Check using SafetyNet

Check using SafetyNet

Check using SafetyNet

The SafetyNet Attestation API is an anti-abuse API that allows app developers to assess the Android device their app is running on. The API should be used as a part of your abuse detection system to help determine whether your servers are interacting with your genuine app running on a genuine Android device.

The SafetyNet Attestation API provides a cryptographically-signed attestation, assessing the device's integrity. In order to create the attestation, the API examines the device's software and hardware environment, looking for integrity issues, and comparing it with the reference data for approved Android devices. The generated attestation is bound to the nonce that the caller app provides. The attestation also contains a generation timestamp and metadata about the requesting app.

  • Certified, genuine device that passes CTS
  • Certified device with unlocked bootloader
  • Genuine but uncertified device, such as when the manufacturer doesn't apply for certification
  • Device with custom ROM (not rooted)
  • Emulator
  • No device (such as a protocol emulating script)
  • Signs of system integrity compromise, one of which may be rooting
  • Signs of other active attacks, such as API hooking