Hi,
I have OP8 and issue with fingerprint sensor not working after locking the bootloader. Issue started when i unlocked bootloader, rooted device - installed magisk with magisk hide module.
After that my banking app stopped working (even tho i had magisk hide). I need my banking app more than root so i decided to lock bootloader and back to stock OOS.
Of course i didnt DD my fp perisist image so i have nothing to work with. After stock rom installation i am unable to configure FP. It gaves me errors everytime i want to set a FP.
When i unlock bootloader FP is working like a charm. But i have to lock it for banking app to work. And then circle of life continues.
Unlocked bootloader - FP works - Bank app dont work(or GPAY) - Locked BL - FP dont work - Bank app works.....
Is there a chance to make a phone "like it is out of the box" ? no root, locked bootloader, etc?
Related
When I got my OP6, I unlocked my bootloader and rooted my OnePlus 6 when it was running 5.1.9. However, SafetyNet Check would randomly sometimes pass and sometimes fail for a while, after settling on failing. I was and still am unable to use google pay or install netflix. Other apps could also detect I was rooted and would not run despite me hiding root from them using magisk hide.
I recently upgraded my phone to 5.1.11 using the OTA update. This removed root, so I assumed these would start working again after the update, but they still do not. Various apps still think I am rooted and do not run.
Does anybody have any insight about what can be the cause of this, or how I can get SafetyNet Check to pass? I don't even care about root, I just want to be able to use google pay
Have you tried locking the bootloader again? Often times, an unlocked bootloader will simply cause a fail for Safetynet. Again, not 100% sure this'll work, but it's worth a shot.
Your bootloader is unlocked check your bootloader if bootloader is locked then you need to wipe your data most of devices need to be wiped after you unroot your device.
easy fix and all you need to do is clear the playstore data so that it gets a fresh start and then reboot and check the google play store settings and see if its ceritfied again.
quantumcity said:
When I got my OP6, I unlocked my bootloader and rooted my OnePlus 6 when it was running 5.1.9. However, SafetyNet Check would randomly sometimes pass and sometimes fail for a while, after settling on failing. I was and still am unable to use google pay or install netflix. Other apps could also detect I was rooted and would not run despite me hiding root from them using magisk hide.
I recently upgraded my phone to 5.1.11 using the OTA update. This removed root, so I assumed these would start working again after the update, but they still do not. Various apps still think I am rooted and do not run.
Does anybody have any insight about what can be the cause of this, or how I can get SafetyNet Check to pass? I don't even care about root, I just want to be able to use google pay
Click to expand...
Click to collapse
Google pay will work if you re-lock your bootloader. Not sure about Netflix as I don't use it on my mobile.
Edit: as for insight into why, it's a security thing. When you unlock your bootloader you compromise the security of your device so certain things won't work by design.
People need to stop suggesting to lock the bootloader. It's not needed! I have an unlocked bootloader and everything works fine. You need to install magisk and clear play store data like I told you in the second thread you created.
Sent from my OnePlus6 using XDA Labs
yldlj said:
People need to stop suggesting to lock the bootloader. It's not needed! I have an unlocked bootloader and everything works fine. You need to install magisk and clear play store data like I told you in the second thread you created.
Click to expand...
Click to collapse
While you do not need to lock the bootloader to use Netflix, you do need to lock it for HD playback. Netflix uses Widevine DRM and you need Widevine L1 for HD playback. If your bootloader is unlocked you only have Widevine L3. L3 will still allow you to view Netflix content, but you won't get 720p and up without L1. You can use the "DRM Info" app from the Play Store to confirm your Widevine level and use the "Test Patterns" videos inside Netflix to confirm what your max resolution and framerate are.
TuxRuffian said:
While you do not need to lock the bootloader to use Netflix, you do need to lock it for HD playback. Netflix uses Widevine DRM and you need Widevine L1 for HD playback. If your bootloader is unlocked you only have Widevine L3. L3 will still allow you to view Netflix content, but you won't get 720p and up without L1. You can use the "DRM Info" app from the Play Store to confirm your Widevine level and use the "Test Patterns" videos inside Netflix to confirm what your max resolution and framerate are.
Click to expand...
Click to collapse
Yes but that is NOT the OP problem.
Sent from my OnePlus6 using XDA Labs
yldlj said:
People need to stop suggesting to lock the bootloader. It's not needed! I have an unlocked bootloader and everything works fine. You need to install magisk and clear play store data like I told you in the second thread you created.
Sent from my OnePlus6 using XDA Labs
Click to expand...
Click to collapse
As said there are only two solutions, either go entirely locked and stock(ed) or do what yldlj said. It actually quite simple people.
If you unlock your bootloader, you HAVE root with Magisk and make sure you hide root for all mobile payment apps. Just having an unlocked bootloader WILL FAIL SAFETYNET CHECKS. So you either lock your bottle or unlock it and root.
The Netflix thing is if you unlock you won't be certified in the play store so you won't see Netflix to install it. If you download the apk you can install it and is it without root but your widevine security is L3 and can only playback a Mac resolution of 480p. You will have to have a locked bootloader to to playback anything 720p, 1080p and 1440p
Eric214 said:
If you unlock your bootloader, you HAVE root with Magisk and make sure you hide root for all mobile payment apps. Just having an unlocked bootloader WILL FAIL SAFETYNET CHECKS. So you either lock your bottle or unlock it and root.
The Netflix thing is if you unlock you won't be certified in the play store so you won't see Netflix to install it. If you download the apk you can install it and is it without root but your widevine security is L3 and can only playback a Mac resolution of 480p. You will have to have a locked bootloader to to playback anything 720p, 1080p and 1440p
Click to expand...
Click to collapse
FALSE
My bootloader is unlocked and I am not using magisk to hide anything yes I am still certified in Google Play and Netflix is showing up to download. Make sure you are in a country that supports Netflix. Netflix is not available in every country. Also my Magisk is passing safety net checks with the unlocked bootloader
dgunn said:
FALSE
My bootloader is unlocked and I am not using magisk to hide anything yes I am still certified in Google Play and Netflix is showing up to download. Make sure you are in a country that supports Netflix. Netflix is not available in every country. Also my Magisk is passing safety net checks with the unlocked bootloader
Click to expand...
Click to collapse
Maybe something changed because it was that way but it's still the same deal for the widevine security that you cant be unlocked and be level 1 (L1) that you can't change with root or hiding anything.
dgunn said:
FALSE
My bootloader is unlocked and I am not using magisk to hide anything yes I am still certified in Google Play and Netflix is showing up to download. Make sure you are in a country that supports Netflix. Netflix is not available in every country. Also my Magisk is passing safety net checks with the unlocked bootloader
Click to expand...
Click to collapse
You might not be hiding those specific apps but the magisk hide toggle will be enabled which is enough. So yes you are using magisk hide. anyway the OP hasn't even been replying so yes either fixed the issue it doesn't care anymore.
Sent from my OnePlus6 using XDA Labs
Hi all
According to this article, unlocked bootloader = no more fingerprint unlock: "https://www.gizmochina.com/2019/11/28/realme-officially-bootloader-unlocks-every-smartphones-models-in-china/"
"For security reasons, Realme will disable the fingerprint unlock function to prevent privacy leak of fingerprint data on their independently encrypted fingerprint chip."
I've got AOSP rom on my Realme Q, and everything works great... except fingerprint unlock.
Anyone know of any potential fix for this?
motherface said:
Hi all
According to this article, unlocked bootloader = no more fingerprint unlock: "https://www.gizmochina.com/2019/11/28/realme-officially-bootloader-unlocks-every-smartphones-models-in-china/"
"For security reasons, Realme will disable the fingerprint unlock function to prevent privacy leak of fingerprint data on their independently encrypted fingerprint chip."
I've got AOSP rom on my Realme Q, and everything works great... except fingerprint unlock.
Anyone know of any potential fix for this?
Click to expand...
Click to collapse
base on my experience you need rooted devices to fix this, you need to pass cts profile. read MagiskHide Props Config to fix this
Its known bugs on AOSP based rom tree, but if you flash Lineage based rom tree, you can use the fingerprint for lock
Does this realy works?
All realme devices have the same problem, only the realme X not.
So how we can fix it?
My realme 5 pro is unlocked with root and magisk and fingerprint is fast like thunderbolt
Then please give us a tutorial on how to make the fingerprinter come to life after the bootloader unlock.
Thank you
Hi, ever since bootloader unlock in my Zenfone 6 fingerprint crashes all apps that use it (like Settings or OneTimeInit). Currently running pure stock. If I relock it with asus-back it returns to life, however I'd like to keep this state after unlock too. After second lock I've removed all phone security in case something blocked fp reader from there but no luck. Any ideas?
Also, is there any way to unlock the bootloader n-th time without using that apk unlocker/without internet conenction? I know the relock command but things that unlock it like asus-go don't work.
Probably downgrading to pie and then upgrading to Q will fix it according to https://forum.xda-developers.com/zenfone-6-2019/help/relocked-zenfone-6-lockscreen-t4033321
Oh, I will downgrade it to Pie allright. Just bricked my phone and messed up dm verity on locked bootloader. I prefer Samsungs to play with...
Edit: You were right. I've unlocked it on Pie and works great. I don't know why xda search couldn't find that thread for me. Thank you.
I stopped rooting my phones for some time. So I'm not really sure on how things work now. I'll be receiving my 8T(KB2001) tomorrow. I just want to unlock the bootloader before setting up the device so that I can just flash the official twrp(when it comes) without clearing data. I just want to know if the device passes safetynet till I flash twrp and magisk? I use Google pay and other bank apps regularly so it's important for me. Also, generally how long does it take for an unofficial/official stable twrp to be available?
Tl;dr - Can I use Google pay with unlocked bootloader without magisk?
Doubtful
KrishTej said:
I stopped rooting my phones for some time. So I'm not really sure on how things work now. I'll be receiving my 8T(KB2001) tomorrow. I just want to unlock the bootloader before setting up the device so that I can just flash the official twrp(when it comes) without clearing data. I just want to know if the device passes safetynet till I flash twrp and magisk? I use Google pay and other bank apps regularly so it's important for me. Also, generally how long does it take for an unofficial/official stable twrp to be available?
Tl;dr - Can I use Google pay with unlocked bootloader without magisk?
Click to expand...
Click to collapse
About Google Pay, I think you can use Google pay on unlocked bootloader without Magisk, But with Magisk installed and MagiskHide enabled you can definitely use Google Pay without any problem. I have used Google Pay with magisk. And Once i forgot to add Google Pay into magiskhide list but able to use without any problem. So dont worry about GPay.
But there is big catch for other banking apps, they will detect unlocked bootloader and refuse to run which can be bypass 100% using MagiskHide. Been using phonepe, paytm , and other official banking apps ( upi too ) without any problem. ( AFAIK had trouble with Sbi pay only) All others are working fine.
Device will pass safetynet once you enable MagiskHide after installing Magsik Canary. ( by default its off , you need to turn on manually after first run) And new magisk supports with Different App name so apps can not detect Magisk as app.
But biggest disadvantage of unlocking bootloader on Oneplus device is you will lose widevine level 1, it will set to L3 instead of L1 if you unlock bootloader, So basically you will lose HD in netflix,prime and other streaming apps which uses widevine. ( No effect on local hd playing using file,or youtube)
Best luck
It will not pass safety net. I checked that just now before enabling magisk hide and renaming the app. Google Pay will not work with the unlocked bootloader, even without having the magisk manager app installed. Samsung Pay worked fine on my watch with only the bootloader unlocked.
I can also confirm this. I had unlocked the bootloader the day I got my 8T and was surprised to see Google Pay not working. It started working fine after I rooted and hide it in Magisk.
rohanhole said:
About Google Pay, I think you can use Google pay on unlocked bootloader without Magisk, But with Magisk installed and MagiskHide enabled you can definitely use Google Pay without any problem. I have used Google Pay with magisk. And Once i forgot to add Google Pay into magiskhide list but able to use without any problem. So dont worry about GPay.
But there is big catch for other banking apps, they will detect unlocked bootloader and refuse to run which can be bypass 100% using MagiskHide. Been using phonepe, paytm , and other official banking apps ( upi too ) without any problem. ( AFAIK had trouble with Sbi pay only) All others are working fine.
Device will pass safetynet once you enable MagiskHide after installing Magsik Canary. ( by default its off , you need to turn on manually after first run) And new magisk supports with Different App name so apps can not detect Magisk as app.
But biggest disadvantage of unlocking bootloader on Oneplus device is you will lose widevine level 1, it will set to L3 instead of L1 if you unlock bootloader, So basically you will lose HD in netflix,prime and other streaming apps which uses widevine. ( No effect on local hd playing using file,or youtube)
Best luck
Click to expand...
Click to collapse
I know I'll lose widevine L1 but I really don't care about that. I also know that I can use Magiskhide to keep them working but I just wanted to wait till the twrp is available. I was just wondering if I can manage without Magiskhide for some time. But looks like I have root now for them. Thanks for the reply :good:
RLD831 said:
It will not pass safety net. I checked that just now before enabling magisk hide and renaming the app. Google Pay will not work with the unlocked bootloader, even without having the magisk manager app installed. Samsung Pay worked fine on my watch with only the bootloader unlocked.
Click to expand...
Click to collapse
deepuvijay said:
I can also confirm this. I had unlocked the bootloader the day I got my 8T and was surprised to see Google Pay not working. It started working fine after I rooted and hide it in Magisk.
Click to expand...
Click to collapse
Ahh that sucks! Thanks for confirming btw.
I am passing safetynet with magisk root on US KB2005 11.0.1.2KB05AA. I can open Pay without any issues but have not fully set it up yet. If I recall on my last HTC with Root it threw an error immediately when opening. I will give it a shot later today.
MNoisy said:
I am passing safetynet with magisk root on US KB2005 11.0.1.2KB05AA. I can open Pay without any issues but have not fully set it up yet. If I recall on my last HTC with Root it threw an error immediately when opening. I will give it a shot later today.
Click to expand...
Click to collapse
Same, except I have fully set up Google Pay with my accounts and the app opens up and everything seems to be okay. I have not actually attempted to pay using it yet however.
Screenshots for more info.
Sent from my OnePlus8T using XDA Labs
hello
i have rooted my note 10+ and flashed dr.ketan rom
and there is an app still detecting the root after using magisk hide and i think it checks if the bootloader is unlocked
and i was wondering is it safe if i relock the bootloader
edit:my banking app does work with magisk hide and the SafetyNet check is successful
Re-locking a bootloader will ensure that the device will only boot to OEM signed and provided Android Images.
FYI: For a custom ROM to be used ( with a few exceptions ), the bootloader must remained unlocked.
For the majority of phones if you try and re-lock the bootloader with LinageOS installed you will end up bricking your phone ( might be soft or hard brick depending on the device ).
TxXDRAGONXxT said:
hello
i have rooted my note 10+ and flashed dr.ketan rom
and there is an app still detecting the root after using magisk hide and i think it checks if the bootloader is unlocked
and i was wondering is it safe if i relock the bootloader
edit:my banking app does work with magisk hide and the SafetyNet check is successful
Click to expand...
Click to collapse
Once u unlock bootloader never relock it many people have reported that their devices got permanently damaged after relocking bootloader
I see but is there a way to spoof it for other apps when it tries to read if the oem is unlocked or not
This is the app i am trying to hide the root from
Tawakkalna (Covid-19 KSA) - Apps on Google Play
Saudi official app to request curfew passes and other COVID-19 related services
play.google.com
For any app ( as this is also true for every service center ) it's an ease to detect whether phone's Android got tampered ( even rooted ). No reliable methods exist to bypass such a query, IMO.