Database Users

[Guide] Universal SafetyNet Fix

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Hello Everyone, this is Rakesh today we are going to fix SafetyNet pass in MIUI8. As we all know about the google new policy regarding rooted devices and some applications like banking apps and railway reservation apps like IRCTC is we want to run this kind of apps in our rooted device we need to get SafetyNet pass with help of magisk.
So what is SafetyNet actually?
Google uses something called SafetyNet to detect whether your device is rooted or not, will block access to those features. Google isn’t the only one doing this even plenty of third-party apps also won’t work on rooted Android devices, although they may check for the presence of root in other ways. So I think now you guys have understood about this and I don’t want to push too much info into your brains, Let’s get into instructions how to get pass SafetyNet in MIUI8 ROMs. Know More About SafetyNet Here
Today I will Show You How To fix SafetyNet on MIUI8, as you already know MIUI is a very Heavily Skinned Android and it’s not easy to do modifications on it what we like to do. This a User-friendly Guide so you don’t need any diploma on Android and it’s a Universal Tutorial 5.0+
Let’s Start the Tutorial
As for your Information, I’m doing this Guide on multiROM.me 7.7.20 Global Beta.
Requirements
ZCX Recovery
MultiROM (optional)
MagiskSU
A Working Brain.apk
First of All
Reboot your Redmi Note 3 into Recovery Mode
Wipe Factory Reset ( optional wipe system dalvik/cache data)
Flash MultiROMReboot Your Device
Setup your Device Remember don’t add any account as of now,
( skip this if your ROM is not pre-rooted)
Go to SuperSU and Click on “Full Unroot” your device will automatically Reboot. Again Boot into Recovery
Flash Magisk v13.6
Flash USNF v2 b5
Reboot Your Device
Open Magisk and Check if your SafetyNet get Passed!!
If Not Passed then it will show like This “False”
Swipe The Left Edge
Open MagsikHide and Search Google and Tick on as shown below
Now Open Root Explorer or any other File Manager which can Edit build.pro
Go to root/system
Open Build.Pro
Search for ro.build.display.id=MMB29M
And add this after a space“release-keys”
Remove ” and copy/paste
Save it and Close Everything and now Boot into Recovery Mode again
Flash Magisk v14
Flash USNF v2 b5 hotfix
Reboot Your Device
Check Your SafetyNet Again and your Good to Go,
Now you can Add your Google Account and Play Store will Say that your device is “Certified”
for more information and downloads
http://redminote3.xyz/2017/09/10/univesal-safetynet-fix/
Thanks to redminote3.xyz for this wonderful guide.
Source :- http://en.miui.com/thread-825641-1-1.html
​

thank you so much, I just tick google play store and google services framework in magisk hide and everything change to true. tested on LeEco Le 2 x526 (MiuiPro 8.11.22)

I did an update, and now the safetynet test fails. I tried to reinstall the older version didn't work. I'm using Redmi Note 10 Pro device. Looking for the possible fix for this. Thank you!
Edit: It's working now, I have just reinstalled the MagiskHide Props Config

[AIO][SUB] How to pass SafetyNet

How to pass SafetyNet on unlocked Bootloader and custom ROMs
in this guide we'll go over how you can pass SafetyNet on custom ROMs, you need to have Magisk installed, check AIO guide for that
you need to pass basic integrity first, this guide will not help you if you broke that
Code:
Your warranty is now void.
We are not responsible for bricked devices, bootloop... Please
do some research if you have any concerns about mods
included in these GUIDES before using them! YOU are choosing to
make these modifications.
if you're on Stock and only have an unlocked bootloader, simply flashing Magisk should be enough to pass SafetyNet, if you're on a custom ROM, you need the following extra steps.
NOTE: if you just need to pass SafetyNet, follow the guide, if you want access to all Google Play apps which you can access on Stock, use this instead
Open Magisk Manager and go to the Downloads section, search for "MagiskHide Props Config" and install it, also search for "Busybox for Android NDK" and install it, then reboot.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
install Terminal Emulator and open it
type the following commands, grant root access when asked
Code:
su
props
then follow the prompts to edit your device fingerprint by typing the corresponding command shown on screen
Edit device fingerprint
Pick a certified fingerprint
Xiaomi
Xiaomi Mi A2
y
and then reboot
After rebooting, clear data for Google play
You should now pass SafetyNet

--reserved--

Hmm
How about having xposed??

miremo said:
How about having xposed??
Click to expand...
Click to collapse
You'll never pass safetynet with xposed, it's impossible

Nebrassy said:
You'll never pass safetynet with xposed, it's impossible
Click to expand...
Click to collapse
I have friends who was able to do it, but they won't spoil me. I've seen it.. That's why I'm trying to reach xda and read some articles here.

updated to access all google play apps that you can access on Stock (Netflix, Asphalt 9 etc), you'll need to use another module

I did everything but it sill doesn't work here. ?*

malabarth said:
I did everything but it sill doesn't work here. ?*
Click to expand...
Click to collapse
Use SafetyPatcher v3 magisk's module.
Download zip with magisk
Reboot to twrp
Install zip
Not work for me if instal with magisk

alcopsy said:
Use SafetyPatcher v3 magisk's module.
Download zip with magisk
Reboot to twrp
Install zip
Not work for me if instal with magisk
Click to expand...
Click to collapse
doesn't work, after following the OP and your steps using SafetyPatcher V3. I still can't see Netflix on my Play Store eventhough the device now is Certified

Cican49 said:
doesn't work, after following the OP and your steps using SafetyPatcher V3. I still can't see Netflix on my Play Store eventhough the device now is Certified
Click to expand...
Click to collapse
Netflix isn't showing up on any rom anymore, including stock, get it from apkpure

Nebrassy said:
Netflix isn't showing up on any rom anymore, including stock, get it from apkpure
Click to expand...
Click to collapse
but it showed up on stock locked bootloader. makes me wonder

Cican49 said:
but it showed up on stock locked bootloader. makes me wonder
Click to expand...
Click to collapse
Netflix don't show in Play store for unlocked bootloader device

Samsung pay on watch when rooted

Hello, I have a new one plus 8 pro and I am rooted. I also have a Galaxy watch and when I install Samsung pay on the watch it says call customer service device has been compromised even though I have magiskhide for all the Samsung modules. Does anyone have any ideas how to get this working?
Thank you in advance...

I have the same problem. Completely stock. So I wonder if it's a Samsung issue. I had the 6t rooted and I was able to use Samsung pay without any problems

Okay, I think I found the answer. In magisk settings, you need to rename the package to something else. It is the third option down in settings. After I change the name it worked like a charm and of course you have to hide the for Samsung modules in magiskhide...

aaronc_98 said:
Okay, I think I found the answer. In magisk settings, you need to rename the package to something else. It is the third option down in settings. After I change the name it worked like a charm and of course you have to hide the for Samsung modules in magiskhide...
Click to expand...
Click to collapse
Is this still working for you? It's definitely not working on my end with my Pixel. The newest Magisk Manager also does not allow you to select any apps to hide, it's a simple toggle on or off for Magisk Hide and renaming the Magisk Manager didn't do anything.
Did you have to reboot after the rename?

Valiante said:
Is this still working for you? It's definitely not working on my end with my Pixel. The newest Magisk Manager also does not allow you to select any apps to hide, it's a simple toggle on or off for Magisk Hide and renaming the Magisk Manager didn't do anything.
Did you have to reboot after the rename?
Click to expand...
Click to collapse
Sorry - the Pixel was like 4 phones ago. I dont have any further info for you...

aaronc_98 said:
Okay, I think I found the answer. In magisk settings, you need to rename the package to something else. It is the third option down in settings. After I change the name it worked like a charm and of course you have to hide the for Samsung modules in magiskhide...
Click to expand...
Click to collapse
UPDATED Post : see next post for my solution that worked.
Hi aaronc_98,
Hope this is actually still working for you on your OP8 Pro!
When you say you need to rename the package, what are you referring to exactly?? The Samsung Pay app or Hide the Magisk App (renaming) in App settings?
Please provide more details on a step-by-step process you did to make it work on your OP device...if still working.
I have OP6T and it has stopped working recently and can't find a way to get back.
My setup:
OP6T, OOS 10.3.11
Galaxy Watch 46mm, latest OS installed (Jun 15, 2021)
Galaxy Wear App, SPAY Watch Plugin up to date. (Jun 15, 2021).
Thanking you in advance!

plepew said:
Hi aaronc_98,
Hope this is actually still working for you on your OP8 Pro!
When you say you need to rename the package, what are you referring to exactly?? The Samsung Pay app or Hide the Magisk App (renaming) in App settings?
Please provide more details on a step-by-step process you did to make it work on your OP device...if still working.
I have OP6T and it has stopped working recently and can't find a way to get back.
My setup:
OP6T, OOS 10.3.11
Galaxy Watch 46mm, latest OS installed (Jun 15, 2021)
Galaxy Wear App, SPAY Watch Plugin up to date. (Jun 15, 2021).
Thanking you in advance!
Click to expand...
Click to collapse
UPDATE,
Got it all to work!
Preparation:
- Install Galaxy Wearable
- Update Watch to the latest
- Install SP Watch Plugin (do not launch it at all)
Magisk Setup:
- Hide the following apps in MagiskHide: Hit the shield, Hit "MagiskHide" and select the apps:
a) Google Play Services
b) Samsung Health
c) SP Watch Plugin
* You can add banking apps here as well
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Next, recommend hiding the Magisk App itself for the setup. Here is how to do it:
- Hit "Settings" (within Magisk App)
- Hit "Hide the Magisk App" (I used MGKSettings).
Magisk will accept it and repopulate itself.
For good measure, I rebooted my device to recovery (TWRP in my case) wiped "Dalvik / ART Cache" and rebooted to system.
Once rebooted, go to the SP Watch Plugin App INFO (Do not launch the App), got to Storage & Cache & Clear Storage & Cache (should be 0 on both) for good measure!
Launch Galaxy Wear and (Strongly Recommended) scroll down to setup Samsung Pay and follow the steps. **(I don't recommend doing the SPay setup through the Watch Plugin.)**
If you get a notice within 10 seconds saying that the device is not secure (can't remember the message), you may have missed something and you need to start over with clean install of the SP Watch Plugin (storage & cache cleared).
Worst case they may have updated the Samsung Pay, Samsung Health Apps & OOS and it's been blocked again. Therefore we would need to restart the whole process from scratch or find another workaround.
PS. Some of you would probably like to restore or Un-Hide the Magisk App, so I went ahead and did it....so far SPay seems to be working. I have not reboot my device neither, which I rarely do. (I have rebooted my device several times since this post)
For any reason, in the coming days, there is an issue of any kind, I will report back here. If not, it's all good!
Hopefully this can help some of you out there!

worked for me, thanks a lot

Nexus 6p - LineageOS 15.1 - Magisk - CTS Profile check failin

Hi,
I'm trying to install a custom rom (Lineage OS 15.1), and gain super user access without failing the safetynet checks.
I have TWRP as my recovery and I was able to sideload the LineageOS and GApps and Magisk without a problem (with clearing caches).
I installed the latest magisk version (23.0) - I enabled MagiskHide, and hid the name of the magisk package (I forgot the name of the option, but now it says "restore the magisk app").
I also tried installing the Magisk Hide Props config module.
Once I managed to gain root access without tripping the safetynet checks through a combination of Magisk, Smali patcher and App Systemizer module (I was running android 8.0 version at that time) - however I do not remember the process and cannot find the thread again.
One thing I noted was that magisk still says install (even tho it says installed), see below image for details.
When iImanaged to run this process on stock android 8.0, I remember that these options where ticked and green (installing magisk and app)
I do have root access and am able to install apps as system and etc. The safety net checks are what I'm missing.
Does anyone have any idea what am I missing? Any help would be really appreciated.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}

StyleM said:
Hi,
I'm trying to install a custom rom (Lineage OS 15.1), and gain super user access without failing the safetynet checks.
I have TWRP as my recovery and I was able to sideload the LineageOS and GApps and Magisk without a problem (with clearing caches).
I installed the latest magisk version (23.0) - I enabled MagiskHide, and hid the name of the magisk package (I forgot the name of the option, but now it says "restore the magisk app").
I also tried installing the Magisk Hide Props config module.
Once I managed to gain root access without tripping the safetynet checks through a combination of Magisk, Smali patcher and App Systemizer module (I was running android 8.0 version at that time) - however I do not remember the process and cannot find the thread again.
One thing I noted was that magisk still says install (even tho it says installed), see below image for details.
When iImanaged to run this process on stock android 8.0, I remember that these options where ticked and green (installing magisk and app)
I do have root access and am able to install apps as system and etc. The safety net checks are what I'm missing.
Does anyone have any idea what am I missing? Any help would be really appreciated.
Click to expand...
Click to collapse
Magisk looks like it's installed correctly.
Click on module icon
Try installing MagiskHide Props Config Module

sd_shadow said:
Magisk looks like it's installed correctly.
Click on module icon
View attachment 5324475
Try installing MagiskHide Props Config Module
Click to expand...
Click to collapse
i did that (in description)

fyi, i even flashed the original the stock android image and tried the process all over again (multiple times)

Passing SafetyNet with Magisk's Zygisk + DenyList.

So, as of Magisk 24 we will no longer have Magisk Hide natively bundled with Magisk. Unless of course you use a fork of Magisk from another developer.
With Magisk Hide sunset, how do you pass SafetyNet without it?
Prequisites -
Nokia 6.1 | Nokia 6.1 Plus | Nokia 6.2 | Nokia 7 Plus | Nokia 7.1 | Nokia 7.2
Magisk 24
Magisk HideProps Module
Termux - Google Play | F-Droid
YASNAC - To check SafetyNet Certification
Here's how -
Update to the latest magisk-canary(Read all the precautions before hand though).
Open the Magisk .apk and update it.
Open Magisk > Settings > Enable Zygisk & Enable Enforce DenyList.
Now tap on Configure DenyList (Tip: Tap on the 3 button menu and enable 'show system apps')
Now turn off your internet connections and enable Airplane Mode. Double check and ensure that Wifi is turned off after enabling Airplane Mode. Do not turn it on until later.
Configure DenyList for Google Play Store and Google Play Services and all the other apps you need root hidden from.
With Airplane Mode still disabled, go into the phone's settings > Apps > Clear data of all the apps you configured in the DenyList.
Install the MagiskHide Props Module and reboot.
Open Termux and grant root permissions by typing in
Code:
su
Now type in
Code:
props
Enter the 4th submenu
Configure so that the
Code:
ro.boot.verifiedbootstate & ro.boot.flashlocked
says active like in the screenshot.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Now Reboot
After boot, connect to the internet, let the phone sit idle for 5 - 10 minutes and check SafetyNet Status. You should be passing both Basic Integrity and CtsProfile and Google Play certification.
And that's pretty much it.

Reserved.

Thanks @CarbonGTR. Is there any known kernel with these 3 commits?

mGforCe said:
Thanks @CarbonGTR. Is there any known kernel with these 3 commits?
Click to expand...
Click to collapse
Yep, there's Enigma Kernel, which I maintain.

CarbonGTR said:
Yep, there's Enigma Kernel, which I maintain.
Click to expand...
Click to collapse
Thanks Thanuj
Since there is no thread for this kernel, checking here - will it work on Stock Pie rom?

mGforCe said:
Thanks Anuj
Since there is no thread for this kernel, checking here - will it work on Stock Pie rom?
Click to expand...
Click to collapse
Actually there is a thread in the 'Cross development section'
And yes, Android 9 is compatible
Edit - I've found a way to pass SafetyNet without a custom kernel.
Edit 2 - My name's Thanuj, not Anuj

CarbonGTR said:
Actually there is a thread in the 'Cross development section'
And yes, Android 9 is compatible
Edit - I've found a way to pass SafetyNet without a custom kernel.
Edit 2 - My name's Thanuj, not Anuj
Click to expand...
Click to collapse
Thanks Thanuj
Ok, I got the thread. Was checking in our device only.
But for me, somehow, while bootloader unlock is fine, TWRP/LOS recovery all are disaster. So moved to Stock Pie

Thank you very much for your guide! It works like a charm on every rom I tried

CarbonGTR said:
So, as of Magisk 24 we will no longer have Magisk Hide natively bundled with Magisk. Unless of course you use a fork of Magisk from another developer.
With Magisk Hide sunset, how do you pass SafetyNet without it?
Prequisites -
Nokia 6.1 | Nokia 6.1 Plus | Nokia 6.2 | Nokia 7 Plus | Nokia 7.1 | Nokia 7.2
Magisk 24
Magisk HideProps Module
Termux - Google Play | F-Droid
YASNAC - To check SafetyNet Certification
Here's how -
Update to the latest magisk-canary(Read all the precautions before hand though).
Open the Magisk .apk and update it.
Open Magisk > Settings > Enable Zygisk & Enable Enforce DenyList.
Now tap on Configure DenyList (Tip: Tap on the 3 button menu and enable 'show system apps')
Now turn off your internet connections and enable Airplane Mode. Double check and ensure that Wifi is turned off after enabling Airplane Mode. Do not turn it on until later.
Configure DenyList for Google Play Store and Google Play Services and all the other apps you need root hidden from.
With Airplane Mode still disabled, go into the phone's settings > Apps > Clear data of all the apps you configured in the DenyList.
Install the MagiskHide Props Module and reboot.
Open Termux and grant root permissions by typing in
Code:
su
Now type in
Code:
props
Enter the 4th submenu
Configure so that the
Code:
ro.boot.verifiedbootstate & ro.boot.flashlocked
says active like in the screenshot.View attachment 5520953
Now Reboot
After boot, connect to the internet, let the phone sit idle for 5 - 10 minutes and check SafetyNet Status. You should be passing both Basic Integrity and CtsProfile and Google Play certification.
And that's pretty much it.
Click to expand...
Click to collapse
It didn't work on GPay, though I got what I wanted. My UPI is working great thanks Anuj

devchaudhary78 said:
It didn't work on GPay, though I got what I wanted. My UPI is working great thanks Anuj
Click to expand...
Click to collapse
I couldn't quite understand step 12.
Mine only shows:
ro.boot.verifiedbootstate (active)
If I select the option of that line, willing to rewrite it to show what is asked in step 12, I only get to change its state, in this case to NOT active.