• Off Topic
  • Banking apps have updated and are now complaining about root

When you receive a warning from your banking app indicating that your device may be insecure, jailbroken, or rooted, this is usually due to a SafetyNet/Play Integrity API issue. Specifically, your device fails to pass MEETS_DEVICE_INTEGRITY.

For more details, see the planned feature on this topic at the GrapheneOS issue tracker: Issue #1986.

As of now, there are no direct solutions available to users. However, you can help by contacting your bank. Inform them of this issue and suggest they refer to the GrapheneOS Attestation Compatibility Guide for their developers, available here: Attestation Compatibility Guide.

  • ntop replied to this.

    akc3n
    Thank you so much for the update. Appreciated

    bookreader The problem with that model is you always need a trusted third-party to custody the gold for everyone, and that trust has been broken time and time again throughout history.

      I can confirm that the app version 128.02 is also not functioning, displaying the same error: "Sorry, you can't use this app as we've detected that your device has been jailbroken/rooted. You can still use our Mobile Banking or Internet Banking sites via your web browser."
      As previously mentioned by akc3n, this is due to an API issue where your device fails the MEETS_DEVICE_INTEGRITY check.
      The only recourse is to persistently contact your bank's technical support, urging them to address the issue by adhering to GrapheneOS's Attestation Compatibility Guide - highly unlikely that they will do that as they don't care about our existence.
      It seems that in the future, they may restrict access to only Google Chrome on a Windows mobile phone :)))

        • [deleted]

        pacemaker Why not Embarras them on Twitter?

        mhbcrypto Why do you need a 3rd party to store your gold? I don't. The 3rd party storage problem comes when you are dealing with proxy currencies. I.e. paper money that represents gold held by a 3rd party.

        I hadn’t started Lloyds since posting in this thread and now I get, when it does ‘authenticating your device’:

        9300101: Sorry, we have de-registered your device as we’ve detected it’s been jailbroken/rooted. You will not be able to use the app but you can continue to use our mobile site.

        If I ‘try again’ I get:

        App launch failed
        Sorry, we’re having a few technical problems. Logging in again may fix the issue, but if this doesn’t help, please try again later. (7)

        If I try the app installed in a blank profile as per the instructions above it asks me to login (didn’t do it on that app before) then a similar message (9300100, “Sorry, you can’t use this app as we’ve detected that your device has been jailbroken/rooted…”

        So looks like I fired whatever tripwire there is in the app.

        • ntop replied to this.

          Foggy
          Let me know if you find a fix pls

          Thanks

          I ended up extracting Lloyds apk version 126.01 (installed from Aurora and works fine) from my Pixel 7 Pro to install it on my new Pixel 8 Pro as Pixel 8 Pro gets the latest, non-working version from Aurora by default.

          So currently running the 126.01 and will not update for time being.

            Volen
            What's your setup pls as I tired 126 but fails

              ntop

              The app is installed in the work profile (Shelter) with Play Services installed. No other specific config.

              DeletedUser28
              Starling Bank app has been working for me ever since I joined GrapheneOS probably 2-3 years ago. Exception being the Google Pay functionality. I contacted them in 2021 to confirm whether they use SafetyNet but they refused to divulge that information. I don't know whether I should contact them pro-actively and point them to the attestation page, as it's been working well so far.

                finitefutility

                I wonder what they'd offer as a backup option because you can't do online banking (in browser) without the app. And they don't have physical branches either.

                By the way, I saw in the app changelog that they are now dropping support for Android 5. So hopefully it's going to be a while until they enforce strict "safety" checks that are not supported by older devices

                  DeletedUser28
                  They have a developer community on Slack, wonder if that is an area to get more information indirectly. Not sure they would offer an alternative but given they support old Android OSes hopefully we're good for another few years.

                  finitefutility

                  I am also using Starling app and have no issues at all - installed it in my work profile with sandboxed Google Play services installed and it works like a charm, the latest version downloaded from Aurora Store. I didn't do any workarounds like I did with the Lloyds app.

                    Volen

                    Even without Play Services it works perfectly, just without notifications.

                    7 days later

                    Volen thanks works for me too, so guys whoever trying on Lloyd's bank you need to get aurora store and from there manually download mentioned version of app

                      Mrchips

                      Glad it works. However, something tells me that the app will stop working at some point, demanding to update to a newer version. This is where all the issues will come up again.

                      I tried to talk with their team but they are useless.

                      23 days later

                      I had the Lloyds app downgraded to the last working version however today I was shown an error message saying they no longer support this app and I have to update to the newer version. As expected newer version is not working. I honestly don't see how people might want to use cbdc in the future if the current system is such pain in the ass already. fu€k banks