Using Software with V-key Components

Search This thread

Lu5ck

Senior Member
Dec 18, 2013
313
81
Can you share more about your setup (magisk or delta, unsf version, etc)?
Idk about him. Now i am using magisk delta, universal safetynet mod 1.2 and singpass 16.2.1

I also use detach magisk to disable auto update on singpass, while able to auto update other apps
 

wyt18

Senior Member
Idk about him. Now i am using magisk delta, universal safetynet mod 1.2 and singpass 16.2.1

I also use detach magisk to disable auto update on singpass, while able to auto update other apps
thanks. I'm on 16.2.1 too, along with USNF mod 1.2, but magisk official 25.2. Singpass detects root with this setup and it must be the magisk (though even when I freeze the magisk app it still happens)

can't use delta because I need lsposed/zygisk. do you use xposed at all, or is there a workaround for it on delta?
 

Lu5ck

Senior Member
Dec 18, 2013
313
81
thanks. I'm on 16.2.1 too, along with USNF mod 1.2, but magisk official 25.2. Singpass detects root with this setup and it must be the magisk (though even when I freeze the magisk app it still happens)

can't use delta because I need lsposed/zygisk. do you use xposed at all, or is there a workaround for it on delta?
If you use official magisk, then you need install the GitHub latest shamiko.
 

wyt18

Senior Member
Does your device able to use singpass without magisk?
You mean w/o rooting? I've always been rooted so have not tried recently, but I can imagine there would be no issues running Singpass w/o root

I used to run Singpass v12 without issues alongside Magisk by disabling certain services and providers using App Manager. The same services don't appear in v16. But despite trial and error disabling each service, Singpass still doesn't work
 

Lu5ck

Senior Member
Dec 18, 2013
313
81
You mean w/o rooting? I've always been rooted so have not tried recently, but I can imagine there would be no issues running Singpass w/o root

I used to run Singpass v12 without issues alongside Magisk by disabling certain services and providers using App Manager. The same services don't appear in v16. But despite trial and error disabling each service, Singpass still doesn't work
Try magisk alpha and the latest shamiko in alpha telegram
 

Lu5ck

Senior Member
Dec 18, 2013
313
81
Idk, I use magisk delta and a older version of singpass.
My past experience with alpha is just zygisk + shamiko (latest from their alpha telegram) + unviersal safetynet fix (modded) and it runs.
Some magisk addons will expose magisk, addons that add extra files via kernelsu, addons like revanced installed via root, some modded camera installed via magisk etc.
 

wyt18

Senior Member
Idk, I use magisk delta and a older version of singpass.
My past experience with alpha is just zygisk + shamiko (latest from their alpha telegram) + unviersal safetynet fix (modded) and it runs.
Some magisk addons will expose magisk, addons that add extra files via kernelsu, addons like revanced installed via root, some modded camera installed via magisk etc.
Do you use 16.2.1?

12.x used to work for me until two months ago. Now all versions earlier then 16.2.1 force me to update
 

Top Liked Posts

  • There are no posts matching your filters.
  • 3
    UPDATE!
    NO MORE COMPLICATED SCRIPTS, JUST USE MAGISK 24.1 WITH DENY LIST!
    1. Enable Zygisk, add the apps to the deny list
    2. Hide Magisk App
    3. Install SafetyNet Fix by kdrag0n (Might still need Magisk Hide Props if your device is a little older)
    Working on: Poco X3 Pro + Lineage 18.1 (Android 11)


    ^Use aurora store to get the older version of Singapass that's likely to work, I'm using build 100.

    V-Key Pte Ltd is basically a IT security technology based in Singapore I suppose.
    Some softwares in Singapore, i.e. OCBC Banking, SingPass and maybe some other SEA banking softwares have v-key components which detects magisk.

    This is a guide on how to use such softwares with Magisk, because I firmly believe that I get to choose what features I wish to have for my phone, and it is not fair for these banking companies to deny their services just because my device is rooted, I mean, if my banking stuff gets compromised because my phone is rooted and exploited, I'm willing to take the risk.

    This guide aims to help mostly Singaporean users or anyone using such softwares with v-key components.

    To make things work, the following things must be done:

    1. Make sure Magisk manager is hidden

    2. Make sure device fingerprint is certified by google (Check out the MagiskHide Props Config module) Please contribute fingerprints to this module for the benefit of everyone, checkout the GitHub page for more details.

    3. Add the apps to Magisk Hide list.

    4. Use package manager (pm) to disable the following v-key components in terminal (Using POSB Banking App as an example:

    pm disable com.dbs.sg.posbmbanking/vkey.android.vos.MgService
    pm disable com.dbs.sg.posbmbanking/com.vkey.android.support.permission.VGuardPermissionActivity
    pm disable com.dbs.sg.posbmbanking/com.vkey.android.vguard.VGDialogActivity
    pm disable com.dbs.sg.posbmbanking/com.vkey.android.internal.vguard.cache.ProcessHttpRequestIntentService

    *Some apps may not have one or two v-key components listed above (i.e. SingPass), so getting an error on one or two components being not found should not be a big issue. If things works out you should see out puts on new states being disabled

    *Attached a script that deals with OCBC, POSB and SingPass, if you have some weird errors make sure the encoding or format (Not sure of the jargon for it) is Unix or sth and not Windows

    Credits:
    Reddit User u/Inscythe for giving me a vague idea on the existence of v-key components

    Muntashir Akon for his App Manager, allowed me to search for v-key components of apps(tried the disabling features of this app but didn't work, hence the script with pm command)

    @Didgeridoohan for MagiskHide Props Config

    @vurtomatic for giving me the idea of creating a guide on this.
    3
    Can I have a step by step go to run this script? Newbie here. It will make Singpass run as per normal right? And by Package Manager, do I download it from F Droid?

    That will not for singpass, this is what I do to get it work
    1. Must pass basic safetynet, this will not teach you how
    2. In magisk, install Riru module
    3. In magisk, install LsPosed module
    4. Download Unshare - https://github.com/vvb2060/riru-unshare/releases
    5. In magisk, install Unshare
    6. Download Universal Safetynet Fix - https://github.com/kdrag0n/safetynet-fix/releases
      This basically make hardware-backed attestation CTS devices to use basic instead
    7. In magisk, install Unshare
    8. Install App Manager - https://f-droid.org/en/packages/io.github.muntashirakon.AppManager/
    9. Install XPrivacyLua - https://repo.xposed.info/module/eu.faircode.xlua
    10. Reboot
    11. In LsPosed, enable XprivacyLua and Singpass in that same list
    12. Reboot
    13. In magisk, enable "Magisk Hide" in settings
    14. In magisk, press "Shield", hide Singpass all options (dropdown)
    15. In magisk, "hide Magisk" in settings, choose some really unpredictable name
    16. In App Manager, look for Singpass, go to "Services", disable all "(Isolated)" services.
    17. In XPrivacyLua, look for Singpass, enable restrict on "Get Applications" and "Get Sensors"
    18. Reboot
    19. Try running it a few times to see if it go through, if doesn't work do the shelter method
      Personally, it run for me but ultimately fail when it try to register biometrics, no idea how to disable its access to biometrics.
    20. Install Shelter - https://play.google.com/store/apps/details?id=net.typeblog.shelter
    21. In shelter, under personal profile, clone "Singpass"
    22. In shelter, under work profile, make sure no rooted apps in there
    23. Reboot
    24. Run Singpass (Work Profile), it may fail sometimes, just keep retry until it runs undetected.
    25. (Bonus) Put chrome or whatever browser apps into shelter so singpass can use that browser app.
    App Manager and XPrivacyLua might be redundant but whatever, just do it anyway. Unshare and magiskhide alone seem to work for some people, personally doesn't work for me. Anyway, this is basically everything you could try.

    I am using Poco X3 Pro, lineage 18.1

    Edit:
    Magisk is entering a new era and with that improved hiding capability. Before the new stable magisk is released alongside with other more powerful modules, you can download the unofficial alpha build at https://t.me/magiskalpha then with combination of deny list and universal safetynet fix, you could run singpass without issue. I didn't try because I am using a number of other modules as well but other users did try and worked.
    2
    The recent Singpass update requires disabling o.InvalidRegistrarException for root detection to be circumvented.
    2
    That will not for singpass, this is what I do to get it work
    1. In magisk, install Riru module
    2. In magisk, install LsPosed module
    3. Download Unshare - https://github.com/vvb2060/riru-unshare/releases
    4. In magisk, install Unshare
    5. Install App Manager - https://f-droid.org/en/packages/io.github.muntashirakon.AppManager/
    6. Install XPrivacyLua - https://repo.xposed.info/module/eu.faircode.xlua
    7. Install Shelter - https://play.google.com/store/apps/details?id=net.typeblog.shelter
    8. Reboot
    9. In LsPosed, enable XprivacyLua and Singpass in that same list
    10. In magisk, enable "Magisk Hide" in settings
    11. In magisk, press "Shield", hide Singpass all options (dropdown)
    12. In magisk, "hide Magisk" in settings, choose some really unpredictable name
    13. In App Manager, look for Singpass, go to "Services", disable that one "(Isolated)" service.
    14. Reboot
    15. In shelter, under personal profile, clone "Singpass"
    16. In shelter, under work profile, make sure no rooted apps in there
    17. In XPrivacyLua, look for Singpass, enable restrict on "Get Applications"
    18. Reboot
    19. Run Singpass (Work Profile), it may fail sometimes, just keep retry until it runs undetected.
    App Manager and XPrivacyLua might be redundant but whatever, just do it anyway. Unshare is a must though, otherwise it won't work.
    Thanks for the tip! I tried riru+unshare, and I found that those two is enough to run Singpass without work profile (Shelter) or xprivacylua. I'm currently running it normally in normal user mode.
    2
    Hi guys, I'm back on xda.
    I'm on some 2 year long commitment which I guess most Singaporean males will know what I'm talking about...
    Basically some ****ty stuff happened and I was away for a while.

    From your discussion I think we just costed a company its contract with the Singapore gov :p
    I'm yet figuring out the stuff about Singpass, but my phone's recent update got me into trouble with some banking apps - OCBC and POSB.

    If one uses pm to disable all the vkey services, the apps will launch/crash, just disable vkey.android.vos.MgService alone will work.

    I'm attaching a newer version of the script, to be executed as root as usual (added some comments)
    Opening the script and reading the commends helped me with the K Plus app from Kasikorn Bank Thailand.
    I disabled all vkey services instead of just the mgservice of vkey, which made the app crash. With just the mgservice disabled it works.