LuxTrust Mobile 4.18.0 Fails to Launch on GrapheneOS (Pixel 6a)

stubble1861

Hi all, I appreciate that this a very niche issue but it seems that the latest update of the LuxTrust mobile app. It crashes after starting and shows a weird message "Error code: LT_ROOTED_DEVICE: LuxTrust mobile app has stopped working because the configuration of your device may compromise data security.".

The app logs shows a series of "W libc: Access denied finding property" messages:

ro.debuggable
ro.secure
ro.boot.serialno
qemu.*
vendor.*
init.svc.*

Are there any workarounds besides downgrading? I downloaded the previous version but need to get the phone with their support to get it validated.

DeletedUser370

Tested. P6a. GrapheneOS 2025061300.
com.LuxTrustMobile 4.18.0
versionCode 29137701

Exploit protection compatibility mode enabled: no change
Exploit protection compatibility mode disabled + secure app spawning disabled + reboot = no change
Owner profile used
GrapheneOS does not show a notification about Play Integrity usage, but the app redirects to https://error.luxtrust.lu/mobile/rasp/root?version=7.4.0&reason=0&root=40AFAADB and then crashes or something

stubble1861 I think you should let the app support team know that your Pixel device is not rooted and ask for them to please unban GrapheneOS.

jem

Same issue here. I contacted Luxtrust and I got this meaningless response by e-mail:

Customer Service | LuxTrust S.A. wrote:
Hello,
Our App no longer supports Devices or Operating Systems that do not natively use google services, as is the case with GrapheneOS. I’m afraid you will need to switch to a different phone, tablet, or acquire a LuxTrust Scan device through our website.

I recommend anybody affected to contact them:
https://www.luxtrust.com/en/contact-us

According to Luxtrust's own page they had 700k+ users in 2023. Probably more now.

This is a serious issue for GrapheneOS: Luxtrust is the authentication mechanism used by all major banks based in Luxembourg. It is also used to access the on-line services of the public administration.
In practice, this makes GraphneOS hardly usable as a single telephone for hundreds of thousands of people with a relationship with Luxembourg.

speckled582

Hi same issue here, I called them and they asked me to send them some info, but have gotten nothing in return. State services depend on Luxtrust, they can't be allowed to force you to use one OS over another, especially since the Token was discontinued as a valid alternative

CawCaw

I installed Graphene OS a day ago and was setting everything up. Then I tried to do a profile for Finance and BAM, Luxtrust is not supported it seems this is a shame....We cannot really use Graphene OS as we need it for our banks as well as for other official things.

I wrote the support as well just now.

Schiglip

CawCaw About the need for the Luxtrust app. I used to have a separate device for Luxtrust (the small one-button token). I could personnally accept to keep a secondary old "Googled" phone just as a "Luxtrust token". That's what I did at some point with itsme, even though itsme did run fine on my Huawei Android 10 phone at the time, but I didn't like to have itsme on my "daily".

For the rest, I can only confirm the app failed for me too and I saw this sort of message (the last part references Xiaomi, and invites to contact them). I will contact them. Note that their app does support sdk 26, Android 8, 2017. So, it's "odd" that they mention security to block our sdk 36 from 2025...

"Error code: LT_ROOTED_DEVICE
Dear user, sorry for the inconvenience
LuxTrust mobile app has stopped working because the configuration of your device may compromise data security. This may be due to the Xiaomi Mi Home app. Please update the Xiaomi app to the latest version. If you are experiencing this issue without Xiaomi app, please call us ..."

Schiglip

I have seen the information above about "no longer supports Devices or Operating Systems that do not natively use google services, as is the case with GrapheneOS."
For reference, in this (possibly older) public document https://www.luxtrust.lu/downloads/guides/UG-0019-P-F-LuxTrust%20Mobile%20App.pdf, they state it as

"Quelles sont les exigences techniques pour utiliser l'application LuxTrust ?
L'application LuxTrust est compatible avec iOS 13 (ou plus récent) ou Android 7 (ou
plus récent). Pour des raisons de sécurité, LuxTrust n'accepte pas les appareils rootés
ou jailbreakés."

And 2 more cents. To login to public services, I think you have the option to use the GouvID app, or eletronic identity cards from some other countries. At least you do for "myguichet". I think the best leverage, if LuxTrust doesn't want to move, will be your own bank. They are the real customers/sponsors of Luxtrust. And you are a real customer of your bank.

Patio6614

I agree that we should put pressure on the banks (the actual customers), as, although well intentioned, this app should work on GrapheneOS.

In the meantime, I thought I would mention how I got it back working on my device (If you have it, first uninstall it). Use Aurora Store (you can get it via fdroid), search for the Luxtrust app and instead of installing it, click the 3 dots in the right corner and manually download the version code 29077247 (This is the code of the 4.17.0 version app).
(Also, disable auto updates in the settings of Aurora).

Now, all you have to do is reactivate the app by calling them.

I know this is not a longterm fix, but, at least for now, you will have a working luxtrust app.

jem

Good news:
After a recent update to a new Luxtrust version (4.19.0) the Luxtrust app works again in my GrapheneOS device.
So, it seems that the new version has fixed the issue with GrapheneOS.
I hope it's the same for all of you.

Many thanks to everybody who invested a bit of time to make a complain to Luxtrust. I'm sure it has made a difference.

LuckyLuke

jem I can confirm that. The app is working again. Even though I didn't believe that our complaints would change anything, I do think they helped.