Play Integrity after 2025

other8026

JBolho sporter This is happening to some more apps after some recent changes by Google. There's a planned feature to change apps' installer to Google Play if they have valid Play Store metadata.

Obligatory thing I say when sharing a link to a feature in the issue tracker: please only add a positive reaction to express interest in a feature, and not add posts saying a feature is important. This forum or the chat rooms are for discussion, not the issue tracker.

sporter

other8026
Awesome, I subscribed for updates and upvoted, thanks!

GGORG

I've just tried again to get ChatGPT to work (which previously redirected to the play store immediately). Now it says that the Play Integrity check failed.

When I install a tool like Play Integrity API Checker by Nikolas Spiridakis, it returns all fails. Shouldn't the basic integrity pass, at least? Is this a known issue?

wizoatk

GGORG Shouldn't the basic integrity pass, at least?

Yes. My P9 running Build 2025061500 does.

GrapheneOS

GGORG Is your device locked? Does it pass a GrapheneOS Auditor check?

GGORG

GrapheneOS yep, both!

screenshot of auditor saying it passed - why doesn't the screenshot want to embed....
link to it instead: https://i.imgur.com/X8n4edw.png

GGORG

and here is the test result from Simple Play Integrity Checker: https://i.imgur.com/aRWQvsn.png

matchboxbananasynergy

GGORG Do you have sandboxed Google Play installed?

GrapheneOS

GGORG There's likely something broken about your configuration such as disabling Network for the Play Store.

GGORG

GrapheneOS I do have the Play Store installed and both the store and services have network allowed. I am not logged into a Google account though, and would like to avoid doing that at all cost.

Dandellion

I'm seeing the same behavior, play integrity basic is not working in the app you linked

DeletedUser370

Dandellion Unable to reproduce. The app that was not linked to shows a green checkmark next to "MEETS_BASIC_INTEGRITY": https://play.google.com/store/apps/details?id=gr.nikolasspyr.integritycheck

I'm assuming you have Sandboxed Google Play installed?

Edit: Okay, if I sign out of Play Store (Settings app > Passwords, passkeys and accounts) then the app tells me that my device does not meet basic integrity.

DeletedUser370

DeletedUser370 Edit: Okay, if I sign out of Play Store (Settings app > Passwords, passkeys and accounts) then the app tells me that my device does not meet basic integrity.

The app gives me the same result on stock PixelOS when I am not signed in to Play, and in that case it also tells me that the device does not pass MEETS_STRONG_INTEGRITY. I don't know if any of this is new.

Viewpoint0232

DeletedUser370 if I sign out of Play Store (Settings app > Passwords, passkeys and accounts) then the app tells me that my device does not meet basic integrity.

Interesting and sad. I wonder if there's any official documentation from Google for this? It would be a good argument (I think GOS was talking to the EU Commission) for Play Integrity to be anti-competitive.

matchboxbananasynergy

DeletedUser370 Seems new, yes.

Schiglip

Stewart
On a "regular" Android phone, Yuka stopped working the minute I deleted the Google account from the phone. Same for ChatGPT.
https://play.google.com/store/apps/details?id=io.yuka.android
Huawei Mate 20 Pro. Android 10.

Equal2024

Out of curiosity... there's no reason Google can't require the Google Play app to check for Play Integrity, and lock GrapheneOS users out of installing/updating Play Store apps altogether, is there?

de0u

Equal2024 From a technical perspective I suspect that's possible. If it happened it might put an end to Aurora in its current form. Extending the idea a bit, I suspect they could require attestation to access the FCM servers, in which case part or all of microG might become unworkable. The future is uncertain!

At the end of the day, Google pays to build and run the servers and the app store. I suspect they consider various business, reputational, and regulatory issues when making operational decisions.

GrapheneOS

Equal2024 de0u They can't do that because there are far too many legacy Android devices they'll be supporting for 10+ years.

Equal2024

de0u That's true.

I suspect Google will want to make sure there is a lot of uptake for Play Integrity among third-party developers first before they start cordoning off the store from all devices that don't meet it. That would involve effectively killing older devices that are unable to support current Play Integrity checks, which some developers like banks won't be in favor of (whether that attitude is good or bad). So if it's coming, it's probably some time away, at least.

I can't shake the feeling this is somehow inevitable, though. Google already tried WEI, which is a very similar thing. The only reason they abandoned it was because it was unpopular. Play Integrity hasn't gotten nearly as much backlash from third-party developers. I can only see it getting bigger... in the context of the current antitrust trials Google is embroiled in, expanding Play Integrity would probably be a poor move, though. So maybe that's reassuring.

(Though on the one hand, WEI might have been very helpful for blocking AI scrapers...but it wasn't worth the downsides)

schweizer

schweizer SwissID has such a bad reputation that I expect them to shut down the service once AGOV is established.

I just got notified that SwissID will shut down it's app on October first this year. Their recommended migration path is to use passkeys. Sometimes it takes less time than expected. But it's sad so much government money has been spent on that service which was flawed by design.

« Previous Page Next Page »