yashsingh1/xdaforums huggingface dataset:
[Magisk] DaisyF:
I wanted to get itsme 4.7.0 (apkmirror) working and change from delta to regular magisk. My config now :

Pixel 6, Android 14

Working :

Itsme 4.7.0

Wallet

Play Store is certified

Blfs* banking app with fingerprint

(Edited)

Magisk 26.3 (first time now for me not using magiskdelta)

Zygisk on, EnforceDenylist off

Hide Magisk in magiskapp settings (with MagiskHideRename) to settingzz or some other name.

Populate denylist in magisk with bankapp, itsme, play store, wallet, google play services...

Modules :

Playintegrityfix

Systemlesshost

Shamiko

ZygiskLSposed

HideMyApplists (HMA active in LSposed)

Hide itsme from playstore (no updates unless manual)

Hide HMA, settingzz (renamed magisk) from bankapp, Wallet, Itsme. You need to look in Magisk main screen, app section below "installed" to find the renamed "hidden" magiskpackagename, and add that to HMA. An example : k.lk.maw

Tip : test bankingapp, playstore certification and itsme after making changes with clear cache and storage, sometimes reboot. Also for getting fingerprint to work.

For giving apps root I offload them as much as possible to Shizuku with root access.
[Magisk] woutercools:
I did all these steps but Itsme still detects root.

Was there some step you struggled with?

Is there some detail you didn't mention?
[Magisk] DaisyF:
Struggle : it took me 4 hours to get everything sorted 😁

I didn't mention populating denylist in magisk with bankapp, itsme, play store, wallet, google play services... Did you do that ?

Also, HideMyApplists is a very important part of the solution. I have two templates (as I described). One for stopping updates to itsme. The other (that I call hide root) for extra omega oily hiding the renamed magisk and HideMyApplists itself from itsme and also (again) banking app, (show system apps) play store, wallet.

You need to look in Magisk main screen, app section below "installed" to find the renamed "hidden" magiskpackagename, and add that to HMA. An example : k.lk.mawu
[Magisk] Pandoriaantje:
Same thing here. And i need to urgently login to some site..
[Magisk] Bubble-be:
I did a round of root solutions during the weekend ... well until now really. A real timewaster this cat and mouse game.

tl,dr: Original Magisk works for me

I had no luck with Magisk Alpha

Delta was better but enabling zygisk was not possible - though you don't really need this for itsme, Shamiko & Safetynet fix can be handy for other stuff. This was the solution I used before.

Kernelsu looked promising, with an extra module to update zygisk. I liked it: clean and no fuss. But it kept losing superuser assignments on reboot. Apparently it's a known bug, fixed but not really apparently on my device.

Now on topjohnwu's original Magisk

Zygisk on

Shamiko 0.7.3

Play Integrity Fix 9.3

Enforce DenyList OFF

Deny itsme

Deny TB Checker

-> play integrity basic & device pass

-> detects Magisk app (you can hide it)

But I haven't been able to authorize it. I normally use my ING banking app as source, but even trying with EID on the pc gives me "Oops, something went wrong". Has anyone else authorized in the last few days?
[Magisk] DaisyF:
Regarding your "oops" error message when activating itsme with the bank app : I got one also but more descriptive. Mine said that "newly registered devices can't be used for authentication". So I left the bankingapp alone for ten fifteen minutes and tried authing itsme again. It worked.
[Magisk] raystef66:
For those on kernelSU, after updating to 4.7.0 my device with kSU (added to kernel - ksu v0.6.9) even detects this kSU root solution. Even when app is as UMOUNT.

Was working fine before on kSU but unfortunately this didn't last long.

Tried to revert to 4.6.1 but same issue....
[Magisk] oniemjan:
i gave up :-(

installed itsme on a seperate old phone that's just collecting dust in a drawer
[Magisk] Robin488:
Strange never managed to get Itsme working on A13 after a specific version (4.2 I think). Now I did a clean install to official A14, installed Magisk 26.3 with modules Lsposed, systemless host, Shamiko, Universal Safetynet Fix from kdrag0n. Added Itsme to DenyList but Enforce DenyList is off.

Installed HMA en hide Itsme and Play Services for Play Store.

Itsme 4.7.0 working :).

Maybe something with A14 no idea. Had this setup before on A13 but it was not working.
[Magisk] virol:
Bad news, oldest working itsme 4.0.0 ask for updating, so cant use it anymore.

tryed out newest 4.7 or 4.8 on different magisk setups original,alpha delta with no luck

now even on magisk 26.302 with newest shamiko 7.4 from a couple of days before released gives root detection

with or without zygist on or off, always root detection

maybe an other approch will help me out when I know WHY and HOW itsme detects this root status?

every help is welcome
[Magisk] Bubble-be:
Make sure Zygisk is ON and Enforce Denylist is OFF or Shamiko won't be triggered to do its thing.

On my end: a new ROM, a new working config

KernelSU - default unmount

+ Zygisk v4-0.8.8

+ Shamiko 0.7.4

itsme 4.7.0

(my account is still not budging though, I'll have to create a ticket)

Edit 20231027 - got upgraded to 4.8.1, still no root detection

No response yet from the ticket for my account
[Magisk] virol:
What do you Mean by ticket for account?
[Magisk] Bubble-be:
There seems to be problem with my itsme account, I described it a few posts back:

I've created a ticket with itsme about the problem.
[Magisk] virol:
Erased txt

Are you using the itsme app or the itsme e2e ( witch is a test app)
[Magisk] Bubble-be:
Normal itsme, e2e is useless as far as I'm aware.

Current ROM state circling back to Lineage

It doesn't play well with kernelsu - meaning root is still detected

Lineage 20

Magisk Delta

Zyisk off

Unmount modules by default
[Magisk] virol:
Thx for your update Bubble-be!

Do you Mean that itsme is again detecting root on Lineage 20 ?

Back to " no solution to use itsme " for the moment.

Repeat my question here on this forum- thread for more info why itsme is detected

Thx
[Magisk] Bubble-be:
No, it was detecting root using kernelsu on Lineage.

Switching to Delta with the settings mentioned above made it work again.
[Magisk] Fabianvk:
Are you using a VPN? I had the same problem when mine was on.

As for detecting root, I think there's no settings that can work on every phone, maybe there are too many parameters involved.

I had Magisk 26100 with zygisk and shamiko and root was detected.

When I upgraded to 26200, still detected but when I turned Shamiko off and enforced denylist on, root wasn't detected anymore 🤷‍♂️

Now I have:

• Magisk official 26300

• Zygisk ON

• Magisk app not hidden

• Denylist enforced

• Universal SafetyNet Fix 2.4.0-MOD_2.0 by kdrag0n

• LSPosed 1.9.2

• Itsme 4.8.1

and no root detected.
[Magisk] arl0ng:
I decided not to use itsme anymore because I noticed that it was now possible to enable login via Login, password and 2FA

All you have to do is activate the account via a card reader.
[Magisk] virol:
What is 2FA ?
[Magisk] arl0ng:
Two factor authentication

I use Aegis

Aegis Authenticator

Aegis Authenticator is a free, secure and open source app for Android to manage your 2-step verification tokens for your online services.

getaegis.app

But you can use Microsoft authenticator, Google authenticator etc
[Magisk] Bubble-be:
Aegis is my choice too, but I also need MS authenticator for work.

Another datapoint to the pile:

Lineage 20

KernelSU 11326

+ ZygiskSU on KernelSU v4-0.8.0

+ Shamiko v0.7.4

+ Play integrity fix v9.8

I got Itsme reactivated by using the explicit URL https://my.prd.itsme.be/unblock?lng=nl_BE as instructed by support. Strange that the normal way does not transfer to this site correctly or something?
[Magisk] Robin488:
Can confirm Itsme is still working after 4.8.1 update. Same modules/settings. Didn't change anything.
[Magisk] How.to:
Hello All good​

Phone please don't root bad full.​

Original working phone.​

Root information​

Magisk [STABLE] 26.3 (26300)​

Magisk [BETA]​

Magisk [CANARY | DEBUG] 26301​

​

Do not work

itsme

​

Root information MoDs​

Magisk Alpha ​

Magisk Delta​

Lygisk​

​

It works for me itsme

​

Thanks warring​
[Magisk] Bubble-be:
Update to 4.9.0 still working
[Magisk] VeDoxe:
Itsme 4.9.1 works for me with:

Magisk 26.4

Module:​

play integrity (Chiteroman)​

Shamiko v0.7.4

Zygisk Next

With zygisk deny list enabled: Itsme, carrier services, Google Play services, Google play protect service and google play store
[Magisk] Pandoriaantje:
Got itsme (4.9.2) working again, unfortunately too late for my tax declaration.

Thanks to ambasadii for updating the magisk kernel module to 26.4 (and topjohnwu for magisk), and the Shamiko dev(s).
[Magisk] woutercools:
I can confirm it's working again.

Thanks for the heads up.
[Magisk] Bunecarera:
Can also confirm.

Magisk 26.4 with play integrity (Chiteroman), Shamiko v0.7.4 and Zygisk works.
[Magisk] Robin488:
4.10 also
[Magisk] jaboto:
Cannot make 4.10 work with Magisk 26.4, Play Integrity Fix 14.5 and Shamiko v0.7.5(194). How did you manage @Robin488 ?
[Magisk] How.to:
SEE HERE​
[Magisk] Robin488:
I have indeed Magisk 26.4 (hide, Zygisk on but Enforce Denylist off), Play Integrity Fix 14.5, Shamiko v0.7.5 and Zygisk - LSPosed for HMA. The strange thing is that on A13 Itsme was not working. After I did a clean install to A14 (Pixel 7a) Itsme worked with same modules and settings.
[Magisk] bobfrantic:
Working for me:

R65A24840-Kitsune (26404) {pre release}

Zygisk on

MagiskHide on

Enforce SuList on (all rooted apps applied of course)

That is all I need to do...

Its Me 4.10.0 working!!!

Galaxy A52S with Android 14 one UI 6.0
[Magisk] Bubble-be:
Fooling around with Apatch

Lineage 21

Apatch

ZygiskNext (Apatch fork)

I also have PlayIntegrityfix installed, but that's mainly because Apatch uses public test keys to sign the kernel and that triggers a warning on boot. It is not needed for Itsme.

Also working on the same Rom is KernelSU + Shamiko + ZygiskNext + PlayIntegrityfix (optional)
[Magisk] Kelnow:
Working for me:

LineageOS 20 2023-10-02 Nightly

Magisk 26404 (hidden)

- zygisk on

- itsme added in Magisk denylist, not enforced

- shamiko 1.0.1

- play integrity fix 15.1

itsme 4.10

Hide My Applist (via LPosed) hiding all root related apps to itsme

Had to clean itsme storage one last time before it worked
[Magisk] rudi.timmer:
Working also for me:

LineageOS gargoyle v1.2

Magisk Canary 26404 (hidden)

- zygisk on

- itsme and payconiq added in Magisk denylist, enforced OFF

- shamiko 1.0.1

Itsme 4.11.0

Payconiq 8.5.1.729394
[Magisk] xavier.miller:
And for Itsme 4.11 ?

EDIT:

Kitsune Mask (EDIT2: stable and canary), no modules except Systemless Hosts (for AdAway)

Zygisk disabled

Magisk Hide ON

Enforce SUList On

SuList containing Itsme and apps detecting root
[Magisk] Timmmmaaahh!:
This seems to be related to the French 'France identité' app discussed here. You may get some ideas from both topics :)
[Magisk] Robin488:
Still no problems here. I'm on Itsme 14.12.2.

-A14

-Magisk Delta

-HMA

-Play Integrity Fix

-MagiskHide

-Zygisk
[Magisk] xavier.miller:
Since yesterday, biometrics stopped working (LineageOS 21 TrebleDroid (GSI)), but still working with pincode
[Magisk] Timmmmaaahh!:
Just to rule this out: you didn't change anything related to biometrics (e.g. add a finger)? In which case, all biometric logins need to be enabled again by design.
[Magisk] xavier.miller:
Nope, and biometrics work in other apps (lock screen, banking, payconic). It is not disabled but if I disable it and re-enable it in Itsme, I got an error message.

Hmm dit it again and I didn't get the error message. I will see what will happen when i will use Itsme the next days...

Edit: biometrics work again
[Magisk] GalaxyS5Fan:
Hi everyone, I've got an s4 mini value edition in mint condition which is super old. So I had to install Lineageos 18.1 without Magisk, and itsme just works fine, except that I also want to install Galaxy Wearable which then won't work, unless if I try to install Magisk and Zygisk LSposed module, along with the WearableSpoof...

Is there a specific guide or checklist I should follow to hide root from itsme (and other relevant apps)? Or even better, getting Galaxy Wearable working without Magisk at all in a custom rom?

Device and rom information:

Galaxy S4 mini value edition GT-I9195i

LineageOS 18.1 (compiled 2023-11-26), link here
[Magisk] Bunecarera:
Anybody got itsme 4.15 working?
[Magisk] conspiracyBE:
4.15 works just fine for me.

I use:

- Magisk Kitsune Mask (Canary) instead of Magisk.

- Hide magisk app

- Enable MagiskHide

- Enforce SuList

- ONLY select apps that NEED root. (The default is no root for apps)
[Magisk] Bunecarera:
Thank you very much kind sir.

This did the trick.

Question: I've been using TeMeFi since forever to hide apps from the Playstore to prevent them from updating.

Is this still necessary with Kitsune?

Or just as a good measure?
[Magisk] conspiracyBE:
You can just search for the app in the playstore and disable auto-update there (via the 3-point menu button at the top of the app page). Or am I missing something?

You don't need an other app for that.
[Magisk] Bunecarera:
I have auto update disabled as standard in the playstore settings.

So I get a notification saying for exemple "14 apps need an update". And then I can update each app all at once. Or unselect the ones I do not want to update.

But I do not want to think about which apps I select and which I do not want to update :)

Detaching from the playstore with Temefi helps in that way. The app will simply not update, even when the store says it can and you try to.
[Magisk] conspiracyBE:
Ok. Good to know! Might still be interesting to do since you never know when they find a new way to detect root.
[Magisk] xavier.miller:
Kistune stable 26.4 also works with the same settings on itsme 4.15, payconic, argenta, bnp paribas fortis. I disable zygisk and don't hide.
[Magisk] toorzilla_:
Hello, my saftynet fails with that setup on a S21 and Android14, do you use any module to pass?
[Magisk] xavier.miller:
I use LineageOS 21 GSI TD. There is a TrebleDroid hack to bypass some integrity checks. Maybe this is why it runs fine for me.

I see in the Magisk Reddit subforum that more and more banking/security apps are detecting rooting. Sometimes we will be forced to run on non-rooted devices...
[Magisk] Rikj000:
If anyone is struggling with Belfius + root since 2024-07-01

(= the day they started blocking access to rooted devices)

Look no further, just released a simple Xposed module to work around the check 😄

https://xdaforums.com/t/release-v1-0-0-belfius-root.4680025/
[Magisk] PalmerBE:
Hi CospiracyBE, what do you mean by :

"- ONLY select apps that NEED root. (The default is no root for apps)"

In MagiskHire do I have to tick everything but the few (e.g.: AFWall+, Shelter, ..) app that need the root ?

Thanks, Merci, Bedankt :)
[Magisk] Kelnow:
Thanks! I couldn't get it working with your exact steps here but I got it working now with:

- LineageOS 21

- Magisk Kitsune Mask (Canary 27001)

- (app not hidden)

- Enable MagiskHide and Zygisk

- Enforce SuList

- Hidden apps needing root in MagiskHide

- Shamiko v1.1 module (probably useless here)
[Magisk] artik-ice:
I have a problem with itsme

Pixel 6 pro AP1A.240405.002

Magisk Kitsune Mask (Canary 27001)

- (app not hidden)

- Enable MagiskHide and Zygisk

- Enforce SuList

- Hidden apps needing root in MagiskHide

- Shamiko v1.1 module

It'sme opens and closes instantly. works only when Zygisk is disabled, but i need few modules from lsposed and rebooting always to use itsme looks so stupid and difficult. Any new ideas?
[Magisk] AnyNameYouWish:
@conspiracyBE

@Bunecarera

@xavier.miller

Sorry for the ping but seeing you're successful with your apps and configurations, could you give a try to France identité?

So far nobody with root managed to go beyond the login screen without an error.

See related topic, thanks if you care to give a look :)
[Magisk] Bunecarera:
Not really since I'm not French...
[Magisk] xavier.miller:
Hi @AnyNameYouWish , Google Play Store refuses that I load it. No reason given, I guess because I am in Belgium. I went last week in France and Google Play Store wanted that I upgraded all my apps, and Payconic refused to run in France.
[Magisk] AnyNameYouWish:
Thank you, it was worth giving it a chance ^^

It's probably related to you location so vpn could help for some issues.

Also, just so you know in a general way and not for that specific situation, there's a way to download apps from the play store when the address is restricted :

Evozi apk downloader
[Magisk] TheJosVermeulen:
You have to enable denylist for com.google.android.gms. All of it, not just the one part it recommends at first.
[Magisk] Timmmmaaahh!:
Right! Stupid, I was convinced that was already enabled. Passing now, thanks. Keytrade Bank is still tripping over something but apparently not SafetyNet.

Momo is nagging about MagiskHide, could that be related?

Spoiler content hidden.

With LSPosed and SudoHide+Hide my applist, Keytrade wasn't detecting, so it must still see the hidden Magisk Delta app for what it really is.
[Magisk] arl0ng:
Hi,

There is another way to install version 3.6.4 of itsme.

I downloaded the apk from apkmonk, installed it, opened the aurora store, noted the code version of 3.6.4.

1646046751

I uninstalled the apk from apkmonk and reinstalled via aurora store.

I then add it in deni list
[Magisk] citroene:
Is there a way to do this with build in Magisk in kernel?

i have the ambasadii kernel with magisk 24.3.

I want to install newer version of itsme because i get this warning

Itsme 3.6.4
[Magisk] Timmmmaaahh!:
Like your username! West Flemish? 😁

This method (some additional notes here) has been the most successful to me and it's arguably the safest option.
[Magisk] citroene:
Yess West Flemish :D From Ostend.

work this method also with in kernel compiled magisk?

i have Ambasadii Cruel Kernel G97xF-v6.6
[Magisk] LiteBit:
Hi,

I've a Oneplus 9Pro, in the following setup:

- Android 11

- OOS 11.2.10.10.LE15BA (I've no interest in other roms on my main OnePlus device, I always preferred OOS)

- Magisk 23.0 (23000)

- Magisk app 23.0 (23000)(21)

- Only one Magisk Module : Systemless Hosts

- using Magiskhide and Magisk App itself hidden

My reasons to use root, I'm using:

- AFWall+ (why: to control which apps can have access to internet on mobile data, my local lan, any wifi ... )

- Macrodroid (some actions I use still seem to require root mode: mobile data on/off, GPS enable/disable, NFC enable/disable)

I'm also stuck with the itsme issue (currently on version 3.4.2, anything above that seems to detect root)

I'm still in duo (I'm working a lot in IT security and privacy related projects, so I understand the pro and con of each camp) to

1/ take on the time and risk of trying to upgrade to the new Magisk (and its new way of working)

2/ give up on root (and loose the ability to control which apps can access internet, via WiFi or data or my LAN // and seeing from the connection log where certain apps want to connect to)

Some questions if I can ask them here :

1/ is there anyone who has gone through upgrading from Magisk 23.0 to a later (official) version, and make it work with:

- an itsme version which is not yet set to expire (by reading the forum, it should be at least above 3.6.4?)

- KBC banking apps (I stopped trying with the Keytrade app, as I don't use that a lot, if not at all when I'm mobile)

- I've read through the thread, but unless I missed something, I've not yet seen the "recipe" to make it work

2/ Can you easily become unrooted by installing the next full OTA system update without reapplying the Magisk install and having to do any further cleaning? (LE2123_11.C.47_1470 is waiting to be installed on my phone)

Thanks
[Magisk] Timmmmaaahh!:
Ah, van 't zeetje, heweldih! Ik zien van Bruhhe. // Ah, from the sea, amazing! I'm from Bruges. Spoiler content hidden.

Why would kernel be a factor? Both methods do the same thing but the Delta iteration seems more trustworthy. If your kernel breaks root hiding, both methods will fail. Only one way to find out ;)
[Magisk] datassthough:
ItsMe (and a few others) work great so far on my OnePlus 6, LineageOS 19 (Android 12).

Following this method

Download Delta 25100

Unhide original Magisk

Install Delta (& grant superuser twice)

Direct install from Delta& reboot

Uninstall original Magisk

Make sure zygisk is disabled

Enable MagiskHide

Then install ItsMe 3.9.1, hide it in MagiskHide and reboot (may need to reboot multiple times)

Further specs:

Magisk Delta 25100 (hidden) download Delta

NO Zygisk

MagiskHide enabled

Hidden ItsMe and com.google.android.gms

ItsMe 3.9.1 (apk downloaded)

Apps that also work:

Easy Banking (BNP Paribas)

Paypal

Payconiq

Google Pay

Google Play store certified
[Magisk] m.omdaa:
where can I download Delta?
[Magisk] datassthough:
@m.omdaa (is this how tagging a user works?)

Here's the GitHub repo https://github.com/HuskyDG/magisk-files

I'll also add it to my original post
[Magisk] Bunecarera:
I can confirm this works.

For now at least...

Itsme forced me to upgrade to 3.9.2 from the 3.5.4 version I was using...

Then gave me the "oh now, you are rooted, we must protect you and your virginity at all costs!!! It is not safe to be rooted, the russians will read your emails!!! So you can not use this app."

Followed the above steps, got 3.9.1 from apkmonk.

Also detached the app from the playstore with TeMeFi.

Everything works.
[Magisk] raystef66:
Today updated to Itsme 3.9.2 and just using the Delta apk from https://huskydg.github.io/magisk-files/

Followed the instructions and done!

Just hide Magisk and add Itsme app to denylist (in my case nothing more was needed to deny)

How to switch from current Magisk to Magisk Delta?​

Unhide Magisk app if hidden (do not uninstall Magisk app)

Install new Magisk app (Magisk delta) and grant root access to it. If Magisk delta cannot get root access after granted, close Magisk delta and re-open it.

Use “Direct install” option in Magisk delta and reboot.

Uninstall old Magisk app.
[Magisk] eboelens:
Works for me on /e/ Sake

Payconique

Itsme

PayPal

Super

Thanks
[Magisk] m.omdaa:
can't find direct install option.. any help??
[Magisk] datassthough:
I had the same issue, I hadnt granted superuser twice to the Delta app

In your original Magisk you can make it forget your choice for Delta (in the superuser tab, remove i think it is called), and then reopen Delta, and grant superuser as much as it asks.
[Magisk] datassthough:
Update!

My Google Pay stopped working suddenly, used it this morning everything was fine, now it says "your device doesn't meet security standards"

Will troubleshoot later
[Magisk] m0han:
I couldn't either. So I booted into recovery and used the APK (you don't have to rename to zip if you have a newer TWRP) to install Magisk and on booting up, everything was fine.
[Magisk] wimg:
Sadly that doesn't work for me. I followed the steps above, with the exception of uninstalling the original Magisk, since that was nowhere to be found anymore after installing Delta. Could there be some remnants of it somewhere ?
[Magisk] necroW8:
Thanks, works perfect!
[Magisk] eboelens:
DId you unhide the orginal Magisk ? Try again: remove everything. Install original Magsik again then the Delta version. And follow these instructions: https://github.com/HuskyDG/magisk-files for me its works. It is importanted reboot if you changes something in Magisk