[Android General] lee.wp14:
Beware, you are about to enter a dangerous zone!
​

I N T R O D U C T I O N

Signature Spoofing is a feature that allow apps to impersonate themselves as other apps. It works by faking the package signature of an app as the one that the app is trying to spoof.

This feature is common among microG users, as it is required for microG's custom implementation of Google Play Services to work fine.

If you do not understand what microG is, you should consider leave this page. You are probably trying to do something dangerous. If you know exactly what you are doing, you may however proceed at your own risk :)

Thanks to @Primokorn for starting this thread and maintaining the list previously!

I M P L E M E N T A T I O N

You have 3 options. Read carefully to determine which option suits you the best.

​

O P T I O N 1 : Xposed Module​

If you are a Xposed user, and you need a hassle-free implementation method, go ahead and get the FakeGApps module designed for microG!​

Xposed Repo | GitHub​

​

O P T I O N 2 : System Patch​

If you want a more persistent, perfect approach, you may patch your system to have Signature Spoofing feature supported.​

There are quite a number of Signature Spoofing patch out there, mainly Haystack, Needle/Tingle, and NanoDroid patcher. It is advisable to use this approach on deodexed systems only.​

Haystack and Tingle requires a PC and some basic knowledge on running scripts, while NanoDroid patcher is actually a flashable ZIP - it patches your system on-the-fly.​

Additionally, Haystack provides a patch for Settings app that allows you to turn Signature Spoofing on and off in Developer Options.​

Haystack - GitHub​

Tingle - GitHub​

NanoDroid Patcher - Direct | GitLab | XDA Forum​

​

O P T I O N 3 : Use supported ROM​

There are quite a number of ROMs which comes with Signature Spoofing support. Some is enabled globally, some requires you to enable it in Developer Options, while some requires you to grant Signature Spoofing explicitly (managed by AppOps). However, do take note that there are still a few Android distributions which rejects merging of Signature Spoofing implementation commit, commented that implementing Signature Spoofing is to introduce a big security hole.​

Below is a list of Custom ROMs that supports Signature Spoofing officially:​

AospExtended (AEX)

Android Ice Cold Project (AICP)

AIMROM

Android Open Source Illusion Project (AOSIP)

ArrowOS

CarbonROM

Corvus ROM

crDroid

dotOS

Ground Zero ROMs (GZOSP)

Havoc-OS

LineageOS for MicroG

MSM-Xtended

OmniROM

Inactive Custom ROMs with official Signature Spoofing support :​

Android Open Source G-OS Project (AOSGP)

Atomic-OS

Cardinal-AOSP

CitrusCAF

HalogenOS

Hexa-Project

MarshRom

nAOSProm

Nitrogen OS

Tugapower

Validus

ViperOS

XOSP

​

N O T A N O P T I O N : For Developers​

MicroG personally provides Signature Spoofing patches on GitHub, however those patches do not include a switch for toggling Signature Spoofing.​

Developers can refer to commits on Omni's gerrit, which includes a switch for Signature Spoofing in Developer Options (commit 1, commit 2). You can however and also highly recommended, refer to more latest commits from other ROMs.​

For Android 4.4, I personally have adapted the commit from Omni's to make it works for Android 4.4.4 (commit 1, commit 2, commit 3).​

​

​

OLD

​

IF YOU WANT A XPOSED MODULED

You can simply use this Xposed module: FakeGapps (tested on Oreo 8.1 by @kurtn)

IF YOU DO NOT USE XPOSED

You can use Tingle but you have to run it each time you install a new ROM or a dirty flash. The ROM has to be deodexed. Thanks @ale5000

Haystack is also a solution.

Do you know NanoDroid? It's a microG installer with a large selection of useful apps. Additionally there is a flashable zip to patch your ROM. It automatically re-patches after a dirty flash (e.g. OTA update). No adb/PC required! (thanks @Setialpha)

Your last option is to use a custom ROM that includes the signature spoofing patch. Here is the list:

The signature spoofing option is normally available at the bottom of the dev options or in Settings > Apps > Advanced (gear icon) > Additional permissions. Or simply ask the permission from microG's self-check screen.

• AEX AospExtended

• AICP

• AimRom

• AOSGP

• Android Open Source Illusion Project (AOSIP)

• AtomicOS

• CarbonROM

• Cardinal-AOSP

• CitrusCAF

• crDroid

• dotOS

• Ground Zero Roms aka GZR: Tipsy

• HalogenOS

• Havoc-OS

• Hexa-Project

• LineageOS (unofficial builds for several devices) thanks to @Simon94 // Official website: https://lineage.microg.org/

• MarshRom

• nAOSProm

• NitrogenOS

• OmniROM

• Tugapower

• Validus (Oreo at least)

• ViperOS

• XOSP

Signature spoofing is also supporting on these specific custom ROMS:

Click here

Thanks to all these developers!!!

PENDING REQUESTS TO INCLUDE SIGNATURE SPOOFING IN THE FOLLOWING CUSTOM ROMS

CLOSED REQUESTS

Notes

:

1. I won't check every ROM thread on XDA so feel free to tag me or post a comment below

2. You will probably have to enable the signature spoofing in the dev options. Then check microG settings app > Self-Check.

3. Have a look at the development section of your device specific forum. You may find one of these custom ROMS!