yashsingh1/xdaforums huggingface dataset:
[Magisk] bobfrantic:
ItsMe 4.3.0, July 4 update, detects root with Shamiko versions 0.7.0 to 0.7.3 ItsMe 4.2.1 will see root with Shamiko version 0.7.3 only, lower version work in hiding root from ItsMe... at least for me.

Currently my setup:

Magisk 26.1

Zygisk on

Enforce Denylist off

Magisk app hidden

Shamiko 0.7.1

ItsMe 4.2.1

Phone: Galaxy A52s 5g
[Magisk] Dragon99OG:
Device : Redmi Note 11 Pro 5G

MIUI version : 13.0.5

Android version : 12

Working Setup (at least for me!) :

- Magisk Alpha (latest version : 26103)

- Zygisk is ON

- Itsme is added to exclusion list

- Exclusion list is NOT enforced

- Shamiko (latest version 0.7.3)

PS :

- No need to hide Magisk Alpha

- It does not work with original version of Magisk

- I initially tried with Shamiko 0.7.1, it did not work, I had to update to latest version 0.7.3

ING and Payconiq work as well but Payconiq must be added to exclusion list. ING does not have to.
[Magisk] Dragon99OG:
Yesterday I decided to upgrade my device : a Redmi Note 11 Pro 5G.

In my previous post, you could read that things were going OK.

Itsme, ING, Payconiq, everything was fine with the configuration I posted.

Let's see what happens when you upgrade (at least for me !!!).

- MIUI version : upgraded from 13.0.5 to 14.0.1

- Android version : upgraded from 12 to 13

Setup (same as before the upgrade) :

- Magisk Alpha (latest version : 26103) --> no change

- Zygisk is ON --> no change

- Itsme is added to exclusion list --> no change

- Exclusion list is NOT enforced --> no change

- Shamiko (latest version 0.7.3) --> no change

NO LONGER WORKING AFTER THE UPGRADE !!!

Itsme does not complain about detecting a root device but gives a generic error message during setup. Something like "Sorry something did not work, contact us".

SOLUTION !!!

Install LSPosed (latest version1.8.6) in Magisk Alpha.

In my case, it is the Zygisk version of LSPosed.

PS :

- Again no need to hide Magisk Alpha after setup

- ING banking app does not care about the upgrade

EDIT

- Payconiq works as well. After adding the app to the exclusion list of Magisk Alpha, I had to restart the phone otherwise root was detected.
[Magisk] virol:
Are there any modules or apps running (enabled) in LSPosed then?
[Magisk] Dragon99OG:
LSPosed is running with default settings and there are no active module.
[Magisk] virol:
Then I suppose that LSPosed was installed into your previous Android 12 version also?
[Magisk] Dragon99OG:
No it was not. I had to install it after upgrading to Android 13 otherwise Itsme would detect root.
[Magisk] virol:
Thx for your reply 's

however bad luck for me

I tryed also the magisk alpha 26103 onto my android 10 Lineage OS 19.1 device.

same setup as yours (with the LSPosed module installed or not, doesnt matter) always detect root immediatly on startup itsme 4.2

payconiq = ok

some suggestions?
[Magisk] Dragon99OG:
Quite difficult to suggest anything than try and error. You get different results depending on the version of Android or Itsme you use. Some people need Magisk Alpha (like me), others don't. Some people need LSPosed (like me), others don't. Some people need an older version of Itsme, some don't (like me). Chances are also high that if it finally works but you upgrade anything (Android or Itsme), it stops working and if you refuse to upgrade Itsme, you can be sure it will refuse to continue to work sooner or later...
[Magisk] virol:
Also my thoughts, for some versions it works and after APK update , all root detections again with same setup.

One question: Why are you using the magisk Alpha version and not the Original magisk, are there reasons tot use this Alpha?
[Magisk] Dragon99OG:
In my case, Itsme would detect root with Magisk Original (even if hidden) but not Alpha.
[Magisk] Gamm86:
Somewhat off topic, but as this has been addressed several times in this thread as well, I want to inform everyone that Payconiq's latest update (8.3.0.596050) works again.

They needed 14 weeks to solve the issue... *rolleyes*

Magisk Delta 25210 (Canary) * I haven't updated to 26.x since I don't want to break anything. "If it ain't broke, don't fix it"

Zygisk off

MagiskHide on

Everything works for me (Banking apps, Itsme, Payconiq,etc.)
[Magisk] virol:
confirm also that latest payconiq update to 8.3.0.596050 is working again .
[Magisk] xavier.miller:
I confirm I can use Magisk Delta, ItsMe and Payconic :-)
[Magisk] foobar66:
Sigh sigh ... today's itsme update (July 27) is again detecting root ;-(((
[Magisk] jbAttitudEs:
reinstall shamiko
[Magisk] foobar66:
Thanks ... can you please elaborate a bit? I have been using Magisk delta version 25210 (https://github.com/HuskyDG/magisk-files) with MagiskHide enabled, enforce SuList. It worked well with itsme for many months but then yesterday's Itsme update suddenly detected root again.

Do I need to install Shamiko as well? Do I need to switch back to official Magisk? Anything extra to install? thanks
[Magisk] jbAttitudEs:
I use Magisk 26104 with Zygisk enabled, no MagiskHide and no enforce SuList, Itsme, Google Play and Service Google Play ticked in SuList and also Shamiko 0.7.3 installed ..

When Itsme do not work anymore because upgrated, i reinstall Shamiko and it works great again.
[Magisk] virol:
What is the version from the new update. Itsme 4.?.?
[Magisk] foobar66:
Version 4.4.1
[Magisk] virol:
Do you Mean:

Remove Shamiko 7.3

Reboot

Install module Shamico 7.3

Reboot

Install Itsme app

Reboot

You don't tick itsme in Sulist?
[Magisk] virol:
Official or Beta?
[Magisk] jbAttitudEs:
Don't remove anything, just reinstall shamiko over the existing one when itsme is upgraded, itsme is ticked in SuList with Google Play and service Google Play
[Magisk] foobar66:
No ... still does not work for me:

- Magisk 26100

- Shamiko 0.7.3

- Zygisk enabled

- No magiskhide

- Enforce DenyList: OFF

- Configure DenyList: Google Play Store and Google Play Services (but this one is disabled again after boot)

Itsme still detecting root ...
[Magisk] virol:
Will this Mean that this reinstall from Shamiko change something into the itsme app?

do you reboot after the reinstall/overinstall the Shamiko?

Is this a trial and error trick?

Or seen somewhere Else?

This questions because I struggle also longtime with itsme root detections with different magisk versions and modules

Thx for the tip......
[Magisk] jbAttitudEs:
it seems shamiko reinstallation change something into itsme root detection.. i do that since many itsme version and it work here.. yes for sure i reboot after shamiko installation .. not only after itsme upgrade, i notice that i have to do that also after a wipe cache/Dalvik cache because i do it sometime and itsme detect root after it too
[Magisk] virol:
Ok, thx

Will try this out tomorrow

Results here after try-out
[Magisk] foobar66:
Nope ... even reinstall of shamiko does not work for me.
[Magisk] virol:
Bad luck, overinstall Shamiko no luck to use itsme

Magisk Canary 26104

Google play and services in denylist (also itsme)

Shamiko 7.3 (overinstalled and rebooted several times, no luck, always itsme root detections at try to install Itsme)
[Magisk] virol:
itsme is all RIP today.

My "older" version I still used until today (3.8.x) was expiring on 31/07, and today this morning itsme asked me to update to a newer version.

now I am all stuck, all new 4.x versions I tried give me root detection.

Magisk Canary 26104 on Android 10 and also Magisk original 26100 on Android 12

Google play and services in denylist (also itsme)

Shamiko 7.3 (overinstalled and rebooted several times, no luck, always itsme root detections at try to install Itsme)

usf 2.4 mod 2. 0

all help is welcome
[Magisk] woutercools:
What works for me at the moment:

- Payconiq latest version

- Itsme version 4.0.0.1677724162 (link)

- Magisk 26100

- Universal SafetyNet Fix 2.4.0

- Shamiko 0.7.3

- Zygisk enabled

- No magiskhide

- Enforce DenyList: OFF

- Configure DenyList: Payconiq, Itsme, Google Play Store and Google Play Services

Hope this helps.
[Magisk] mhemart:
Thank you, this version of itsme it working for me too with almost the same configuration. On a Samsung A51 android V12, I had to use the Displax's version of USNF associated with Magisk 26104 to be able to bypass the CTS profile issue I had until now.
[Magisk] virol:
Yesssssssssss this version is still working

Big thank WouterCools

only: Itsme is now on 4.4.x, how long will it take that an upgrade is needed but in the meantime ok
[Magisk] Gamm86:
Itsme 4.2.1 also still works.
[Magisk] How.to:
hey

there work becomes itsme !

how do you do it but it's hard for you

I feel sorry for you
[Magisk] virol:
not here,

can you specify your magisk version,modules and setup?
[Magisk] How.to:
hey

no thought copy of me why

Thanks for the warning.
[Magisk] Gamm86:
OnePlus 9 Pro running Android 13

USB debugging: off in Developer options => Which is also a big trigger for many root detecting apps. (I need to disable it after every reboot)

Magisk 26104 (canary)

App hidden

Zygisk: enabled

Enfore Denylist: disabled

Denylist:

com.google.android.webview

com.google.android.adservice.api

Google assistant

Google Carrier services

Google chrome

Device configuration

Google

Google Play Store

Google Play services

Google safety center

Google Home

Itsme (v4.2.1)

All my banking apps (They also work fine)

Anything related to Microsoft: Microsoft 365, Onedrive, Outlook, Autheticator, company portal, Intune, Teams, etc... (Since otherwise any work related apps are also blocked by my company)

Payconiq

Modules:

MagiskHide Props config v6.1.2-v137 (incl. setting it up through Termux)

Shamiko v0.7.3 (174)

Universal SafetyNet Fix v2.4.0

It's always good to wipe cache of any apps (or install them again) and add them to the Denylist first before you run them again.

Good luck!
[Magisk] virol:
Thx to share your setup

looks almost identical to mine (also usb-debugging always off)

but itsme detect root

see that you are using Magiskhide Props config, may I ask witch props you are changing through Termux

thx
[Magisk] Gamm86:
- Download and install MagiskHide Props config v6.1.2-v137 in Magisk as a Module.

- Restart your Phone!

- Launch a Terminal of your choice (e.g. Termux, Android Terminal Emulator, ...).

- Type 'su' (enter) and agree to the root dialog.

- Now type 'props' (enter) ...

... select '1' for Edit device fingerprints

... select 'f' for Pick a certified fingerprint

... select a vendor of your phone (e.g. Google, Samsung, Oneplus ...)

... select your phone (if available) or a phone which is next to your phone with your installed Android version (for example 9,10,11).

- After selecting the fingerprint for your device, and when the program ends.
[Magisk] virol:
@Gamm86: seems that your reply is not completely posted, seems that txt is abrupted breaking-off ?

already thx for the help
[Magisk] dewingerd:
Hi there,

This configuration also works with Magisk Alpha 26104. (for me it doesn't work with Magisk Canary 26104)

Payconiq is working, all bankapps are working and latest Itsme 4.4.1 is working perfect.

My device is Xiaomi Poco F2 Pro Android 12 Miui 14

Thanks.
[Magisk] Gamm86:
Not quite, there are no extra steps to be taken.

Just follow the instructions in Termux, it's very self explanatory.
[Magisk] Millio345:
Can confirm this works.

Tried with latest version of itsme but even after following "MagiskHide Props config" instructions from @Gamm86 it kept detecting root, version 4.0.0.1677724162 works perfectly.
[Magisk] Kelnow:
Same configuration sent by woutercools worked for me too, thanks.
[Magisk] Miloosebe:
For info, I am using Magisk Delta. Was working fine with Magisk Delta 25210 and itsme 4.2.1, but root was detected with Itsme 4.4.1.

This morning, Magisk Delta updated to version 26105 and Itsme 4.4.1 doesn’t detect root anymore.

No special modules installed, I’m using the Enforce Sulist option, so basically every non-root-needed processes are hidden, but I suppose it also works if you hide the usual suspects.
[Magisk] mhemart:
Same settings here. The 26105 version of Magisk Delta was released last night but was crashing my A51 Android v12 when using magik hide and enforce sulist. This morning update is far better and I can confirm the last itsme version doesn't detect root.
[Magisk] kheno:
I've tried everything, alpha, delta, even KSU (kernelsu). Itsme detects "root" from the moment universal safetynet fix module is enabled (which requires zygisk).

Since I'm on a nightly lineageos rom cts fails. So for now it's switching between itsme and netflix support.

:(

If I am not mistaken google wallet uses the same detection and fails too, once the universal safetynet fix module is installed.
[Magisk] Clasimodo:
Version 4.4.1 working fine here on a Samsung S23 Ultra with Magisk alpha 26105, Shamiko 0.7.3, Systemless hosts by Magisk, SafetyNet Fix 2.4.0 modded by Displax. Lsposed installed too.
[Magisk] kheno:
Just suceeded With following setup:

Ksu + shamiko + safetynet Fix by diplax and zygiskforkernelsu

Shamiko setup like this: https://kernelsu.com/shamiko-install

Thx clasimodo, knowing it should work made me keep trying :)
[Magisk] Timmmmaaahh!:
So far so good but itsme is now throwing a technical error:

Spoiler content hidden.

I'll try setting the app up again when I get home but I've also noticed that Momo is in a different kind of unhappy state:

Spoiler content hidden.

Any ideas to get that out of the way? SafetyNet is passing just fine. I tried 'Force BASIC key attestation' (I'm on stock OOS) in MagiskHide Props Config v6.1.2 but no luck. Should simulating another device work?
[Magisk] Timmmmaaahh!:
Additionally: now Keytrade Bank is detecting again! Even though it's in the DenyList and Magisk app is hidden. I guess I need LSPosed + SudoHide/Hide My Applist etc. for that one. So I basically have to choose between either of those working (but not both)? In that case I'll just go back to my TJW Magisk + LSPosed setup and use an old itsme version for now.
[Magisk] m0han:
i was about to ask: canary » alpha (» canary) - 'dirty install' possible? but, we have the answer.
[Magisk] Timmmmaaahh!:
Yeah, it works but I don't think it's ideal. If you install a fork (or official Magisk if you have a fork installed), the newly installed Magisk manager ironically asks for root. When you grant this and reboot you get the ability to perform a direct install. I did that and uninstalled official Magisk before rebooting, upon reboot, the alpha fork had taken over and business was running as usual. It was messy and since it was causing more harm than it did good (hide-wise) I just decided to perform a – way overdue – full wipe of data + internal. Now back on official Magisk, using the older version of itsme for now, which works fine.

I'm trying to find a way to properly hide without going down the tedious LSPosed path again but haven't been successful so far as replies in the Magisk thread have been avoiding providing a proper answer. I also don't like how it permanently manipulates system files, so far for systemless. I'm beginning to have doubts about the trustworthiness of LSPosed altogether, another reason to avoid it.

A little bird now told me Cygisk might be the answer, I unfortunately don't have much time to do a lot of testing.
[Magisk] m0han:
telegram channel(s) says 'no longer available for public use'.

btw, has anyone checked out 'delta' yet? 'hide zygisk'?
[Magisk] kheno:
delta, https://github.com/HuskyDG/magisk-files

Works for me.

What i did:

Installed stable version apk. Patched a boot.img file, not direct install.

Flashed patched boot.img through orangefox.

Boot in os.

Remove the old hidden magisk app

Open the delt apk.

Set hide and rename.

Enable deny list and almost deny everything.

Did not enable zygisk.

Under modules all was still there.

But since zygisk is not enabled, you can disable the safetynet fix module.

And working! Great!

Oh, i had to disable my firewall and after renaming allow the apk to have internet access.

But this is solely on my phone.
[Magisk] huskydg:
magisk alpha is custom magisk with telemetry. Manyone don't know and use it away.
[Magisk] painy:
I'm still using the official magisk and older Itsme version (3.6.4). As of today I got the notification in that app: This version of the app will soon no longer be supported
[Magisk] Bubble-be:
Magisk-delta shows great promise.

After fully uninstalling official Magisk, I installed it through the zip in recovery and just used magiskhide, left Zygisk disabled. The latest itsme version from the playstore opens without a warning, but ... I still need to activate it.

Is there any way though to pass SafetyNet without the Zygisk module? I don't need it now, but it can be handy in the future.
[Magisk] shadowstep:
A Riru version of the module is also available here. You can install Riru from here + Riru version of USNF and you should be good to go.
[Magisk] Bubble-be:
Thanks for the suggestions, but I'm having no luck there. I still get "RESTORE_TO_FACTORY_ROM" on SafetyNet. Like I said, it's not really a problem at this time and out of scope of this topic. ;)

I'll report back when I have activated itsme.
[Magisk] Bubble-be:
I enrolled successfully and I just logged onto home banking and did some payments. It also worked on my wives phone, the data was intact, but it failed to work after an itsme update until Magisk-delta fixed it again.

Some actions I had to try two times, but I'm not sure if it's itsme itself or something else.

Thanks @huskydg !
[Magisk] huskydg:
You need to add com.google.android.gms into denylist
[Magisk] huskydg:
In reality, banking apps can do check root and modifications by their own and might not use SafetyNet api. So Pass Safetynet is not necessary in that case. Of course I don't say pass SafetyNet is useless. There are known apps use SafetyNet: Netflix, PokemonGo,...
[Magisk] Stillhard:
Way back to Patrick's time machine, you used to hold on to your "idea" that it wasn't a necessary thing ;)
[Magisk] Bubble-be:
It was added already. Somehow SafetyNet is still detecting I'm running a custom rom.
[Magisk] huskydg:
For zygisk - usnf, you don't need

But... What i said is for riru - safetynet fix when no zygisk and magiskhide enabled.
[Magisk] Timmmmaaahh!:
Thank you for the heads up but it would be better to add a source when making such claims. It looks like you're the Delta dev, should we worry about anything in that fork? ;)
[Magisk] Timmmmaaahh!:
Copied what you did with some extra notes: after opening the Delta app it needed to finish some final steps via reboot. I had to disable Zygisk (was still enabled from official Magisk installation). For some reason I couldn't hide the Magisk Delta app at this point but that was fixed after rebooting.

Success! Signed into banking website with latest itsme (3.9.1)! Very happy with your release, @huskydg, thanks! 🙂
[Magisk] Timmmmaaahh!:
Well nuts, no luck in this area and I think it's tripping my banking app. YASNAC is reporting a fail on both Basic integrity and CTS.

Spoiler content hidden.

Spoiler content hidden.

Ideas?
[Magisk] Miloosebe:
Updated today to itsme 4.5.0. Still working with Magisk delta.
[Magisk] mhemart:
The latest version of Magisk Delta Canary (26105) is not working anymore for itsme. But by using the 26100 stable version, it works with the latest itsme.

Maybe I should create a new topic in Magisk Delta but for people using it, did you have issues with the systemless hosts ? Adaway (and other hosts managers) can create and manage the hosts file but Chrome refuses to use it.

Edit : I found the answer for those having the same problem.

[MagiskHide] Allow SuList apps to load magisk module mounts. Example, if you want systemless hosts load for Chrome, you need to add Chrome to SuList to let systemless hosts work!
[Magisk] bobfrantic:
This is what is working for me these days on my A52S 5g:

Delta 26.1 (26100)

Zygisk on

MagiskHide on

Enforce SuList on (All my root apps selected of course)

Shamiko v0.7.3

It's Me 4.5

Updated to It's Me 4.6.1

Updated to It's Me 4.7.0 still working for me

4.8.1 updated and still working

It's Me updated to 4.9.0 and working still

Update It's Me to 4.9.2 and it's working. Unable to update Shamiko as it doesn't recognize the Delta 26.1 properly that's okay.

Updated Delta to 26.4 Kitsune Mask with same stuff as before. Updated It's Me to 4.10.0 and Shamiko to 0.7.5 and still not detecting root.

Simplest steps so far for me to get It's Me working with root.
[Magisk] Spartacus500:
Magisk 26.2 Beta + Lsposed not working for me
[Magisk] timmeyh:
Still working on my oneplus 7 for a couple of weeks now:

Magisk Delta (26105)

Zygisk enabled

magiskhide: sulist is enforce

Enforce Sulist

mods:

LSPosed

STRP X Spoofer

Shamiko v0.7.3

App:

It's Me 4.5.0
[Magisk] jpsollie:
Update:

Magisk delta (26301),

Zygisk disabled

magiskhide enabled, not enforced

shamiko 0.7.3 enabled

systemless hosts enabled

works with itsme 4.5.0
[Magisk] Bubble-be:
My device was not passing Safetynet check, which I did not really need, but it still made me curious. So I was playing around a bit.

Before

Magisk Delta

Zygisk disabled

Steps

1. Zygisk enabled + Universal Safetynet Fix

= Safetynet semi pass with CTS profile mismatch

I presume Zygisk is detected

2. Shamiko

= Safetynet pass, still specific tests show bootloader unlocked but I'm not sure if that's really important

I installed Google Wallet, it's not complaining but I have not added a card yet.

I still can't open Payconiq (USB debugging is off).
[Magisk] V0latyle:
SafetyNet is obsolete, you need to check your Play Integrity responses

[INFO] Play Integrity API - replacement for SafetyNet

THIS IS NOT A SUPPORT THREAD. For questions and support regarding how to fix your Play Integrity verdicts, see the Play Integrity Fix thread. ⚠️BEFORE YOU ASK A QUESTION, READ THIS POST AND THE FAQ!⚠️ ****Update 12/11/23**** Google has been...

xdaforums.com
[Magisk] Bubble-be:
Yes, I came across the info. Thanks for your link on this.

It doesn't seem to change a lot at first sight. I tried the TB checker tool and with the earlier setup, I just get red marks for "Strong integrity" and "Virtual integrity".

At first it detected TWRP, but that was just the folder on storage. That's easily remedied.

Edit: speaking of the devil... itsme 4.6.1 just got installed and it did not want to work with zygisk enabled. I needed to disable it, wipe date of itsme to get it going again.
[Magisk] Pandoriaantje:
It was bound to happen. The beta version I have posted before will expire 08/10. I haven't been verry active in the topic, as the beta version has served me well up till now, but is there a solution yet for later versions, on official magisk 26.3?
[Magisk] virol:
Same story here, was still using itsme 4.0.0 wich expires now.

update to last recent itsme version 4.7.0 detects root under magisk 26.3 (or 26.1) with android 10 or 12 (Zigisk on, Universal safety fix and Shamiko)

Anybody some solution???
[Magisk] How.to:
WELCOME

New itsme e2e here everything works root and others

No magiskhide itsme e2e

Protected release from work

If you want the itsme e2e 4.7.0 program mega file here it is

itsme e2e Download:

Android

IOS

Sorry test itsme e2e​
[Magisk] DaisyF:
Pixel 6 : Magiskdelta 26105 (so old version, don't update) with Itsme 4.5.0 (HMA : itsme hidden from playstore) works for me. Zygisk on; shamiko, lsposed, magiskhide, systemless host, play integrity fix installed. Magiskdelta hidden, renamed to settings.

Google Wallet works also.
[Magisk] Bubble-be:
On my end I have no problems with Magisk Delta

So is this like an enterprise version, normally not available to the general public?
[Magisk] DaisyF:
What version of magiskdelta and itsme are you using ?
[Magisk] Bubble-be:
Magisk Delta 26301

Itsme 4.6.1

Zygisk off

Strange that ING detects root though....
[Magisk] oniemjan:
anyone else having invalid token when reactivating with idcard reader?
[Magisk] NHJ1981:
It does require an itsme test account to work.
[Magisk] oniemjan:
so i cant use it?