[How To] Bypass Lloyds and Santander Root Detection

Search This thread

bombadier

Senior Member
Jul 3, 2010
3,641
3,562
The Burgh
LG G Watch R
Samsung Galaxy Tab S2
There is a problem with these new updates for both Halifax and Lloyds Banking apps!

For whatever reason the Halifax banking app version 104.03 and Lloyds banking app 104.03 (Lloyds owns both banks) Crashes on some custom roms and other systems and not sure why? I have only been able to find the Lloyds banking app version 102.02 on APK Mirror. If I install this version the app loads fine (No crash on boot) but once I update it to 104.03 the app crashes? I'm assuming that if I downgrade the Halifax app to 102.03 it will do the same.

I was able to rip the Halifax APK 104.03 file from Google Play Store and install it onto my Nvidia Shield. It boots perfectly fine on that just to test the app. My phone is running the Pixel Experience custom rom. I installed a fresh install of this rom on my phone no mods, no Magisk, no root! The Halifax app still crashes? As mentioned above even my Windows 11 subsystem (Internal Android system) this version of the app 104.03 crashes?

Maybe I will have to wait and see if it's a bug or a security feature in future updates of this app.

In the mean time if anyone on here has an older version of the Halifax app APK file that would be helpful!
All i can suggest at the moment is to try and get a logcat to see what is causing the app to force close, have you tried clearing data/cache after upgrading from the older version? Or a clean install? What rom and android version are you on? I have a pixel 4a running stock android 13, have just installed lloyds app, hid it, rebooted and it loads and authenticates the device but i dont have an account so cant take it further, try and geta log with the error when the app force closes
 

tyler19820201

Senior Member
Jun 19, 2011
431
82
London
There is a problem with these new updates for both Halifax and Lloyds Banking apps!

For whatever reason the Halifax banking app version 104.03 and Lloyds banking app 104.03 (Lloyds owns both banks) Crashes on some custom roms and other systems and not sure why? I have only been able to find the Lloyds banking app version 102.02 on APK Mirror. If I install this version the app loads fine (No crash on boot) but once I update it to 104.03 the app crashes? I'm assuming that if I downgrade the Halifax app to 102.03 it will do the same.

I was able to rip the Halifax APK 104.03 file from Google Play Store and install it onto my Nvidia Shield. It boots perfectly fine on that just to test the app. My phone is running the Pixel Experience custom rom. I installed a fresh install of this rom on my phone no mods, no Magisk, no root! The Halifax app still crashes? As mentioned above even my Windows 11 subsystem (Internal Android system) this version of the app 104.03 crashes?

Maybe I will have to wait and see if it's a bug or a security feature in future updates of this app.

In the mean time if anyone on here has an older version of the Halifax app APK file that would be helpful!
The thing is you can not really use older version of those banking apps. If you are lucky you can use it for few weeks but later or sooner the app will force you to update whatever cracked older version you use...
I have no time to do a workaround for this right now, but will try to do it next week. If you have any update about it let me know!
I am using custom rom AICP android 11 at the moment. So far i have 6 banking apps on my phone but only Halifax and Lloyds having root detect issue. Actually these two apps are the same. Only the color and logo are different. 😁
Lets see the next few weeks they will do update and how will it work...
 

tyler19820201

Senior Member
Jun 19, 2011
431
82
London
For the Halifax app (Version 104.03)You need to use the Hide my applist module,follow this excellent guide on setting it up
I have set up HMA just now. So far so good. Halifax Lloyds Santander HSBC Natwest and Barclays has been tested succesfully. I am using latest official Magisk and LsPosed. Shamiko is on after i was disabling config list on magisk settings. 😁👍👍
But i dont know if i have any updates of this apps mentioned do i have to update my app list on HMA?? Or will do it automatically?
I mean on magisk some adjustment was neccessary... See the pics below
Screenshot_20230104-153215_Titkos.png
 
Last edited:

bombadier

Senior Member
Jul 3, 2010
3,641
3,562
The Burgh
LG G Watch R
Samsung Galaxy Tab S2
I have set up HMA just now. So far so good. Halifax Lloyds Santander HSBC Natwest and Barclays has been tested succesfully. I am using latest official Magisk and LsPosed. Shamiko is on after i was disabling config list on magisk settings. 😁👍👍
But i dont know if i have any updates of this apps mentioned do i have to update my app list on HMA?? Or will do it automatically?
I mean on magisk some adjustment was neccessary... See the pics below
Should not need to update the app list unless the app update changes something package name, you will know if something stops working and if it does you will have a wee bit of troubleshooting to look forward to
 
  • Like
Reactions: tyler19820201

krystiano

Senior Member
Nov 15, 2012
207
115
Hi. Can someone help me plz.
My Lloyds app not working on my rooted pixel 6 pro.

I have selected in denylist in magisk app but still app detected root on my phone.

There is any solution for this.
(Barclays working ok )
 

johnr64

Senior Member
Mar 27, 2021
354
215
I followed the guide for setting up HMA but I think I'm missing something in the Root list as aps are still seeing it. I put the renamed magisk and HMA but can't find any more to add...
Hi,
I use SDmaid to hide my renamed Magisk on my Poco F3 and this works great , what is the App that is causing you issues :unsure:
 

OrionBG

Senior Member
Hey,
Currently its the Lloyds bank app and British Gas app... Also Revolut... Basically all apps I have that detect root... Something is wrong with my configuration... The funny part is that the detection app that checks if everything is ok is saying ok on all fields so I'm at a loss here.
 
Last edited:

johnr64

Senior Member
Mar 27, 2021
354
215
Update! Finally got it working. I missed the part about Shamiko and after installing it all apps are happy again :)
Hi,
As a test i tried both your problem apps, i first tried the Lloyds bank app, i managed to go as far as the signing up page with out any intervention, but i couldn`t go any further due to not having a LB account.

I then tried the British Gas app but it didn`t load correctly,
i was faced with a white screen and BG logo only,

i unfroze magisk and added BG to the deny list and then re-froze Magisk using SDMaid.

I cleared the BG STORGE/CACHE and without re-starting my Poco F3, the app started working, i managed to go as far as the sign-up page, but again i`m not with BG and i could proceed any further.

The things you do for FUN:)
 

OrionBG

Senior Member
Hi,
As a test i tried both your problem apps, i first tried the Lloyds bank app, i managed to go as far as the signing up page with out any intervention, but i couldn`t go any further due to not having a LB account.

I then tried the British Gas app but it didn`t load correctly,
i was faced with a white screen and BG logo only,

i unfroze magisk and added BG to the deny list and then re-froze Magisk using SDMaid.

I cleared the BG STORGE/CACHE and without re-starting my Poco F3, the app started working, i managed to go as far as the sign-up page, but again i`m not with BG and i could proceed any further.

The things you do for FUN:)
Yeah the Lloyds app tells you you are rooted after you try to login. It still glitches for me sometimes but will figure it out. British gas app does only show black screen if it sees the root. Works now.
 

johnr64

Senior Member
Mar 27, 2021
354
215
Yeah the Lloyds app tells you you are rooted after you try to login. It still glitches for me sometimes but will figure it out. British gas app does only show black screen if it sees the root. Works now.
Hi,
Strange:unsure:, i have Santander, Natwest, and Tescos Pay+ (Now Wallet) installed on my F3, "these are all working fine by the way",
if i don`t add them to the deny list and also rename Magisk and then re-freeze Magisk with SDMaid, all three apps detect root at start up?
 
Nov 6, 2019
18
1
Hi,
As a test i tried both your problem apps, i first tried the Lloyds bank app, i managed to go as far as the signing up page with out any intervention, but i couldn`t go any further due to not having a LB account.

I then tried the British Gas app but it didn`t load correctly,
i was faced with a white screen and BG logo only,

i unfroze magisk and added BG to the deny list and then re-froze Magisk using SDMaid.

I cleared the BG STORGE/CACHE and without re-starting my Poco F3, the app started working, i managed to go as far as the sign-up page, but again i`m not with BG and i could proceed any further.

The things you do for FUN:)
There other apps facing same issue could you find a way to bypass them ?
Here are the links on google play :
SNB Banking
Government App
 

johnr64

Senior Member
Mar 27, 2021
354
215
There other apps facing same issue could you find a way to bypass them ?
Here are the links on google play :
SNB Banking
Government App
Hi,
I tried SNB and it crashed at start up, i did add it to the deny list, added build props, ect froze magisk with SDMaid but still the same issue.
---------------------------------------------------------------------------
i found this on reddit,

I have the same app SNB now they update it to a new version and it crashes load (I think it is detecting root), also tawakalna services, Nafath and absher detects root now.

I have shamiko, Hide my applist and safety net and nothing is working. also tried island. I also pass on all root detectors (YASNAC, Oprek,Applist Detector, Magisk Detector)
----------------------------------------------------------------------------
I would suggest to clean install a rom that passes safetynet with out intervention and try installing SNB to see if it works.

I use Evo-X and this passes safteynet, V7.5 has just been released,

You are not alone with this issue
There other apps facing same issue could you find a way to bypass them ?
Here are the links on google play :
SNB Banking
Government App
Hi,
Sorry for not getting back sooner, i managed to get SNB Working,
by installing Shamiko v0.6 Magisk module you need to uncheck Enforce DenyList, for this module to work.

I could not get pass Absher "your device is not secure" nag screen,
I'm assuming it knows i have a unlocked bootloader.

This was tested on a Poco F3 EEA Version, Running a CLEAN install of
Evolution-X V7.5 with OrangeFox Recovery and a renamed Magisk V25.2 being hidden/Frozen by SDMaid,

I hope you sort it.
 
  • Like
Reactions: testemailmailx

anoninous7890

New member
Feb 10, 2023
2
0
@johnr64 I have a POCO F3 phone too, with magisk V25.2, but a different ROM - I have Pixel Experience.
I have been able to get Santander and Revolut apps to work just fine using this guide, however my Metro bank app is no longer working. Any chance you could tell me if it works for you so that I can perhaps try installing/uninstalling things so my phone is in a similar shape as yours?

It was working fine until 2023/02/07 (or the day before, not 100% sure), and then the next day it gave me the following message when I opened it, after which it closed automatically:
"
SORRY, THE APP CAN'T BE USED ON THIS DEVICE

<Image of blue phone in a grey circle>

To keep you personal information safe,
the app cant be used on this device as the
security configuration on this phone may
have been altered.

OK [This is inside a blue button]
"

Note that the Metro bank app has not had a google play store update since 2023/01/20.
I suspect they have updated their servers to use the new Play Integrity API (which is better at detecting root to my understanding)
 
Last edited:

johnr64

Senior Member
Mar 27, 2021
354
215
Hi, I rebuilt my phone tonight sadly I was also faced the the same security issue, I guess its because my bootloder is unlocked, I hope there is a fix around the corner as I use banking apps regularly on my F3
 
  • Like
Reactions: anoninous7890

LaurenceGough

Senior Member
Aug 12, 2013
125
25
Guys, simple solution I'd suggest you go with modern banks that aren't so silly on unnecessary "root" detection.

I'd highly recommend Starling, Chase and Natwest banks they all work perfectly fine and have always done so. I'm sure there are plenty more.

I only install Magisk to get Google Pay/Wallet working (SafetyNet) on LineageOS, I really have no need for root otherwise. LineageOS was required for my phone as Motorola broke the stock ROM so badly with their OTA patches that myself and others couldn't even make phone calls without rebooting first.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    Excellent im glad it's working for you. Otherwise I can only suggest using the Web

    It apparently works, but I need zygisk to use the universal safety net fix on lineage.
    You can try this module https://github.com/Magisk-Modules-Alt-Repo/sensitive_props
    2
    Could you please share some details of your setup, I had the Halifax banking app working fine until I updated to some of the most recent canary builds, the latest is 25210, modules dont load with that build (eg Viper4android and adaway), the previous versions hiding the app was broken and so I didn't use the Halifax app, on canary 25210 I can hide the magisk app again but the Halifax app detects root, I have managed to revert to magisk 25206 which was the version that worked for me up until the other week, however the halifax app which also got updated the other day to 109.02 is still detecting root, the last time I had major problems with the Halifax app hidemyapplist fixed it and has been working fine until recently, tried delta at the time but couldn't get it to work, may have to try with delta again as the setup I had that was working is no longer hiding root, annoyingly root checkers report magisk as hidden, wallet and netflix both work, using Ruru v1.1.0 has two things its found, namely under Libc File Detection com.tsng.hidemyapplist and Syscall File Detection it finds the same com.tsng.hidemyapplist, not sure what I need to do to hide them and dont know if the halifax is detecting hidemyapplist, magisk is hidden, needing some tips as to where my setup is going wrong
    HMA is useless now. Magisk canary also broken. I just use Magisk stable 25.4 i think and safetynetfix 2.4 (see screenshoots on my previous post) and Shamiko. Disable enfroce deny list to get shamiko access to run blacklist mode. And also need to hide AND freeze magisk!! So u rename magisk and reboot. after that use any third party app like AppManager or SDmaid and look for the renamed magisk package and freeze it. after that rebbot again. obviously add the banking apps to hide list and do settings like adding modules etc. before freezing.
    2
    Yes. I can confirm it does work. Now i have all six UK main banking apps working on my phone. For a while....
    Excellent im glad it's working for you. Otherwise I can only suggest using the Web
    did u try this "zygiskless" module method?
    It apparently works, but I need zygisk to use the universal safety net fix on lineage.
    2
    I dont recommend to use older version of banking apps. it might work for few days or weeks only. then it will force u to update it anyway. :confused:😞
    @tyler19820201 I posted a link to the unofficial USNF mod in a previous post, at the time Play integrity checker would randomly fail device and basic integrity on USNF 2.4.0,displax's version seemed to work consistently,
    I know the updates will get you in the end and so never try to stay on an older version, took me a while to manage to revert to magisk 25206 and unfortunately there was an update to the halifax app,think I am stuck using the website for the foreseeable as I cant work it out, dont want to do something radical as everything else is working fine, @first_damned definitely some kind of hoodoo voodoo going on
    1
    I'm using barclays with no problems now on lineage, just using lineage out of thing box, no magisk
  • 24
    Hi All,

    I've seen mention of Santander but not of Lloyds bypassing the root detection. After much trial and error it's quite simple and my method will bypass both Santander and Lloyds. If bypassing Santander just do the same for the Santander app as ive said to do with Lloyds.

    <--Update 08/06/19-->

    Having flashed a new rom and following my steps again I received the detection message again but was resolved by using the Canary build of Magisk Manager.

    To get Magisk Manager Canary click the link below:

    https://github.com/topjohnwu/magisk_...pp-release.apk

    Once installed, open Magisk Manager and go to

    settings > Update Channel > Canary

    Go back to Magisk home screen and swipe down to check for updates, you'll receive an update for the canary build. Once you update follow the guides original steps below.

    <--End of update-->

    In Magisk Manager Settings:
    Enable Magisk Hide
    Enable Sytemless Host
    And if the option is available select "Hide Magisk"

    In Adaway:

    Download my exported blacklist from:

    https://drive.google.com/file/d/1xCBB4iVA65gJTTYqbhU1qTlghVYyAL1S/view?usp=drivesdk

    Then in adaway click the 3 dots in the top right to open the menu, select "Your Lists" then press the menu button again in the top right and press "Import all lists" and select the file you downloaded.

    With the urls added go back to the adaway main screen and press "Download Files and Apply ad blocking" and Reboot device. If "Download Files and Apply Ad Blocking" doesn't appear, click "check for updates" and then download them which will do the same thing.

    Once your phone has restarted install the Lloyds Banking app but don't open it. Go into Magisk Manager and select Magisk Hide from the menu and tick the Lloyds Banking app. Reboot phone and Lloyds should work perfectly!

    I managed to do this from researching other threads and adding my own bits in so credit due elsewhere as well, as usual you can follow this guide but do so at your own risk, i take no responsibility :D
    5
    I think we should start leaving bad reviews on the play store for apps that go to extreme lengths to detect root/custom recovery, especially in the case of apps that treat you like a criminal just for having a custom recovery, when you aren't even rooted.
    If an app still detects that you've been "jailbroken" (eugh) when you've tried everything possible to hide it, then whatever it's doing in your file system is extremely intrusive, and that's a good enough reason to try and knock a star off their review score if you ask me.
    Apologies if this is off topic, but it's really pissing me off that so many app developers treat people like criminals just for wanting to have full control of our own devices, or to get a bit more life out of phones that would otherwise succumb to planned obsolescence when the official firmware updates dry up. Screw these guys.
    4
    This app (Santander UK) is using Isolated Process and a scan of your installed apps to detect root.

    Just use latest Magisk Canary + Repack of Manager + Riru Core v. 23.9 + Unshare Module (to enable Magisk Hide for Isolated Process) and this app will work perfectly with root. I tested on my device. (Mi 9T Pro + MIUI 12.5 - A11)

    Riru Core v. 23.9 can be downloaded from Magisk Repo.

    Download Riru Unshare Module from the link below:


    Enable Magisk Hide for the app and its processes (uk.co.santander.santanderUK and uk.co.santander.santanderUK : oa.UB)

    If the app FC right after starting you need to search for a possible installed app triggering the detection or simple revoke the permission "Get info about installed apps" at app settings (this can differ from device to device)

    After every update of the app the Isolated Process name can be different so just re-add it to Magisk Hide again and everything should be fine.

    More info about the exploit (Isolated Process) used by a large numbers of banks to detect Magisk:

    3
    For anyone having trouble with Santander, even after hiding it in Magisk - rename the TWRP folder in your internal storage/SD card to something different, delete Santander's app storage & cache and try running it again. Apparently Santander's app is checking multiple things to detect if you're rooted or not. Having TWRP folder seems to be one of them.
    3
    Hi Steve,

    This is the first time ive noticed an application that has gone to greater lengths and was relatively easy to bypass. Given how long it took to come up with this technique of connecting to a url to blacklist your device i cant see them coming up with something new anytime soon.

    All that is required to bypass this new technique is to log dns requests in Adaway and with the listed urls the app connected to for the login you simply block the urls and leave 1 out. Take for example Lloyds used 3 urls, i blocked two leaving only one allowed but Lloyds couldnt connect so that url was genuinely used to login, i then knew to allow that url and focus on the other two finally figuring out it was that url i listed that was being used to connect and block my device. With the app unalee to connect to that url it cannot verify if my device is blacklisted. Its time consuming as you need to restart after each new url you blacklist but its simple to do.