Widevine Security Level after unlocking bootloader/root

Search This thread

zellleonhart

Senior Member
Jan 19, 2013
582
187
UPDATE 2020-11-12:
With the latest 11.0.3.4 update, Widevine stays at L1 even if you unlock the bootloader or root!

Hi all,

I have seen one comment that someone rooted the 8T and widevine becomes L3 instead of L1, unlike the 8/8 Pro.

Can anyone with rooted 8T or bootloader unlocked 8T comment below what is your widevine security level? You can use the app here to check: https://play.google.com/store/apps/details?id=com.androidfung.drminfo&hl=en

Please include your 8T model (e.g. KB2005), whether bootloader is unlocked and/or your phone is rooted. Thanks in advance!
 
Last edited:
  • Like
Reactions: davidf9

JWhetstone02

Senior Member
Mar 6, 2011
1,085
889
South Carolina
does locking/unlocking the bootloader have any effect on Widevine?

When I got my phone and set it up, I had updates from the play store. Netflix was one of those it updated.

I unlocked my bootloader and later on when I tried to use netflix, it promoted me I needed to update the app. When I said ok. It took me to the play store where it said Netflix isn't compatible with my device.

Installing an apk for netflix found on the web gets me netflix, but it still doesn't show in the play store. Plus maximum playback is SD only.

Unlocking the bootloader changed my L1 to L3.
KB2005
 
Last edited:

bad pixel

Senior Member
Mar 17, 2011
67
28
When I got my phone and set it up, I had updates from the play store. Netflix was one of those it updated.

I unlocked my bootloader and later on when I tried to use netflix, it promoted me I needed to update the app. When I said ok. It took me to the play store where it said Netflix isn't compatible with my device.

Installing an apk for netflix found on the web fixes this, but it still doesn't show in the play store.

I am also rooted now. KB2005

Thanks for the reply!

Have you tried relocking your bootloader to see if you go back to L1?
 

ethantarheels123

Senior Member
Jan 11, 2009
1,298
251
When I got my phone and set it up, I had updates from the play store. Netflix was one of those it updated.

I unlocked my bootloader and later on when I tried to use netflix, it promoted me I needed to update the app. When I said ok. It took me to the play store where it said Netflix isn't compatible with my device.

Installing an apk for netflix found on the web gets me netflix, but it still doesn't show in the play store. Plus maximum playback is SD only.

Unlocking the bootloader changed my L1 to L3.
KB2005
Enabling MagiskHide, then clearing cache and data for play store allows netflix to show up in the play store. However still has the SD issue in the netflix app.

Sent from my [device_name] using XDA-Developers Legacy app
 

JWhetstone02

Senior Member
Mar 6, 2011
1,085
889
South Carolina
does locking/unlocking the bootloader have any effect on Widevine?

Thanks for the reply!

Have you tried relocking your bootloader to see if you go back to L1?

I have not reid to relock yet.

Enabling MagiskHide, then clearing cache and data for play store allows netflix to show up in the play store. However still has the SD issue in the netflix app.

Sent from my [device_name] using XDA-Developers Legacy app

I had this problem before being rooted, so never had magisk to do that. But will give that a try now.

Also. Just doing a quick Google search, there are a few things I've found out. The persist.img apparently holds the DRM keys. If this was changed or damaged it sets Widevine to L3.
I don't think by unlocking the bootloader or rooting that it touches the persist.img, so not sure if that has anything to do with it?
Also, by reading some xda threads and threads on the OnePlus forum, it seems like a system update can fix the issue and you still be unlocked\rooted. Seems to be the case for op8 and some older ones
 

zellleonhart

Senior Member
Jan 19, 2013
582
187
I had this problem before being rooted, so never had magisk to do that. But will give that a try now.

Also. Just doing a quick Google search, there are a few things I've found out. The persist.img apparently holds the DRM keys. If this was changed or damaged it sets Widevine to L3.
I don't think by unlocking the bootloader or rooting that it touches the persist.img, so not sure if that has anything to do with it?
Also, by reading some xda threads and threads on the OnePlus forum, it seems like a system update can fix the issue and you still be unlocked\rooted. Seems to be the case for op8 and some older ones

I don't think it has anything to do with persist.img (that one is more related to the fingerprint). On OP8, OnePlus released a fix and solve the issue, but for older phones like OP6, as long as you unlocked the bootloader, it's permanently Widevine L3 even if you relock it. This is what I am worried about.
 

Keinta15

Senior Member
Feb 4, 2013
74
18
Puerto Rico
OnePlus 8T
OnePlus 11
I don't think it has anything to do with persist.img (that one is more related to the fingerprint). On OP8, OnePlus released a fix and solve the issue, but for older phones like OP6, as long as you unlocked the bootloader, it's permanently Widevine L3 even if you relock it. This is what I am worried about.
Hopefully they release a fix then

Sent from my KB2005 using Tapatalk
 

fxz

Senior Member
Dec 5, 2017
183
67
Manchester
OnePlus 8T
Hello! I did what you wanted me to do. I'm rooted with Magisk, Magisk Hide turned on for the DRM checker, and I'm on the latest 11.0.1.2.KB05BA (EU) Widevine is L3.
 

theincognito

Senior Member
Feb 26, 2015
621
885
Xiaomi Mi 10T Lite
Google Pixel 7 Pro
Once unlocked, you can't go back to L1. Qualcomm has a "feature" called QFuse, a microscopic fuse on the SOC. It blows if the device is unlocked. That breaks the chain of trust.

Nah. Xiaomi and Pixel devices retain L1 on bootloader unlock, even though those devices use Qualcomm chipsets too. So it's definitely not that.
 
  • Like
Reactions: RyanlOwen

mputaturo

Member
Sep 8, 2008
31
13
Montesilvano
Windewine after relocking

This is DRM info reports now after relocking the bootloader
 

Attachments

  • Screenshot_20201024-194906.jpg
    Screenshot_20201024-194906.jpg
    218.9 KB · Views: 1,112

Top Liked Posts

  • There are no posts matching your filters.
  • 5
    Out of those who have gotten L1 back, are any of you using a KB2005 (Global Model)? Trying to determine if it's still limited to just EU Model.
    Holy Moly, It worked.
    I have the KB 2001 which is the IN variant.
    These are the steps I followed and got L1 on an unlocked BL and root on 11.0.6.9 EU:
    1.MSM to 11.0.5.6 (EU)
    2. incremental update to 11.0.6.9
    3.full OTA update once again to get 11.0.6.9 on both the slots
    4. unlocked BL
    at this point it immediately changed to L3, did all the wipe caches and that did not help, netflix app would show as incompatible in the play store
    5. rooted the device, in magisk setting selected MagiskHide and Systemless host
    6. Rebooted
    7. Cleared caches of Google Play Service & Play Store and wiped cached in Recovery
    8. Rebooted and Voila it is now at L1 and system id changed to 19909. with BL locked earlier on it was 18914.

    Finally L1 on unlocked BL. Thanks Oneplus. FWIW- I also had reported the issue in the feedback section on Oneplus forums.
    4
    I just realized something that might be the answer.

    Looking at the screenshots here and in other threads everyone that have L1 with an unlocked bootloader seem to have the L1 widevine system id 19909 or 19910 while my device have the widevine L1 system id of 18914 .

    That might be the answer, even though I don't know why oneplus would have shipped devices with different system ids. Perhaps earlier devices had 19909 or 19910 and then they changed to 18914 for some reason.

    Make no sense why devices with 19909 or 19910 would be allowed to keep L1 while devices with 18914 don't though. So one of the implementations have to be a mistake, the only question is which one?

    Is there anyone with widevine system id 19909 or 19910 that have actually been downgraded with unlocked bootloader?

    Is there anyone with widevine system id 18914 that have actually been able to keep L1 with unlocked bootloader?



    Would be interesting to gather the below information to see if there is only older devices that had the 19909 system id

    • Device type: KB20XX?
    • Widevine L1 system id: 19909, 19910 or 18914?
    • When did you purchase the device?

    My device
    • Device type: KB2003
    • Widevine L1 system id: 18914
    • When did you purchase the device? About two weeks ago (18 Dec)

    Edit: added a bug report on oneplus forum https://forums.oneplus.com/threads/...ices-with-system-id-19909-10-keep-l1.1370349/
    3
    Similar to guy above - L3 on rooted KB2003 OOs 11.0.5.6

    I tested:
    re-locking bootloader reseted it back to L1
    unlocking it again is all it takes to drop to L3 (no rooting needed)
    shiieeeet

    Yo, a lil update here

    I now pass Widevine L1 despite still being unlocked, still being on the same ROM, same data and still rooted.
    Netflix and DRMinfo confirms it.

    Recently:
    OOS has updated to 11.0.6.9
    Magisk canary updated to 21202

    I checked my DRMinfo right after OOS has finished update and it was still disappointing L3
    ..but 24h later it magically turned into L1 all of the sudden?
    a-surprise-to-be-sure-but-a-welcome-one-when-55157418.png
    3
    I'm on international 2005 running EU ROM 11.0.6.9 KB05BA. Got L1 back after update to 11.0.6.9. Before that it was always L3.

    Rooted
    BL unlocked

    System ID in DRM check is 19909
    2
    I also noticed that I got back L1 today and I have not done anything more than a reboot. Been stuck on L3 for a month so happy they finally manage to sort it out.