Play Integrity
A device integrity verification interface provided by Google that replaces the earlier SafetyNet. It determines whether a device runs an officially certified system and whether it has been rooted or has an unlocked bootloader, and is widely integrated by security-sensitive applications such as banking, payment, and streaming apps.
Timeline (last 90 days)
This bank clearance may be partly attributable to these apps reducing their reliance on Play Integrity strong attestation and switching to their own risk-control models.
Some banking apps detect whether GMS is running as a system app, or check whether the Play Integrity certification result comes from a trusted Google environment.
GrapheneOS does not ship with Google services framework and has not participated in Google's compatibility certification process, so by default it cannot pass Play Integrity's device certification and app integrity checks.
Unlocking the bootloader generally triggers a factory reset (wiping all user data) and may prevent the device from passing integrity checks such as SafetyNet/Play Integrity, thereby affecting the use of banking and payment apps.
App Check verifies the device and app signature via Play Integrity, DeviceCheck or App Attest, confirming that requests genuinely come from an authorized, authentic app, thereby blocking script-forged calls.
Play Integrity is a device integrity verification interface provided by Google, replacing the earlier SafetyNet; apps can use it to determine whether a device runs an officially certified system, whether it is rooted, and whether the bootloader is unlocked.
Banking, payment, and government apps that call SafetyNet/Play Integrity attestation will refuse service at runtime even if they can be launched.
Waydroid requires kernel support for the binder driver and cannot pass Google's SafetyNet/Play Integrity attestation.
Device attestation such as Play Integrity can determine whether a device is rooted, but cannot determine whether a bot automation is initiating requests; reCAPTCHA fills this gap through behavioral scoring.
Full root solutions trigger Google's SafetyNet/Play Integrity checks, causing banking and payment apps to refuse to run, loss of OTA system update capability, and invalidation of the device's hardware warranty.
All Facts (10)
This bank clearance may be partly attributable to these apps reducing their reliance on Play Integrity strong attestation and switching to their own risk-control models.
50%UnverifiedSome banking apps detect whether GMS is running as a system app, or check whether the Play Integrity certification result comes from a trusted Google environment.
50%UnverifiedGrapheneOS does not ship with Google services framework and has not participated in Google's compatibility certification process, so by default it cannot pass Play Integrity's device certification and app integrity checks.
50%UnverifiedUnlocking the bootloader generally triggers a factory reset (wiping all user data) and may prevent the device from passing integrity checks such as SafetyNet/Play Integrity, thereby affecting the use of banking and payment apps.
50%UnverifiedApp Check verifies the device and app signature via Play Integrity, DeviceCheck or App Attest, confirming that requests genuinely come from an authorized, authentic app, thereby blocking script-forged calls.
50%UnverifiedPlay Integrity is a device integrity verification interface provided by Google, replacing the earlier SafetyNet; apps can use it to determine whether a device runs an officially certified system, whether it is rooted, and whether the bootloader is unlocked.
50%UnverifiedBanking, payment, and government apps that call SafetyNet/Play Integrity attestation will refuse service at runtime even if they can be launched.
50%UnverifiedWaydroid requires kernel support for the binder driver and cannot pass Google's SafetyNet/Play Integrity attestation.
50%UnverifiedDevice attestation such as Play Integrity can determine whether a device is rooted, but cannot determine whether a bot automation is initiating requests; reCAPTCHA fills this gap through behavioral scoring.
50%UnverifiedFull root solutions trigger Google's SafetyNet/Play Integrity checks, causing banking and payment apps to refuse to run, loss of OTA system update capability, and invalidation of the device's hardware warranty.
50%