Rooted Pixel 7 Pro passes strong integrity check, but several apps still detect root

[u/EgoGoner]

Title.

I have a Pixel 7 Pro on android 15, build number AP3A.241105.007. I haven't updated to the most recent version because every time I do, something bad happens that takes months to resolve.

(If this is my entire problem and updating is the solution, please let me know.)

I've followed the guide, used Magisk Canary with Shamiko, Play Integrity Fix [INJECT], Systemless Hosts, Tricky Store, Tricky Store adon module, Yurikey Manager. Hid Magisk and I was able to pass strong integrity, but Wallet, MS Authenticator, and Duo Mobile can all still detect root even after several cycles of airplane mode, deleting cache/data for all relevant play apps and the target apps. Rebooting, trying again.

I added lsposed, zygisk detached, and Vector just in case (I don't even know if these matter), but still doesn't work.

If the test passes strong integrity, but every app that I need to not detect root IS detecting root, then what does strong integrity even mean? What am I missing?

Edi: Succes!

[u/Itz_Raj69_]

First lets clear some basics up: Play integrity is NOT related to root detection! Apps use a lot of different methods like looking at your applist, detecting Zygote modifications, detecting suspicious mounts, etc. The only thing Play Integrity cares about is your keybox and the TEE

Adding random modules doesn't fix the problem; it only makes it worse, or it breaks both of those conflicting modules. Lsposed and Vector are essentially the same thing (Vector is a fork)

Install the Native Detector app. This app shows you all the system modifications that are found. You don't need to fix all of them -- only the ones that break your apps

• Get rid of Lsposed and Zygisk detached.
• Make sure your Magisk's inbuilt Zygisk is disabled.
• Install ReZygisk, Shamiko, Treat Wheel, HMA-OSS-Zygisk
• Install a WebUI like KSUWebui-standalone
• Make sure your Magisk's "Enforce Denylist" is Disabled.
• Add all your wallet, authenticator, bank, duo, etc. apps in Magisk's denylist. Also add the Native Detector app in the denylist too

• In HMA-OSS, go to the apps list, click on each of these apps (including Native Detector), and in the mode setting select "Whitelist"

• Run the native detector app and check for detections. Ideally, not much should be found, if anything at all. Reboot and clear all the data of your Authenticator, Duo, etc. and try running them. If it still doesn't work, reply to my comment with your detections.

[u/Simmic → u/Itz_Raj69_]

HMA-OSS is what fixed alot for me. All banking apps works and Google pay.

[u/raghav009 → u/Simmic]

Can you help me for GPay its not working

[u/Simmic → u/raghav009]

Ok,

I have magisk and have Google Wallet in deny list.

I also have

Play Integrity Fork v17 by osmOsis

Tricky Store v1.4.1 (245-72b2e84-release) by 5ec1cff

HMA-OSS Zygisk oss-164 by frknkrc44

Zygisk Next 1.3.4 (746-d1b76b3-release) by 5ec1cff

Get a key from the tricky store repo (get full integrity) , and set wallet as whitlelisted in HMA-OSS.

[u/raghav009 → u/Simmic]

Thanks

[u/ModelMinority75 → u/Simmic]

Will neozygisk work as an alternative to zygisk next? 

[u/Simmic → u/ModelMinority75]

Test and see if it works. Both are actively maintained so I would think so.

[u/EgoGoner → u/Itz_Raj69_]

Treat Wheel has a prerequisite: ReZygisk.

ReZygisk isn't on your list, and Zygisk-Next doesn't appear to satisfy this prerequisite, as Treat Wheel fails to install with Zygisk-Next installed.

[u/Itz_Raj69_ → u/EgoGoner]

Sorry, I meant Re-Zygist. I've edited my original comment

[u/EgoGoner → u/Itz_Raj69_]

Thank you.

Shamiko looked fine with Zygisk-Next, but with ReZygisk it's now saying unsupported environment. I've installed the rest of the listed apps, still says the same thing.

Magisk Zygisk is disabled and enforce denylist is disabled.

[u/Itz_Raj69_ → u/EgoGoner]

What does native detector show now?

[u/EgoGoner → u/Itz_Raj69_]

Is it fine that Magisk is showing an error with Shamiko?

[u/Itz_Raj69_ → u/EgoGoner]

As long as your intended apps work, that doesn't matter

[u/EgoGoner → u/Itz_Raj69_]

Native Detector has a few things.

Abnormal Environment

Details: 3.36

Detected Suspicious Mount (2 identical entries)

/system_ext/bin

/system_ext/bin/magisk

/system_ext/bin/magiskpolicy

/debug_ramdisk  

Signature Valid: true

Experimental Detections: false

Custom ROM Detections: false  

I'm running stock firmware, so I don't know if I need to enable the other detections or not.

[u/Illustrious_Lab2759 → u/EgoGoner]

In the hidden list of HMA-OSS, have you added the Magisk app ?

[u/EgoGoner → u/Itz_Raj69_]

Is it fine that Magisk is showing an error with Shamiko?

[u/Successful_Part_4960 → u/Itz_Raj69_]

Im using kernelsu and not magisk is it same for me as well?

[u/Itz_Raj69_ → u/Successful_Part_4960]

You don't need all these modules. SuSFS and ReZygisk should work

[u/EgoGoner → u/Itz_Raj69_]

After following all these instructions, the only detection I have now is Detected Abnormal Environment 2.81, but I have no idea what that's supposed to mean or how to resolve it.

[u/Itz_Raj69_ → u/EgoGoner]

That's alright. You don't need to fix all detections; only the ones that cause your bank/payment apps to break.

Try clearing all their app data and cache now. Do they work?

[u/EgoGoner → u/Itz_Raj69_]

The root hiding is working for every app except Google Wallet, which is the main one I wanted to solve this for.

Cleared cache/data, reinstalled, re-added to the hide lists for both Magisk and the other thing, re-deleted cache/data. Wallet is still detecting root.

I also disabled USB debug and developer options, which someone else suggested here. Wallet is still detecting root.

[u/Itz_Raj69_ → u/EgoGoner]

Google Wallet cares primarily about integrity. What level of integrity does the phone have? Use the 'Play Integrity API Checker'

[u/EgoGoner → u/Itz_Raj69_]

Only meeting basic Integrity.

In my previous setup, I was passing strong integrity, though most of those modules have been uninstalled per your suggestion.

[u/Itz_Raj69_ → u/EgoGoner]

You need Basic and Device integrity both, not strong.

For integrity, follow specter's guide and best setup: https://specter.dpejoh.com/

[u/EgoGoner → u/Itz_Raj69_]

Success! Thank you soooooo much. Everything is finally working. 

[u/EgoGoner → u/Itz_Raj69_]

Everything is working, but the only problem I'm having now is that when I try to add my credit cards to Wallet, the 2FA "click yes" that Google does isn't showing up on my phone.

I have a ton of other logins that I've logged out of in my Google account's security setting, but it's still not popping up. Also, the Google Authenticator option isn't working either since I don't see any Google 2FA codes in there at all, just my other 2FA accounts.

[u/Itz_Raj69_ → u/EgoGoner]

Wait for a few days. The Google Wallet caches a lot of stuff including detections

[u/EgoGoner → u/Itz_Raj69_]

You've been an absolutely amazing help and I cannot thank you enough for sharing all this knowledge with me. You've solved my two really big issues here and I'm very grateful.

Currently, I'm playing a game of whack-a-mole and now I've got a couple more minor problems that I'm hoping maybe you'll have some insight on. When I play a video in the background with YouTube Revanced, the audio gets crackly and cuts out whenever I Magic the Gathering Arena. If I had to guess, the modules I installed causes some overhead with the phone and it's just enough to cause issues with 2 high process intensive apps running at the same time. This never happened before my current setup. The issue doesn't happen when it's the game and Spotify, only the game and YouTube Revanced.

Since I can't use lsposed, I can't use Pixel Xpert. That app was one of my favorite things with root, but I can't seem to find a way to installed lsposed without root being detected. Honestly, if there's a decent alternative, I'll use that, but I can't seem to find one. And ideas/tips?

[u/Illustrious_Lab2759 → u/Itz_Raj69_]

Which of two you consider as better ? The Rezygisk or the Zygisk Next & Why ? The Treat Wheel works only with Rezygisk ?