DKB-TAN2go app on rooted device

Search This thread

LaCruz

Senior Member
Oct 3, 2008
131
269
Did you pass SafetyNet? Is it BASIC eval type? Can you use Google Pay or other apps, checking for SafetyNet? Have you installed Universal Safety Net Fix? On some devices this is needed since 1 month, because Google forces non Basic eval type, even on older devices, but SafetyNet is passing, regardless.

Yes , Safety Net pass via evalType: BASIC. I use props and universal safety netfix.
Google Pay is working fine - just paid yeasterday.
 

Danny1980

Member
Aug 2, 2020
9
8
Yes , Safety Net pass via evalType: BASIC. I use props and universal safety netfix.
Google Pay is working fine - just paid yeasterday.
This is strange. My setup is nearly the same. You are on pushTan v 2.6.1, right? The newer version doesn't work. One thing, you can try, is to disable any Magisk module (except the Safety Net fix). I recently had some problems with my own module, that debloated some preinstalled apps (Huawei HiSuite, i.e. ). Promon shield (the root check software of this app ) seems to check for some preinstalled apps, depending on the phone.
 

SchWeinSAuG

Senior Member
Sep 7, 2013
206
24
OnePlus 5
OnePlus 8 Pro
Did you pass SafetyNet? Is it BASIC eval type? Can you use Google Pay or other apps, checking for SafetyNet? Have you installed Universal Safety Net Fix? On some devices this is needed since 1 month, because Google forces non Basic eval type, even on older devices, but SafetyNet is passing, regardless.

It will pass yes, Basic eval


Screenshot_20210215-124704.png


Havent installed savetynet fix. Gonna try.
Thanks
 

LaCruz

Senior Member
Oct 3, 2008
131
269
I just try airfrozen app and freeze Magisk App. Now I can start 2.7.1 Version of DKB tan2go App. But always end after setting password with white screen.
 

Attachments

  • safety.jpg
    safety.jpg
    153.6 KB · Views: 5

Danny1980

Member
Aug 2, 2020
9
8
It will pass yes, Basic eval

Havent installed savetynet fix. Gonna try.
Thanks

Sorry, I posted the "wrong" safety-net-Fix. There are two of them. The working one for me is this one. You only need this, if your device passes BASIC safety net, but some apps (for me it was Google Pay) doesn't work. This plugin enforces to use always BASIC-Test, even if Google is using Hardware attestation (further explanation in linked thread). I can't see in your screenshot which evalType your Safety-Test-App is using. In Magisk's check this is visible:
1613399461668.png



I just try airfrozen app and freeze Magisk App. Now I can start 2.7.1 Version of DKB tan2go App. But always end after setting password with white screen.

Sadly, I don't think the new version will work. Did you try the 2.6.1 -version?
 

Danny1980

Member
Aug 2, 2020
9
8
yes, before.. :-(
so delete magisk props in the case of uni?
No need to. Hard to tell what your problem with pushTAN is. If I understand you correctly, you can launch it and you see the password screen? If so, then I would clear data and activate the device again. But attention: You need a second activated device, otherwise you need a new qr code for activation (only by mail, not e-mail).
 

cm2003

Senior Member
Jun 18, 2012
217
75
I've managed to switch to canary by the way :)
Just had to uninstall the beta version of the manager and install canary.

But even with 21010 the new 2.71 isn't working anymore.
I'm still waiting for my qr code by dkb to register the app, but can't you create tans with 2.61 anymore? That one does seem to be working.
 

LaCruz

Senior Member
Oct 3, 2008
131
269
No need to. Hard to tell what your problem with pushTAN is. If I understand you correctly, you can launch it and you see the password screen? If so, then I would clear data and activate the device again. But attention: You need a second activated device, otherwise you need a new qr code for activation (only by mail, not e-mail).
I come to set password not insert password. After that white screen on 2.6.1 and 2.7.1
 

SchWeinSAuG

Senior Member
Sep 7, 2013
206
24
OnePlus 5
OnePlus 8 Pro
Sorry, I posted the "wrong" safety-net-Fix. There are two of them. The working one for me is this one. You only need this, if your device passes BASIC safety net, but some apps (for me it was Google Pay) doesn't work. This plugin enforces to use always BASIC-Test, even if Google is using Hardware attestation (further explanation in linked thread). I can't see in your screenshot which evalType your Safety-Test-App is using. In Magisk's check this is visible:
View attachment 5222549




Sadly, I don't think the new version will work. Did you try the 2.6.1 -version?


Screenshot_20210215-174650.png



Thats what i get in magisk.
So this still could change something?
 

Master One

Senior Member
Jan 31, 2011
655
199
Europe
What is it with all the SafetyNet posts? The issues with the DKB-Banking and TAN2GO apps should have nothing to do with SafetyNet, but with root detection.

I'm using LineageOS 16 for microG, which hasn't passed SafetyNet for a long time, and both DKB apps have been working nonetheless till now.

And for reference, DKB-Banking v3.6.1 and TAN2Go v2.6.1 are still working just fine here with latest Magisk Canary (21410) without any additional trickery!
 
  • Like
Reactions: Michi72

SchWeinSAuG

Senior Member
Sep 7, 2013
206
24
OnePlus 5
OnePlus 8 Pro
And for reference, DKB-Banking v3.6.1 and TAN2Go v2.6.1 are still working just fine here with latest Magisk Canary (21410) without any additional trickery!

I dont get it. Got latest canary build like you, and i just cant open any version of tan2go... Instant to browser... Perhaps for me its another thing not rooted.
Uninstalled ccleaner, AccA... Doesnt help.
 

Master One

Senior Member
Jan 31, 2011
655
199
Europe
I dont get it. Got latest canary build like you, and i just cant open any version of tan2go... Instant to browser... Perhaps for me its another thing not rooted.
Uninstalled ccleaner, AccA... Doesnt help.
You likely have something else installed that triggers the DKB root detection. I'm just using Magisk + AdAway (with systemless hosts support) and simply hiding the Magisk Manager + MagiskHide applied to the DKB apps has always done the trick for me.
 
  • Like
Reactions: Michi72 and muff99

AndDiSa

Senior Member
Dec 2, 2009
3,480
4,573
Heidelberg
I dont get it. Got latest canary build like you, and i just cant open any version of tan2go... Instant to browser... Perhaps for me its another thing not rooted.
Uninstalled ccleaner, AccA... Doesnt help.
you cleaned cache and data of the TAN2Go-app, don't you? Most likely the latest test result is stored locally on the device so if you failed once you will fail continuously ...
 

SchWeinSAuG

Senior Member
Sep 7, 2013
206
24
OnePlus 5
OnePlus 8 Pro
you cleaned cache and data of the TAN2Go-app, don't you? Most likely the latest test result is stored locally on the device so if you failed once you will fail continuously ...

well i did a fresh install, guess there should be nothing left.
did wipe data with titanium , most of the time i cant clear cache and storage in APP INFO , is greyed out, guess cause it wont even open once , put me on browser screen instantly
 

Master One

Senior Member
Jan 31, 2011
655
199
Europe
I have just found the following in today's changelog for ArrowOS:

Code:
prebuilt: init: Hide Magisk better

Some banking apps read the file /proc/net/unix to
find out whether things like Magisk are installed/running.

To prevent that, chmod it 440.
This file isn't needed by any other process when boot is finished.

I've tested this and banking apps that did not work before
and recognized Magisk being installed now don't recognize
that and work just fine.

Anyone here willing to try that supposedly fix?
 

meiser

Senior Member
Nov 6, 2010
367
127
I have just found the following in today's changelog for ArrowOS:

Code:
prebuilt: init: Hide Magisk better

Some banking apps read the file /proc/net/unix to
find out whether things like Magisk are installed/running.

To prevent that, chmod it 440.
This file isn't needed by any other process when boot is finished.

I've tested this and banking apps that did not work before
and recognized Magisk being installed now don't recognize
that and work just fine.

Anyone here willing to try that supposedly fix?

Hi,

doesn't help here. You can try on your own by creating a service.d script (don't forget to make the script executable):

Code:
:/data/adb # cat service.d/net_unix.sh                                                                                                                       
#!/system/bin/sh
chmod 0440 /proc/net/unix
 
  • Like
Reactions: Master One

SchWeinSAuG

Senior Member
Sep 7, 2013
206
24
OnePlus 5
OnePlus 8 Pro
I have just found the following in today's changelog for ArrowOS:

Code:
prebuilt: init: Hide Magisk better

Some banking apps read the file /proc/net/unix to
find out whether things like Magisk are installed/running.

To prevent that, chmod it 440.
This file isn't needed by any other process when boot is finished.

I've tested this and banking apps that did not work before
and recognized Magisk being installed now don't recognize
that and work just fine.

Anyone here willing to try that supposedly fix?

Unfortunatly wont help in my case.
Just freezed all root apps aswell.
No chance.
 

Danny1980

Member
Aug 2, 2020
9
8
What is it with all the SafetyNet posts? The issues with the DKB-Banking and TAN2GO apps should have nothing to do with SafetyNet, but with root detection.
You are right and maybe the SafetyNet-Posts are a little bit misleading. But if SafetyNet is working this is a very good indicator for a solid setup.

I have just found the following in today's changelog for ArrowOS:

Code:
prebuilt: init: Hide Magisk better

Some banking apps read the file /proc/net/unix to
find out whether things like Magisk are installed/running.

To prevent that, chmod it 440.
This file isn't needed by any other process when boot is finished.

I've tested this and banking apps that did not work before
and recognized Magisk being installed now don't recognize
that and work just fine.

Anyone here willing to try that supposedly fix?

Sorry, this doesn't work for me. Detected again.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    Can you share with me your taskerr script? Thank you so much!

    Yes, I've created two profiles to also check a variable I'm setting. Like this it's working more reliable to me.
    Code:
        Profile: Tan2Go_Enter (60)
            Restore: no
            Application: TAN2go
            State: Variable Value  [ %Tan2Go_opened ~ 0 ]
        Enter: Tan2Go_Enter (59)
            A1: Variable Set [ Name:%Tan2Go_opened To:1 Recurse Variables:Off Do Maths:Off Append:Off Max Rounding Digits:3 Structure Output:On ]
            A2: Variable Set [ Name:%Tan2Go_killed To:1 Recurse Variables:Off Do Maths:Off Append:Off Max Rounding Digits:3 Structure Output:On ]
            A3: Kill App [ App:TAN2go Use Root:On ]
            A4: Run Shell [ Command:pm disable-user APP-ID Timeout (Seconds):0 Use Root:On Store Output In: Store Errors In: Store Result In: ]
            A5: Wait [ MS:0 Seconds:1 Minutes:0 Hours:0 Days:0 ]
            A6: Launch App [ Package/App Name:TAN2go Data: Exclude From Recent Apps:Off Always Start New Copy:Off ]
        
        Profile: Tan2Go_Exit (64)
            Restore: no
            Application: TAN2go
            State: Variable Value  [ %Tan2Go_killed ~ 1 ]
        Exit: Tan2Go_Exit (65)
            A1: Run Shell [ Command:pm enable APP-ID Timeout (Seconds):0 Use Root:On Store Output In: Store Errors In: Store Result In: ]
            A2: Variable Set [ Name:%Tan2Go_opened To:0 Recurse Variables:Off Do Maths:Off Append:Off Max Rounding Digits:3 Structure Output:On ]
            A3: Variable Set [ Name:%Tan2Go_killed To:0 Recurse Variables:Off Do Maths:Off Append:Off Max Rounding Digits:3 Structure Output:On ]
    1
    So maybe, if we are having difficulties hiding magisk from the updated tan2go, this might be the reason..
    Just tried installing 22.0 on a fresh lineageOS for microG system, but no luck.

    What does work though, is to uninstall the magisk app, use tan2go, and then reinstall the magisk app with the apk.
    1
    Just tried installing 22.0 on a fresh lineageOS for microG system, but no luck.

    What does work though, is to uninstall the magisk app, use tan2go, and then reinstall the magisk app with the apk.
    You don't have to uninstall magisk. You can just freeze it before using Tan2Go and unfreeze it afterwards again.
    I've created a tasker script to do so.
    1
    Thank you. I've read about the freezing trick. Can I do that with an app from f-droid? I tried superfreezz but that did not work...
    You can use Termux for example.

    disable with
    Code:
    pm disable-user PACKAGE-ID
    Enable with
    Code:
    pm enable PACKAGE-ID

    you can find the ID in magisk.

    -update-
    you need to run those commands as root. So before executing above commands you need to enter su for root.

    I think you can also get tasker on fdroid. It's probably not for free though. But one of the greatest apps I know for Android :)
    1
    Thank you. I've read about the freezing trick. Can I do that with an app from f-droid? I tried superfreezz but that did not work...
    Try Ice Box. Works perfectly for me
  • 9
    Here is a recipe that worked for me to get TAN2Go App running and receiving TANs + activating Visa secure on a Huawei P8 Lite with LineageOS 14.1. with using Island.

    It will only work, if you mobile number is already registered in DKB, because you have to receive an SMS.

    At some point you need to open an http link from the SMS via TAN2Go app on island. Since the SMS app did not work on island for me, I used a workaround using the contacts app.

    Some steps in the beginning, especially the factory reset might not be necessary, but this is what I did.

    0. Lineageos Factory reset (TWRP wipe)
    1. Install latest Magisk / Magisk Manager
    2. In Magisk Manager Settings, enable Magisk Hide, repackage the Magisk Manager Application
    3. Install DKB Banking App / Tan2Go / Island using Google Play Store
    4. Open repackaged Magisk Manager, hide DKB Banking App / Tan2Go / Island / Google Play Store
    5. Restart the Phone
    6. Open and configure Island
    7. Install / Clone Tan2Go app and DKB banking app from mainland to island
    8. Install / Clone the contacts app from mainland to island. You may now open it in island to check if it works and that you can create a contact.
    9. Deinstall the Tan2Go and DKB banking app app from your phone (the "mainland" versions!)
    10. Open Tan2Go "island" version, set new Password for the App.

    If this step does not work, using Island to bypass the protection may not work on your phone.
    You could try the Magisk Canary build, wait for a new Magisk version, or try a factory reset like I did.

    11. Tap on "Tan2Go erneut verknüpfen" (NOT the QR code, which worked for me only once), proceed to online banking. This will open DKB Banking App.

    The next steps are time-critical, because your session may expire. So read the steps first.

    12. Login with your banking credentials
    13. In the FAQ section open drop-down menu "Sie können derzeit keine TANs mit der DKB-TAN2go-App generieren?" and click the Link inside the text: "TAN2Go-Verwaltung"
    14. In the connected devices section, choose the device that you are currently holding in your hands and click "Password vergessen"

    The next steps are especially time-critical, but unfortunately may take some time to execute ;)
    Once you request the SMS, you got a time window that the SMS code is valid.

    15. On the next page click button "Neu verknüpfen per SMS" and then "SMS anfordern", receive the SMS, copy the link (or the full text if not possible)
    16. Open contacts inside Island, add a new contact, chose contact name, paste the link from SMS to "Website" section of the contact, save contact
    17. On the generated contact, click the website link, chose open with Tan2Go app
    18. (I had to re-set the Tan2Go password here for some reason)
    19. Copy the code "Freischaltcode"
    20. Go back to the DKB Banking App in mainland and enter the code. If you were to slow, repeat from step 10.
    21. You may now enable Visa secure in DKB Banking App.
    6
    I'm Not able to hide canary Manager. Always failed to hide it.
    Any Idea?

    Edit: Stop Play Protect in Google Playstore fixed it ;)

    Thanks, that helped.

    So for me the steps were:
    - uninstall old magisk
    - install latest canary (raw.githubusercontent.com/topjohnwu/magisk_files/canary/app-debug.apk)
    - disable play protect
    - hide magisk by repackage the name to Manager2
    - enable MagiskHide in the settings
    - hide tan2go in MagiskHide
    - re enable Play Protect

    I did not need to use "MagiskHide Props Config" to have fingerprint working.
    6
    I can confirm that Magisk Canary works, both with the DKB Banking App as well as Tan2Go (latest, 2.6.0) including fingerprint support (and of course no Island/Shelter). The steps are described in this previous thread:

    Current link is: raw.githubusercontent.com/topjohnwu/magisk_files/canary/app-debug.apk
    (You can find this via github.com/topjohnwu/Magisk#downloads and select magisk manager Canary.)

    Steps I followed:
    1. Install Magisk Manager Canary
    2. Make sure Magisk Manager Update Channel is set to Canary
    3. Hide Magisk Manager
    4. Make sure Magisk Manager version is still canary (for me it reverted to normal version after hiding the first time, possibly because update channel was not set to canary)
    5. Install tan2go and DKB app
    6. Use Magisk Hide on tan2go and DKB app
    7. restart device
    8. Should work now

    Just a few caveats:
    1. I uninstalled Magisk and Magisk Manager (Stable) from my device, then reinstalled Canary
    2. I didn't know whether you also need to update Magisk itself (not the Manager). As I uninstalled it in the previous step I had to, but an update might be fine as well
    3. I am not sure whether you need those two steps, but might help if it doesn't work for you
    4. Be sure to enable MagiskHide in the settings
    5. You have to repackage Magisk under a different name, otherwise Tan2Go will detect it. I chose "Manager2", but seems like anything will be fine here
    6. Hide both DKB Banking as well as Tan2Go inside the MagiskHide settings (There is a small bar with 4 icons on the bottom, the second one should be a shield)
    7. Lastly go to the Modules section (puzzle icon, last on the bar), and install MagiskHide Props Config. I needed that one to enable fingerprint support
    8. Launch Tan2Go and be happy. For now at least, we'll see how long it lasts :)
    6
    SOLVED: DKB Tan2Go 2.4.0 works with Open Bootloader & Root

    DKB TAN2go works with Magisk:
    1. Install the TAN2go app (but don't open it)
    2. Add the TAN2go app in Magsik Manager in the menu "Magisk Hide"
    3. Reboot the phone (I don't know if this is necessary)
    4. Open TAN2go, works fine.

    **** DKB and this stupid security features which bring absoltuely no security.

    SOLVED: (on my Redmi Note 6 Pro with CrDroid Pie, GApps installed:)
    You are (nearly) right; the solution is described in the German Forum Android-hilfe.de for a similar Tan2Go-App from VR.... Original Text:
    - VR SecureGO deinstallieren
    - Magiskmanager deinstallieren
    - Magisk mit dem Magisk Uninstaller über TWRP deinstallieren -> reboot
    - Magisk 19 installieren TWRP
    - MagiskManager installieren ( auch die aktuellste beta, keine module aktivieren etc, alles lassen wies ist)
    - MagiskManager verstecken (repacking blablub), restart
    - VR SecureGo installieren aber nicht öffnen
    - Magisk Hide für VR SecureGo aktivieren, reboot
    leider crashte die App hier immer noch beim Start - also alles nochmal von vorn (#33)
    ... und dann #59
    im Magisk Hide-Bereich Apps (mit ALLEN Unterpunkten von VR SecureGo und Google Play-Dienste) neu ab/angewählt

    How-to;
    (Please, reboot sometimes while doing it:)

    - Remove your (DKB)Tan2Go-App.
    - Install NEWEST 19.1 Magisk via TWRP.
    - Install NEWEST Magisk Manager-App (via apk or Store.)
    - Reboot & Open Magisk Manager-App-Menu in the left corner above (The Hamburger)
    - Choose "Magisk Hide": >> Hide ALL the Google-Play-Services
    - Return to the Magisk-Hamburger-Menu: Settings/ Einstellungen >> Hide Magisk Manager (it changes to a similar name automatically)
    - Reboot & Install NOW your (DKB - Tan2Go-App 2.4.0, but DO NOT OPEN IT !!
    - Open Magisk Manager again >> Magisk Hide >> Hide the new downloaded DKB- TAN2GO-App. 2.4.0
    - (Reboot ?? &) Now you can open it; it should work now.


    Summary:
    So, the Trick is to hide via Magisk Manager All Google Services + your DKB-Tan2Go-App + the Magisk Manager himself.
    Yes, the Hiding-Program must be hided, too. :)

    Enjoy & have Fun!
    5
    Yes confirm it's working
Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone