SafetyNet fix guide

In order to pass SafetyNet, fix "Device not certified" in Play Store settings, make apps such as Netflix appear in Play Store, make your bank apps work do the following:

Part 1 (Magisk app)

• Flash Magisk
• Hide Magisk Manager in Magisk settings
• Enable Magisk Hide in Magisk settings
• Add Google Play Store and Google Play Services in Magisk Hide
• On Google Play Services, make sure you check ONLY com.android.gms.unstable and keep all the others unchecked. If you're on Magisk v23, com.android.gms will be enabled by itself after every boot so make sure you disable it manually or there's a chance you're going to have battery drain as explained in the #battery_drain note
• Clear Google Play Store data and Google Play Services cache
• Reboot and check if SafetyNet passes. If not, proceed to the next step.
• Flash Riru (from Magisk repo) and the latest SafetyNet fix Magisk module
• Reboot
• SafetyNet should now pass. You can skip Part 2 now and read Notes.
• Only if you're sure you followed all above steps and SafetyNet still doesn't pass, proceed to Part 2, otherwise it's not required.

Part 2 (LSPosed + XPrivacyLua)

• If you installed safetynet-fix-v1.2.0-MOD from Part 1, you can uninstall it now and reboot since it's not needed.
• Install latest Riru and Riru - LSPosed from Magisk Modules tab (Magisk repo)
• Reboot
• Open LSPosed app, search for XPrivacyLua in Repository menu, download apk and install
• Tap on XPrivacyLua in LSPosed Modules menu, enable it with the toggle on the top
• Check the 2 recommended apps (System Framework & Settings Storage)
• Tap on 3-dot menu, uncheck "System apps" from Hide menu and check "Google Play Services" too
• Reboot
• Open XPrivacyLua app and check Google Play Services (all checkboxes)
• Clear Google Play Store data and Google Play Services cache
• Reboot. SafetyNet should now pass.

Notes

• Make sure you check all checkboxes when adding an app (except for Google Play Services) in Magisk Hide.
• If an app (such as Netflix, bank app) has already detected root, make sure that you clear its data/cache after you add it in Magisk Hide.
• Keep in mind that even if you pass SafetyNet, some bank apps also detect SELinux status which needs to be Enforcing.
• In some cases, you might also need to change your device fingerprint to a supported device such as dipper (Xiaomi Mi 8) to pass SafetyNet by using MagiskHide Props Config module.