Basic Root Hiding
KOWFor better hiding, make sure you don't install any weird module, better start with a clean rooted environment.
Useful tools for root user
1. MT Manager - A powerful tools to open any files even zip files, apk editor and access to system directory. Download
2. Termux - A powerful terminal emulation with an extensive Linux package collection. Download
Key module for root hiding
✅ Useable
⏹️ Useable but unneeded
❌ Do not use
1. Zygisk Setup
Here's some recommended setup if you want to use zygisk module:
a. ZygiskNext
b. ReZygisk + Treat Wheel
Tips: choose either one setup only, do not install ZygiskAssistant and NoHello, newer version of ZygiskNext and ReZygisk already handling hiding stuff.
• ZygiskNext
Magisk✅ | Magisk Alpha✅ | Kitsune Mask ❌| KernelSU✅ | Apatch ✅
Standalone implementation of Zygisk, providing Zygisk API support for KernelSU and a replacement of Magisk's built-in Zygisk.
Notes: shamiko is no longer needed since v1.3.0, enable 'umount only' in WebUI instead.
• ReZygisk (FOSS)
Magisk✅ | Magisk Alpha❌ | Kitsune Mask ✅| KernelSU✅ | Apatch ✅
ReZygisk is a fork of Zygisk Next, a standalone implementation of Zygisk, providing Zygisk API support for KernelSU, Magisk (besides built-in), and APatch.
Telegram channel (latest build)
• Treat Wheel
Extra hiding module for ReZygisk.
• Extra notes for KernelSU users
If your kernel support susfs, you can install susfs module.
susfs4ksu GitHub Release
• Extra notes for APatch users
You can use extra NoHello kpm module for additional hiding in APatch.
NoHello kpm Telegram channel
3. Play Integrity Fix (PIF)
Magisk✅ | Magisk Alpha✅ | Kitsune Mask✅ | KernelSU✅ | Apatch✅
Fix Play Integrity and SafetyNet verdicts to get a valid attestation.
The official Play Integrity's owner has removed this project since with new Play Integrity API. If you want to use PIF, we still have PlayIntegrityFork and inject-s fork available.
- PIFork GitHub Release
- PIF inject-s GitHub Release
Notes: spoofVendingSdk which can help you to pass device verdict on A13+ has been patched by Google, this option no longer works.
Notes: enable spoofSignature if your ROM is not signed. Rom sign checker.
4. Tricky Store
Magisk✅ | Magisk Alpha✅ | Kitsune Mask✅ | KernelSU✅ | Apatch✅
This module is used for modifying the certificate chain generated for android key attestation.
(Strong integrity if valid keybox)
Tips: Tricky Store spoof bootloader status as locked to target app. For TEE broken devices, tricky store can spoof TEE status to target app too by using certificate generating mode (!).
• Tricky Addon (optional)
Additional WebUI interface for Tricky Store. After installing this module, you will find out an action button or WebUI button on Tricky Store's module card.
LSPosed Framework
Magisk✅ | Magisk Alpha✅ | Kitsune Mask✅ | KernelSU✅ | Apatch✅
A module trying to provide an ART hooking framework which delivers consistent APIs with the OG Xposed, leveraging LSPlant hooking framework.
The official LSPosed only support till android 14, for Android 14+ user, please use the fork version.
LSPosed Fork:
- Irea Fork GitHub Releases | Latest build
- JingMatrix Fork GitHub Releases | Latest build
Tips: the official LSPosed Framework is achieved since Jan 8, 2024. Thus, fork version is more recommended currently, in terms of compatibility, features, bugs, hiding.
Hide My Applist
An Xposed module to hide apps or reject app list requests, and provides some methods to test whether you have hidden your app list properly.
GitHub Releases | Telegram Releases
How to use:
IMPORTANT NOTES: ONLY select system framework in LSPosed, NEVER select other app. Now go to HMA app, do following step,
- Template manage (ROOT RELATED STUFF)
- Create a blacklist template
- NAME IT
- add root related app (xposed module, magisk manager) to invisible.
Now go back to HMA homepage,
- App manage (BANK & GAME)
- choose app that detect root (games, bank app)
- enable hide
- work mode - blacklist
- using template - choose the template you just created
All set!
Final reminder
Some modules can compromise the hidden environment. Check them one by one if you're still unable to hide root properly. Feel free to share this if you find it helpful. Thanks!
Update log
Initial version Sep 18, 2024.
Updated Sep 19, 2024. Improved grammar, typo. Added some graphics, MT Manager official telegram channel. Replace termux link from Play Store to F-droid.
Updated Sep 28, 2024. Improved code for AllAppTarget.sh script: Removed Apatch manager due to unwanted bug.
Updated Oct 2, 2024. Improved code for AllAppTarget.sh script: exclude all system app due to unwanted bug. Removed HMAL (HMA fork).
Updated Oct 7, 2024. Added LSPosed Framework npm version telegram channel link.
Updated Oct 12, 2024. Improved code for AllAppTarget.sh script: added executing prompt, improve pm command logic. Renamed AllAppTarget.sh to UpdateTargetList.sh.
Updated Oct 13, 2024. Added working status label for modules in different root manager.
Updated Oct 22, 2024. Added LSPosed Framework (Irena fork), removed npm version.
Updated Nov 16, 2024. Clarified HMA usage guide.
Updated Nov 17, 2024. Added ReZygisk GitHub releases link.
Updated Dec 4, 2024. Added graphical guide for HMA.
Updated Jan 31, 2025. Added LSPosed Telegram channel for Shamiko download link, since GitHub release is always slower than Telegram channel.
Updated Jun 14, 2025. Updated Zygisk guide, PIF guide, and module list: update outdated link, removed PIF and Zygisk Assistant, added PIFork, Treat Wheel and NoHello.
Updated July 5, 2025. Updated pif guide, added HMA telegram channel.
Updated Oct 15, 2025. Added link to HMA-OSS fork.
Updated Oct 16, 2025. Removed Shamiko and NoHello module link.