpha is installed and it's your root manager and Magisk (official) is installed without being your root manager, Barclays app still works.
Barclays App works event SafetyNet Fix module is not enabled (in Magisk Alpha), this module is used to make Google Wallet work
In the DenyList it is sufficient to enable the activities com.barclays.android.barclaysmobilebanking and com.barclays.android.barclaysmobilebanking_zygote, if you leave the other 3 activities disabled Barclays app will continue to work without detecting the root.
xsecret said:
There's not much to explain, I just rooted my Galaxy A71 (with Android 13) following this guide:
How to Install Magisk on your Android Phone
Magisk is a powerful tool that can help you customize some aspects of your phone or even grant you root access. Here's how you can install it!
www.xda-developers.com
Then I installed Magisk Alpha v26.1 (when prompted, give root permissions to Magisk Alpha)
GitHub - vvb2060/magisk_files
Contribute to vvb2060/magisk_files development by creating an account on GitHub.
github.com
Then in Magisk Alpha I enabled the Zygisk and Enforce DenyList settings.
Then in Magisk Alpha under Configure DenyList settings select all the apps you want to hide the root, I suggest all your banking apps, Google Play Store, Google Services Framework, Google Wallet.
Some apps are not visible, so you need to turn on the Show system apps setting.
Then hide your Magisk Alpha app, so select Settings>Hide the Magisk app
Then I uninstalled Magisk (official), before uninstall Magisk (official) make sure that Magisk Alpha is correctly installed, otherwise you will lose the root and have to start from the beginning, so just make sure that (in Magisk Alpha) next to Zygisk and Ramdisk it says Yes.
Then I installed the Universal SafetyNet Fix v2.4.0 [MOD_1.3] module in Magisk Alpha:
Releases · Displax/safetynet-fix
Google SafetyNet attestation workarounds for Magisk - Displax/safetynet-fix
github.com
Just download the zip file, and go Magisk Alpha>Modules>Install from storage and select the zip file to install the safety net fix, and reboot your phone.
By the way I just reinstalled Magisk (Official) v26.1 + SafetyNet v2.4.0 MOD_1.3, but Barclays app immediately detected the root (Google Wallet works), I guess Barclays implemented some algorithm to detect Magisk (official), maybe some files that are only present when Magisk (official) is installed?
Other tests I've done:
Barclays App works even if you don't hide Magisk Alpha app.
Barclays App works even if you don't uninstall Magisk (official), so if Magisk Alpha is installed and it's your root manager and Magisk (official) is installed without being your root manager, Barclays app still works.
Barclays App works event SafetyNet Fix module is not enabled (in Magisk Alpha), this module is used to make Google Wallet work
In the DenyList it is sufficient to enable the activities com.barclays.android.barclaysmobilebanking and com.barclays.android.barclaysmobilebanking_zygote, if you leave the other 3 activities disabled Barclays app will continue to work without detecting the root.
Click to expand...
Click to collapse
Works top man!
Another test I did:
Barclays works even if Zygisk is disabled, but Google Wallet will not work because Universal Fix will be suspended, as this module requires Zygisk to work
Guys, I have motorola edge 30 rooted via magisk(boot.img patched flash). Google wallet worked for few weeks even when I received warnings that my devices does not meet security requiremens) well last 2 weeks it's a nightmare. I completely remove cache and personal data from google play services. message device meets security requirements is restored and i can use wallet for day or two. then again this message appears when i open wallet your device DOES NOT meet security requirements and neither I can pay by google wallet it somehow warns my bank and it blocks my bank account and card. i call the bank clean cache and personal data from google services app. again my device MEETS security requirements and this works for day or 2. then again same thing your device DOES NOT meet security requirements are you kidding me?? I have turned off app autoupdate option in google account and google play services are in deny list in magisk. it does not seem to help at all. I have shamiko,magish hide props config and universal safety net modules installed.
any idea how to stop stupid google play services make my life miserable? thanks!
Please read this post. You need to install a Magisk module. You must be using minimum Magisk 24.
I have magisk latest version 26. let me check the link. i havent found module name. as stated i have 3 modules installed for this .
Lubo99 said:
I have magisk latest version 26. let me check the link. i havent found module name. as stated i have 3 modules installed for this .
Click to expand...
Click to collapse
Ah, I missed that.
The "official" Universal SafetyNet Fix by kdrag0n does not properly fix the Play Integrity issue, which is why you have to use the Displax mod. If you're on the stock ROM you don't need MagiskHide Props Config.
Make sure you're passing Play Integrity DEVICE and BASIC labels as described in the thread I linked, and if you continue to have issues with Wallet see this thread. I don't even have Wallet/GPay in Magisk DenyList, and they work fine.
V0latyle said:
Ah, I missed that.
The "official" Universal SafetyNet Fix by kdrag0n does not properly fix the Play Integrity issue, which is why you have to use the Displax mod. If you're on the stock ROM you don't need MagiskHide Props Config.
Make sure you're passing Play Integrity DEVICE and BASIC labels as described in the thread I linked, and if you continue to have issues with Wallet see this thread. I don't even have Wallet/GPay in Magisk DenyList, and they work fine.
Click to expand...
Click to collapse
i dont pass only the 3rd strong requirement which dont pass like 90 percent of phones lol. and wallet worked fine. i have reinstalled kdragon unsf by displax mod? lets see if it helps. I wonder why wallet is not yelling that you have magisk installed... lol.. as I am sure this app checks magisk presence too...
By the way when you check the picture magisk package dedpite i hide it! is exposed do you think it can be problem too? According app even fandím magisk package name can be a problem..
Lubo99 said:
i dont pass only the 3rd strong requirement which dont pass like 90 percent of phones lol. and wallet worked fine. i have reinstalled kdragon unsf by displax mod? lets see if it helps. I wonder why wallet is not yelling that you have magisk installed... lol.. as I am sure this app checks magisk presence too...
Click to expand...
Click to collapse
Don't assume. Address the basics first and go from there.
Lubo99 said:
By the way when you check the picture magisk package dedpite i hide it! is exposed do you think it can be problem too? According app even fandím magisk package name can be a problem..
Click to expand...
Click to collapse
What is your Play Integrity response? You seem to be skipping over the basics.
Displax USNF module changes DenyList. Keep in mind that DenyList is not MagiskHide and does not function the same way. Package name hiding is only necessary for apps that specifically detect it. In my case, none of the apps I use do, so the only module I use is USNF by Displax
Now i'm not skipping basics this is on all rooted phones i had. Strong integrity fails (attachment)but i was able to pay Google wallet. Question is which exact package or application IS telling Google wallet that there is security breach . So far Google wallet is not yelling anything after displax mod installed and autoupdates turned off .