Related
ROM:MIUI 10.4 by xiaomi.eu 9.5.9|Beta
2019/05/12 note:
need root permission
google play service must be less than 17, 15.X and 16.X google pay working!
2019/05/13 update note:
After recovery to old version and execute step 1~7, It can add card and payment.
And then manual update google play service to latest version(17.1.22), It can payment, but can't add card.
2019/05/14 update note:
After update google play service to latest version, first payment is successful, but second payment is fail.
so......
google play service <17(15 or 16), google pay is working.
google play service =17,google pay isn't working.
and then, about deny google play services connect to internet, this solution is best!
2019/05/15 update node:
Today google play store and google play service force update, 05/14 solution can't work. please try blue solution. My google pay is working.
step:
please disable any internet connect(WiFi and 3G or 4G).
1. go to SYSTEM SETTINGS/Additional settings/Privacy/Special app access/Device admin apps,disable Find My Device.
note:
before disable Find My Device, you can't remove google play service update, so the step is essential.
2. remove google play service update(It will recovery to old version,My version is 15.0.90).
note:
because google play store can't search google play service, so you need a tools guide to google play store. (I'm using root tool box)
or click it guide to google play store.
3. clear cache then data for both Google Play Services and Google Pay.
4. reinstall Google Pay and delete:/data/data/com.google.android.gms folder.
5. hide Google Pay and com.google.android.gms.* in Magisk.
6. reboot.
7. Deny google play store connect to internet(I am using AFWall+).
8. Enable WiFi or 3G or 4G, and then Add card to Google Pay.
9. Deny google play service connect to internet.
10. allow google play store connect to internet.
11. Finish.
please don't update 「google」 app, it will auto update google play service.
step:
1. go to SYSTEM SETTINGS/Additional settings/Privacy/Special app access/Device admin apps,disable Find My Device.
note:
before disable Find My Device, you can't remove google play service update, so the step is essential.
2. remove google play service update(It will recovery to old version,My version is 15.0.90).
note:
because google play store can't search google play service, so you need a tools guide to google play store. (I'm using root tool box)
or click it guide to google play store.
3. clear cache then data for both Google Play Services and Google Pay.
4. reinstall Google Pay and delete:/data/data/com.google.android.gms folder.
5. hide Google Pay and com.google.android.gms.* in Magisk.
6. reboot.
7. Google Pay working!(version:2.86.243324902 or 2.88.246232551)
8.Deny google play services connect to internet(I am using Disable Service, please read 05/14 update note.) after add card. (essential, please read 05/14 update note and question 1.)
Question:
Q1: Deny google play services connect to internet,why?
A1:Google play service sometimes auto update(example:update "google" app).
google play service:https://imgur.com/bLwEbw3
google pay:https://imgur.com/pANet2g
magisk hide:https://imgur.com/9xtTxQW
working:https://imgur.com/yoVr7KB
Thank you! Useful :good:
Worked fine for me too. Im on Revolution OS.
Are there any disadvantages when Play Services is blocked?
DieAbrissbirne said:
Are there any disadvantages when Play Services is blocked?
Click to expand...
Click to collapse
if your app needs google play service, your app maybe crash or can't normal execution.
zz358840 said:
if your app needs google play service, your app maybe crash or can't normal execution.
Click to expand...
Click to collapse
So, not only google pay but also apps need google play service might have abnormally behavior, right.
p5auser said:
So, not only google pay but also apps need google play service might have abnormally behavior, right.
Click to expand...
Click to collapse
right, you can try 5/13 update solution, it work and have not abnormally behavior.?
Hi,
how can i remove google play service update?
i can only delete Cache and Data?
So, you're basically breaking some of the phone's most essential functions. I'm not ungrateful or anything, on the contrary, but if you really, really, absolutely need GPay to work - why don't you just run stock with a locked bootloader?
unfortunately i have a china version of Mi 9. so i am not able to use gpay with stock rom
Bretl2009 said:
unfortunately i have a china version of Mi 9. so i am not able to use gpay with stock rom
Click to expand...
Click to collapse
Huh. It did work for me though. I have 8GB 128GB version from china
Sent from my Xiaomi MI 9 using XDA Labs
Bretl2009 said:
Hi,
how can i remove google play service update?
i can only delete Cache and Data?
Click to expand...
Click to collapse
hi,
5/13 content update.
you can try step 2 note solution.
MrDeacon said:
So, you're basically breaking some of the phone's most essential functions. I'm not ungrateful or anything, on the contrary, but if you really, really, absolutely need GPay to work - why don't you just run stock with a locked bootloader?
Click to expand...
Click to collapse
global...... Hmm......I don't like,reason so easy,and than I want root my phone, so eu rom is best!
MrDeacon said:
So, you're basically breaking some of the phone's most essential functions. I'm not ungrateful or anything, on the contrary, but if you really, really, absolutely need GPay to work - why don't you just run stock with a locked bootloader?
Click to expand...
Click to collapse
global rom...... hmm......, I don't like, reason so easy, and than I want root my phone, so eu rom is best!
HUGE THANK YOU! After a month of painful troubleshooting finally i got gpay working thanks to you. At first I Had some trouble with play services due to auto update being too fast (yeah, network was faster than my fingers and couldn't block it with afwall in time) but the second time i tried it actually worked just fine. I updated Play Services anyway since i don't need more than the card i already added, but i need the Play Store. Thank you again!
Hi, i have a new instruction from an other forum and it works for me, because i dont need Magisk.
EU 9.5.9, services 17.4.53 configured PAY without magisk \ root through TWRP
SafetyNet did a verification with the application "SafetyNet Helper Sample"
1) through TWRP in /data/data/com.google.android.gms/app_dg_cache we remember the names of the folders
2) with the SafetyNet Helper Sample application, we check, everything is green, we return again to TWRP
3) A new folder will appear in /data/data/com.google.android.gms/app_dg_cache, leave it, we delete the old ones from p1
4) set the permissions 0551 to the /data/data/com.google.android.gms/app_dg_cache folder
and try use gPay
Bretl2009 said:
Hi, i have a new instruction from an other forum and it works for me, because i dont need Magisk.
EU 9.5.9, services 17.4.53 configured PAY without magisk \ root through TWRP
SafetyNet did a verification with the application "SafetyNet Helper Sample"
1) through TWRP in /data/data/com.google.android.gms/app_dg_cache we remember the names of the folders
2) with the SafetyNet Helper Sample application, we check, everything is green, we return again to TWRP
3) A new folder will appear in /data/data/com.google.android.gms/app_dg_cache, leave it, we delete the old ones from p1
4) set the permissions 0551 to the /data/data/com.google.android.gms/app_dg_cache folder
and try use gPay
Click to expand...
Click to collapse
This work but missed some required stages, there is original step by step instruction:
Test with Chine MI 9 with xiaomi.eu 9.5.30 rootless with unlocked bootloader (TWRP 3.3.1-30 Unofficial by mauronofrio)
MrDeacon said:
So, you're basically breaking some of the phone's most essential functions. I'm not ungrateful or anything, on the contrary, but if you really, really, absolutely need GPay to work - why don't you just run stock with a locked bootloader?
Click to expand...
Click to collapse
doesn't work either
drefixs said:
This work but missed some required stages, there is original step by step instruction:
Test with Chine MI 9 with xiaomi.eu 9.5.30 rootless with unlocked bootloader (TWRP 3.3.1-30 Unofficial by mauronofrio)
Click to expand...
Click to collapse
Thank you, it works with my Xiaomi Mi 9 Global 10.2.9.0 Unlock and root, very usefull post.
Expert Summary
Use Displax's USNF Mod to pass the new Play Integrity check, fixing Google Wallet etc.
Symptoms
This might be relevant for you if you have rooted your phone and can no longer pay or add cards using Google Wallet or Google Pay. You may see a message in the app telling you that your "Phone doesn't meet security requirements". You may also notice that you can't find Netflix in the Google Play Store.
Background
In the arms race of detecting/hiding rooted devices Google has stepped it up a notch and now uses hardware backed attestation in its Play Integrity API. The long and short of this is that we can no longer rely solely on the Magisk DenyList and the Universal SafetyNet Fix Magisk module to hide root from apps.
There is currently a workaround - we can use a modded version of the USNF Magisk Module to "spoof" the device fingerprint of a device that doesn't support hardware backed attestation (i.e. a device running Android 10 or lower), thereby falling back on the basicIntegrity attestation of the SafetyNet API that we can circumvent using the tools mentioned above.
This will get Google Wallet working, cause Netflix to appear back in the Play Store, etc.
---
Instructions
These instructions are suitable for a freshly rooted device. If you have already been hiding root from apps then you can probably skip to the "Spoof device fingerprint" step.
Enforce DenyList
Tap Magisk -> Settings icon
Toggle Zygisk on
Toggle Enforce DenyList on
Tap Configure DenyList
Check Google Play Store and whatever app you're trying to hide root from, e.g. Google Wallet
Install Displax's USNF Mod
Download the latest USNF Mod Magisk module
Tap Magisk -> Modules -> Install from storage and install the zip file
Reboot once they're both installed
(Optional) Check that USNF passes
Download and install the latest YASNAC (app)
Open the app and tap Run SafetyNet Attestation
Check that Basic integrity passes. If it doesn't pass then the rest of this guide won't work - ask for help here.
Clear app caches and reboot
Tap Settings -> Apps -> Manage apps
Tap Google Play Store -> Clear data -> Clear all data
Note: if you have a Wear OS smartwatch then clearing the Google Play Store cache will mean you have to fully reset it in order to reconnect it to your phone. Unfortunately this is unavoidable!
Repeat for Google Wallet
Tap Google Play services -> Clear data -> Manage space -> CLEAR ALL DATA
Reboot your phone
And that's it - you should now be able to use Google Wallet as normal, find Netflix in the Play Store, and so on. At least until Google workaround our workaround
If you're trying to hide root from a new App all you should have to do is add it to the DenyList (first step) and clear its cache and reboot (last step)
Thank you
If you try a different fingerprint with your device then let us know whether it works
This workaround actually works! thank you!
However, in my case, I side effect is that the phone no longer connects to my Galaxy Watch 4.
My bet is that the fingerprint spoofing is preventing the phone watch supporting apps to connect properly.
I attempted to add every WearOS and watch apps on Denylist and rebooted, but still doesn't work.
Any ideas?
rodrigofd said:
I attempted to add every wear* and watch* apps on Denylist, and rebooted, but still doesn't work.
Any ideas?
Click to expand...
Click to collapse
I've read that you have to re-set up your watch from scratch if you clear Play Store cache. I think it was this guy. Sorry, I don't have any experience with these watches.
[Discussion] Google Pay Magisk Discussion Thread
This thread is inspired by the PoGo Magisk discussion thread. It's meant to keep the clutter of "Google Pay doesn't work" posts out of the main Magisk threads. Please use this to discuss issues with Google Pay and possible solutions. There's a...
forum.xda-developers.com
aricooperdavis said:
I've read that you have to re-set up your watch from scratch if you clear Play Store cache. I think it was this guy. Sorry, I don't have any experience with these watches.
[Discussion] Google Pay Magisk Discussion Thread
This thread is inspired by the PoGo Magisk discussion thread. It's meant to keep the clutter of "Google Pay doesn't work" posts out of the main Magisk threads. Please use this to discuss issues with Google Pay and possible solutions. There's a...
forum.xda-developers.com
Click to expand...
Click to collapse
Exactly I didn't know that it was caused by cleaning Play Store data, but I simply thought of giving the full reset a try, and indeed it worked.
Thanks!
rodrigofd said:
Exactly I didn't know that it was caused by cleaning Play Store data, but I simply thought of giving the full reset a try, and indeed it worked.
Thanks!
Click to expand...
Click to collapse
Okay, I'll add a warning to the post - thanks for letting me know, glad you got it sorted!
@aricooperdavis I think your thread should get way more exposure than simply being a subthread under
Xiaomi Redmi Note 11S 4G / POCO M4 Pro 4G (fleur)
Perhaps you can request moving it to a general section? (like the Magisk forum with a bunch of Google Pay-related threads).
You could also put more keywords in the title, or as keywords of the thread itself....
Just some ideas
P.S. I did all this on a Samsung Galaxy S22 Ultra (Android 12) + Galaxy Watch 4
Working on Oneplus 9. Thanks!
rodrigofd said:
@aricooperdavis I think your thread should get way more exposure than simply being a subthread under
Xiaomi Redmi Note 11S 4G / POCO M4 Pro 4G (fleur)
Perhaps you can request moving it to a general section? (like the Magisk forum with a bunch of Google Pay-related threads).
You could also put more keywords in the title, or as keywords of the thread itself....
Just some ideas
P.S. I did all this on a Samsung Galaxy S22 Ultra (Android 12) + Galaxy Watch 4
Click to expand...
Click to collapse
Hey I have a galaxy note 10 plus and I was wondering what steps you did exactly. I can pass safety check. but when I use root beer it can detect root. I am hoping someone can help.
Try to hide rootbeer and reboot
My device fingerprint isn't listed in the official list - what should I do? Redmi Note 11 Pro 5G
Speedy15928 said:
My device fingerprint isn't listed in the official list - what should I do? Redmi Note 11 Pro 5G
Click to expand...
Click to collapse
Try selecting the model mentioned in the OP:
POCO F2 Pro Europe (10)
That's what I did (on my Galaxy S22 Ultra) and everything went well
Speedy15928 said:
My device fingerprint isn't listed in the official list - what should I do? Redmi Note 11 Pro 5G
Click to expand...
Click to collapse
What @rodrigofd said - you want to spoof the fingerprint to a similar device that only supports Android <10. Try the one in the post and see if it works for you.
No dice I keep getting this screen:
I did see some error messages though when setting the fingerprint though - not sure if that would affect the process or anything.
Speedy15928 said:
I did see some error messages though when setting the fingerprint though - not sure if that would affect the process or anything.
Click to expand...
Click to collapse
Yeah you shouldn't see any error messages - can you repeat the process and note the errors so we can help you troubleshoot?
aricooperdavis said:
Yeah you shouldn't see any error messages - can you repeat the process and note the errors so we can help you troubleshoot?
Click to expand...
Click to collapse
I did that just now.
After which it says "working please wait" then asks to reboot. Did I copy the wrong part of the fingerprint? This doesn't happen when switching back to my original one.
Speedy15928 said:
After which it says "working please wait" then asks to reboot. Did I copy the wrong part of the fingerprint? This doesn't happen when switching back to my original one.
Click to expand...
Click to collapse
Don't copy anything, just use the built in Poco F2 Pro (Europe) key by following the instructions in the OP.
aricooperdavis said:
Don't copy anything, just use the built in Poco F2 Pro (Europe) key by following the instructions in the OP.
Click to expand...
Click to collapse
Ah right I was looking in the Xiaomi section and couldn't find it because I thought poco was part of Xiaomi now since I saw a poco phone in there - probably a partnership.
That worked thank you very much guys! Will the fingerprint have any unexpected side effects though such as issues with updating?
Hi to all;
So i decided to do a clean update from MIUI 12 to MIUI 13 (which I think was a big mistake) ; using Orange Fox to format the data and install the official EU MIUI 13 OS and Magisk 25.2 afterwards. The phone boots up fine; I set up my account and Magisk is also setup (Magisk Hide, enforce deny list and configured the deny list to deny google play services, etc) I run a safety net attestation and all is fine too, so I proceeded to check Playstore and in the about it also says 'certified'. So I went to search for Netflix; but it does not show.
I searched for countless hours in search for a solution but I could not find anything that would work
I even tried re installing MIUI13 without magisk but Netflix does not show up in Playstore; plus that in the about section of Playstore device is uncertified. (Could this be that this happens because the bootloader is unlocked?
So this time I re-installed everything from scratch, Magisk included, and same as before the only app that does not show in Playstore is Netflix; the only way I was able to get Netflix installed & running was installing it as an apk.
In the playback specifications on Netflix Widevine is at L1 which should be good I guess?
Sorry for the long post but I am at a loss and hoping someone might have experienced something similar or maybe found a solution to my issue please?
I have banking apps that are working fine and have no issues what so ever so I know that the denylist on Magisk is working properly otherwise these apps would not let me authenticate.
I am including some screenshots to give a better explanation of my issue.
Thank you !
To anyone having similar issues to the one I was having above; the following post fixed my issues; here .
Hello, I would like to use Google Pay on my phone with Magisk Root, but I get the error message that the phone is rooted. After a short research I came across SafetyNet after a short test it turned out that the test failed. How can I fix this without losing root?
You can use this free app for checking the SafetyNet Status:
YASNAC - SafetyNet Checker - Apps on Google Play
Yet Another SafetyNet Attestation Checker
play.google.com
For passing the check you can read this:
How to pass SafetyNet on Android after rooting or installing a custom ROM
It is possible to pass SafetyNet, even after extensive modding like rooting or installing a custom ROM. Check out how to do that here!
www.xda-developers.com
Try the Universal SafetyNet Fix Magisk module.
Latest release is v2.3.1
- open magisk
- Install module "safetynet-fix-v2.3.1.zip"
- activate Zygisk
- activate denylist
- check Google Play store and Google Play Services
- open app info for Play Store and Google Services and delete data
- restart
- check with the app from first link
--->This is a working method as of May 2023 to have root on any rom version for redmi k20pro.
--->This will help you root and keep root hidden along with using lsposed modules.
--->These steps work on any device and any rom
You can find extra guides for the steps you dont understand by searching on xda forums. Some of these guides are linked to at the bottom of this post
Your bootloader needs to be unlocked to follow this guide. See link at bottom for guides to do the same.
****************************
I am not responsible for any data loss or damage. Follow at your own Risk
****************************
1. Install twrp or orangefox recovery on your phone.
2. Flash Magisk 25.2 (Version 26 has many issues. This version is better to use)
3. Reboot, install magisk apk(rename magisk.zip file to magisk.apk and install)
4. In magisk modules, install shamiko
5. In magisk modules, install safetynet 2.4.0
6. Add any app you want to hide root from in denylist of magisk. Additionally add Google play Services, Google play store, google services framework and google play protect to denylist(enable show system apps option in menu available on top right of denylist)
(IMP: Do not enable enforce denylist, Shamiko does this function)
7. If you have already logged into google play store and it shows device not certified in about section of play store -remove google account from phone and clear data of play store, play services, google services framework. Reboot amd try again. It will show certified status after about 10 minutes of logging in
8. Some custom roms may have device fingerprints which will get detected as custom rom. If that happens, use hide user debug and lineage props magisk module. Note: This version from github can only be flashed in Androidacy Fox Module Manager due to issue in zip packaging. Download this file which is just a properly repackaged version that can be flashed in any magisk manager.
Next install Reset Sensitive props magisk module. A combination of simply installing these modules will fix custom rom detection on any custom rom.(Example on opening whatsapp or GPay for first time)
Additional step(not necessary): Your rom may have additional build.prop entries that indicate a custom rom. Look for such build properties by opening build.prop in root browser on your device, then change any that have a custom rom name in them using magiskhideprops(Refer instructions to use magiskhideprops in the link)
9. Now, hide the magisk app in magisk app settings(set name to something like setting or app)
10. Freeze magisk manager app using link2sd/swift backup/ airfrozen or any other similar app. You can enable app when you need to install or disable modules or grant superuser access to new apps. You can also use Androidacy Fox MMM manager to find, install and remove magisk modules
_____________________________________________________________________________
Done, you can stop at this stage if you dont need lsposed.
Be warned that youw ill need to re-add any app you uninstall and reinstall in denylist.
If you want to use lsposed, continue with below steps after skipping step 10.
_____________________________________________________________________________
11. Install lsposed module 1.8.6 zygisk version
12. Install hide my appslist. Follow instructions in this link to learn how to correctly configure and hide magisk manager, lsposed and any other root apps you have.
You will need dataisolation enable magisk module if using android 10 and below for hidemyapplist to fully work.
13. Install Ruru and 'Play Integirty API Checker'.
Run Ruru and watch it pass all tests.(almost no banking app uses the level of detection used by ruru) Use play integrity api checker to check safetynet status - should pass basic integrity and cts profile.
Momo shows some messages like abnormal environement and TEE but that is ok.
Remember that you should enable denylist and Hide my applist for Ruru/Momo similar to how you enable for banking apps to hide.
Your root access is perfectly hidden now.
_____________________________________________________________________________
If you want to hide Developer Options_____________________________________________________________________________
You have a few options for this.
1. I personally turn usb debugging off in settings and use WADB app to enable wireless adb. I am using this on android 11 as other options dont fully hide or trigger xposed hook detection(which does not cause issues with the banking apps I have tested so far)This is not detected by any apps.
2. If on android 10 or lower, you can use hide user debug magisk module by huskydg which you can get from this telegram channel. I dont know if it can be linked here .
This effectively hides user debug without trigerring any root/xposed detection. Ruru may show 1 entry for usb debugging enabled but that is fine. If it doesnt work, it will show 2-3 detected entries for debugging mode.
I have uploaded the file here but dont know if it will last
3. If above options dont work,use devoptshide app, enable it in lsposed for apps you want to hide user debug from.This method will trigger xposed hook detection in Ruru but none of the banking apps i tested so far have an issue with that. Ruru may show 1 entry for usb debugging enabled but that is fine. If it doesnt work, it will show 2-3 detected entries for debugging mode.
4. I have not personally tested this but this module is an updated version of hide userdebug module by huskydg and it might help hide usb debugging on android 11 and up.You will have to try it yourself for now.I expect it to work.
GitHub - Magisk-Modules-Alt-Repo/ezme-nodebug: Change some props and "remove" LineageOS ones.
Change some props and "remove" LineageOS ones. Contribute to Magisk-Modules-Alt-Repo/ezme-nodebug development by creating an account on GitHub.
github.com
_____________________________________________________________________________
If an app detects root accidentally and refuses to run on your device again even if root is not detected again/ Spoof device ID for apps_____________________________________________________________________________
1. Now you need to use android faker lsposed module to randomize imei, max adress, android device id,hardware id.
Enable android faker in lsposed only for the app you want to change id for. Dont enable it for android system or android framework(Goal is to change id for a single app).Before doing these steps you need to clear data of play store, play services and google services framework, remove your google account from device settings and reboot. This will reset your gsf id.
This will give xposed hook detection in butbank apps dont seem to look for it.
2. If the above method does not work, use Xprivacylua. Enable for the app you want to change id, only use setting for device identifiers,use tracking, telephony data, analytics, get applications. Xprivacylua is not properly hidden even by Hide My Applist but apps dont look for it.So use this if above options does not work.
_____________________________________________________________________________
If you need to disable Widevine L1 DRM protection to use scrcpy screen mirroring etc
_____________________________________________________________________________
Install the liboemcryptodisabler module in magisk.Do note that widevine will drop to L3 but uninstallation brings it back to L1.
NOTE: Drm content cannot be mirrored on scrcpy if you are using android 12 or 13. Use roms with android version upto 11 if you need to watch drm protected content through scrcpy.(at your own risk. I do not advise illegal activity.)
Spoiler: liboemcryptodisabler
Magisk Modules Repository By Androidacy - Androidacy
This is the Androidacy Magisk Modules Repository, where you can search, browse, and download your favorite Magisk modules right now.
www.androidacy.com
Enjoy your properly hidden rooted device with all functionalities.
___________________________________________________________________________________________________________________________________
___________________________________________________________________________________________________________________________________
I have added a few useful posts by other members if you dont know how to do any of the above mentioned steps. Any others steps can be learned with guides from XDA -Use search
1. Simple guide to flashing on K20 Pro
His advice on not using orangefox for custom roms other than stock miui/ xiaomi.eu roms may be right, I have not tried it. Orangefox personally works best for me.
2. Guide to flashing custom roms, changing between miui and custom roms
3. Bootloader unlock, twrp, root instructions and rom links
4. Common issues with Redmi K20 Pro | fingerprint unlock | ghost touch | Dim display | sensor issues | bluetooth and calling
Confirmed working in May 2023.
Guide will be eventually updated with Magisk Delta which is better for root hiding
I am amazed how smoothly my update went from old magisk version that started having issues. I followed first part of this tutorial (without lsposed), I downloaded newest versions of everything (magisk 26.1 - had to directly install magisk in magisk too, Shamiko-v0.7.1-166-release, rest same as in tutorial) and it just worked. No more problems with old magisk. Deny list is working flawlessly!, safetynet is passing, Google Play Store says that device is certified. Thank you so much for this tutorial!
czacha994 said:
I am amazed how smoothly my update went from old magisk version that started having issues. I followed first part of this tutorial (without lsposed), I downloaded newest versions of everything (magisk 26.1 - had to directly install magisk in magisk too, Shamiko-v0.7.1-166-release, rest same as in tutorial) and it just worked. No more problems with old magisk. Deny list is working flawlessly!, safetynet is passing, Google Play Store says that device is certified. Thank you so much for this tutorial!
Click to expand...
Click to collapse
As of right now, magisk 25.2 works much better than magisk 26.1. You can continue to use it if you dont face any issues.
I believe I followed all the steps correctly including downgrading to magisk 25.2, the only step that I might not have followed correctly would be using hidemyapplist, but I'm getting CTS profile mismatch in microG safetynet attestation test. I have an LE2115 with lineageos 20 (specifically lineage-20.0-20230514-nightly-lemonade-signed.zip). I do get the "orange state" warning when I turn on my phone, I could make that go away by flashing an older version something (I forgot what but I've done it before) in TWRP but I wanted to avoid that since the only APPARENT effect is the orange state warning and I don't know if it will break later in LOS as they keep updating. I'd appreciate any help you could give me to fix this.
EDIT: just used magiskhidepropsconf and edit fingerprint and set it to htc exodus and now I pass all tests.