Passing SafetyNet/Play Integrity with Magisk or KernelSU
Simon1511NOTE: Only one of those two (Magisk OR KernelSU) is needed, not both!
Using Magisk
Download the latest version of Magisk from here: https://github.com/topjohnwu/Magisk/releases
Then rename the file and replace ".apk" with ".zip". Reboot to recovery and flash it.
Using KernelSU
KernelSU gets installed into the Kernel, making it harder to detect than Magisk. If you're using a Kernel with KernelSU included you can just continue reading from here.
Enabling Zygisk
Using Magisk
Open the Magisk app and navigate to its Settings.
Scroll down until you find "Zygisk" and enable it.
Now reboot your phone.
Using KernelSU
Download the ZygiskNext module from here: https://github.com/Dr-TSNG/ZygiskNext/releases
ZygiskNext (previously called ZygiskOnKernelSU) allows using Magisk's Zygisk functionality with KernelSU.
Open the KernelSU app, navigate to the Module section and install the ZygiskNext module.
Now reboot your phone.
Passing SafetyNet/Play Integrity
Install Play Integrity API Checker from the Play Store: https://play.google.com/store/apps/details?id=gr.nikolasspyr.integritycheck
Open the app and tap the "Check" button.
If the result looks as follows (only one or none of the three checks are passing) you aren't (fully) passing SafetyNet/Play Integrity and should continue reading.
If two or more of the checks are passing (or even all three), you're already good to go and don't need to continue reading this guide.
Download the UniversalSafetyNetFix module from here: https://github.com/chiteroman/PlayIntegrityFix/releases
Install it either in the Magisk or KernelSU app, depending on what you're using.
Reboot after installing the module.
Now open the Play Integrity API checker and check the status again.
The result should now look as follows (or even with all three checks passing):
The last check (MEETS_STRONG_INTEGRITY) can currently only be passed on devices using the stock ROM with a locked bootloader.
Making apps work
NOTE: Generally you will have a much better experience with most apps (such as Banking apps) when using KernelSU, since it's by far harder to detect than Magisk.
However if some of your apps are still not working, even after passing SafetyNet/Play Integrity you can try the following things.
Enabling DenyList (Magisk only)
Go into Magisk's Settings and look for a Setting called "Enforce DenyList" and enable it. Now select "Configure DenyList" right below that and add your problematic apps to that list.
Now reboot your phone.
Spoofing props to a certified device (custom ROMs only)
The UniversalSafetyNetFix module only spoofs properties for GMS (Google Mobile Services), but not for all other apps on your phone.
Using Magisk
Download and install MagiskHidePropsConfig from here: https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf/releases
TLDR: Install Termux (or adb shell), grant it root permissions, run the props command, select "Edit device fingerprint", select "Pick a certified fingerprint" and select your phone from the list. If it's not in the list you can just use any Google Pixel or any device from the same Manufacturer similar to yours.
This will spoof your phone to appear as a Google Pixel (or whatever you selected) and may help with any problematic app.
The full documentation with detailed steps on using this module can be found in that same GitHub repo.
Using KernelSU (only Samsung Galaxy A52 4G / A72 / A52s 5G / M52 5G / A73 5G)
Install the SamsungProps module in the KernelSU app and simply reboot after doing so: https://github.com/Simon1511/SamsungProps/releases
This will automatically spoof all needed props and even encryption state.
This ONLY works on the devices mentioned.
You're free to modify the module on your own for use on other devices.
Shamiko
Shamiko aims to bring back Magisk's MagiskHide functionality (removed in Magisk v24 and newer) and often helps with various problematic apps.
It works with any recent Magisk version and even with KernelSU, as long as ZygiskNext is installed.
Download and install Shamiko in the Magisk or KernelSU app from here: https://github.com/LSPosed/LSPosed.github.io/releases
If you're using Magisk, you need to make sure that "Enforce DenyList" in Settings is disabled! Otherwise the module will not work correctly.