I will tell you in the moment How to run any banking app safely on a rooted phone
In short, most banking apps do not run on phones that have privileged access to Android, as they have the root privilege. This guide will look at ways to help you run banking apps on your rooted device, but at your own risk.How to run any banking app safely on a rooted phone
In short, most banking apps do not run on phones that have privileged access to Android, as they have the root privilege. This guide will look at ways to help you run banking apps on your rooted device, but at your own risk.
Why do banking apps block rooted devices?
While the issue of implementing built-in security measures to run apps with sensitive financial data is still disputed, here is why businesses restrict rooted phones to run banking apps: Security is a primary risk when it comes to your financial data, which is extremely sensitive.
- Businesses must provide security.
- It is their duty to safeguard their customers' information and funds; any breach could have extremely disastrous consequences for the bank.
- There is a small but real chance that malicious actors could steal your money from an unattended device; it is easy for them to do so.
How can I use a rooted phone to run banking apps?
Disclaimer: This article only provides information for educational purposes. Making changes to your device to run banking apps on a rooted phone poses security risks, may void warranties, or violate terms of service with your hardware and banking app provider. Perform the process at your own risk. We are not responsible for any damages, harm, or losses that may occur as a result of following this guide.
To bypass device state detection and hide privileged access to these apps, the main concept is to run banking apps on root-enabled phones. Other science-based tools, the most popular tool being Magisk, will be discussed in particular in this section.
1) Zygisk and Shamiko
You will see a modular approach (using Magisk modules) to evade root detection and hide device state on anything you have related to Magisk. In the past, the MagiskHide module was the preferred way to teach SafetyNet certification, but that feature was removed in 2021. Note: After MagiskHide was removed, Zygisk took its place. It's basically a module that handles forking each app process and directly running Magisk on Zygote, an Android app launcher process.
Make sure your device passes the Play Integrity
Test. To proceed with the Shamiko update, all Play Integrity checks must be passed. If not most, then surely most banking apps would work fine without STRONG_INTEGRITY. However, rooting or unlocking the bootloader of your device will clear up the rest.
Thanks to our detailed guide, all apps can bypass the Play Integrity API checks. Even if you don't need to run banking apps on your device, they are mandatory to install and will not be covered in this guide. Your phone's app compatibility would likely be limited if the tests failed.
- Because Shamiko will not work with older Magisk versions, please update to Canary 27005+.
- From the LSPosed GitHub repository, download the Shamiko module. Uninstall any banking apps you may have installed. Fire up Magisk and tap the settings icon that looks like a fire icon in the top right corner. Long press the switch located on the front to enable the feature, then drag it over to Zygisk.
- You cannot use “Apply Denylist” as this method uses Shamiko instead of Zygisk to hide the fact that apps are on the denylist.
- Head to the homepage and at the bottom right, click on Modules (the icon that looks like a cracked egg).
- Select the downloaded Shamiko module using the “Install from storage” button.
- Reboot your device once the installation is done.
- Try opening Magisk and see if Zygisk is enabled.
- Click on “Setup Denylist” and then go to settings.
- Clicking this will bring up a list of all the apps that are installed on your phone. To hide your root access, the apps chosen from the list will be used as a reference.
- Choose “Show system apps” by tapping the three vertical dots on the top right. Choose all the banking apps you want to hide root access from.
- “Google Play Services” or “com.google.android.gms” should be checked as the location for all the checkboxes. Log into your phone again.
- Check if Zygisk is still enabled and open Magisk. Now the Magisk app itself should be hidden even though the root access is still active.
2) MagiskHide (Deprecated)
Some threads online have reported on the procedure to follow to bypass root detection via MagiskHide. As I said before, this module is deprecated and no longer works with the latest versions of banking apps. When it was still the go-to method, I can’t really trust it.
With MagiskHide, it was a constant race to install new updates when the previous ones were patched. That’s why, even if you have an older version of the said module running, it may be a good time to switch to Shamiko.
What if apps still won’t run?
In case the banking apps still fail to launch, there might be an issue with your phone's hardware integrity spoofing or the root modules might not have been set up properly. Here's what you can try.
1) - Check if your device passes Play Integrity Checks.
The Play Integrity API allows developers to detect and attest to the authenticity of the device's software and hardware. If the PI checks fail, most banking services will be unavailable. PlayIntegrityFix - PIF, by Chiteroman, is a module that consists of the module that is called upon to bypass the basic verification checks.
PIF bypasses the initial basic integrity checks but not the strict ones.
You can check the Play Integrity status of your device using the "Play Integrity API Checker" on the Google Play Store. If it fails the basic tests, it is highly recommended that you flash the PIF module in Magisk manually.
2) Disable Chiteroman's BootloaderSpoofer (if used)
The BootloaderSpoofer module is mainly used to hide the bootloader state of phone apps, which can be very important sometimes when you need to work with services that have enhanced root detection methods. However, some users reported that using spoofers with banking apps sometimes leads to a positive result in root status.
If you are installing the module, shake the Spoofer app and wipe the app cache before trying again. BootloaderSpoofer depends on the Xposed framework, which has a reputation for being quite easy to detect.
3) Try a clean Magisk install
If all else fails, consider a clean Magisk install, repeating the entire procedure above and manually flashing the Play Integrity Fix module. This will detect any issues with either the module or Magisk. Trying a different version of Magisk may also help, but we don't recommend it as you'll need to install a similar version of Shamiko that is compatible with the version you're using.
If by any chance your banking app relies on Play Integrity to meet the "STRONG_INTEGRITY" requirements, you should know that it's virtually impossible to enable it on a device with an unlocked bootloader. You would need to either roll back to a locked bootloader or make changes to the system that are outside the scope of this guide.
4) Check if your phone has root files in storage
As mentioned above for Xiaomi phones, most devices and apps use access to the internal storage and examine documents and files to see if there are any files that indicate that the device is modified. To be safe, delete any recovery files, such as twrp.img, if you have them in your device's storage.
They are an excellent mobile phone, but if you ever wonder how to fix the flashing on your Xiaomi phone, here you can find what you need to know.
Keep reading so you can learn how to flash TWRP on Xiaomi devices, because today we will tell you how to flash it.
Get ready for How to get all rods in Roblox Fisch, because here you'll find all you need.
Just read on so you can learn How to open some memories in Disney Dreamlight Valley, because here's what you need to know.
Get ready to learn Best moveset for Shadow Annihilape in Pokémon Go, because today we are going to tell you how to do it.
Read on so you can learn how to unlock Maria in Metaphor: ReFantazio, as here, we will talk about this for you.
Pay attention so that you can learn the Best Archetype for the Protagonist in Metaphor ReFantazio, as everything is here.
Get ready to learn How to chat with an adventurer and investor in Disney Dreamlight Valley, as today we will cover all the details about the same for you.
In this documentary I will explain how to solve the problem “Photoshop could not complete your request because of a program error”
I will teach you today how to get the Liturgy grenade launcher in Destiny 2