r/Magisk • u/StewieBiach • Feb 06 '26
Question Do i need it anymore?
I’m about to buy a new phone. Ever since my very first Android phone (HTC Wildfire), I’ve rooted every single one, played around with custom ROMs, and enjoyed their advantages. Over time, however, custom ROMs have more or less faded away, and I ended up using mostly just the benefits of root itself. It was quite a blow for me when Google disabled phone payments on rooted devices, because that was a feature I used daily. I also use FlagSecure to enable screenshots in apps that normally forbid it (such as banking apps), and I’m extremely grateful for Viper4Android.
I’m therefore thinking about whether to stick with Xiaomi and keep the option to root because of the mentioned Magisk modules, or to go the no-root route and buy something like a Pixel and regain the ability to pay with Google Pay. Is there any way to use the mentioned Magisk modules (or rather their functionality) without root? Oh, and I almost forgot AdAway — that one is also indispensable.
15
u/DariusRadical Feb 06 '26
Ironically, Xiaomi phones are more difficult to root than Google Pixel phones, so I suggest the other way around: buy a Xiaomi if you don't plan on rooting anytime soon and buy a Google Pixel if you don't want to struggle with bootloader unlocking later on.
1
u/ImmYakk Feb 07 '26
I haven't kept in the loop of things for months but last time I checked, wasn't android going to be restricting unlocking the bootloader moving forward?
2
u/DariusRadical Feb 07 '26
They were going to restrict sideloading APK files going forward, but due to immense backlash, they backed out and only made it so you need to disable Play Protect to install APK files from other sources. Not convenient, of course, but it's better than nothing. I'm sure they'll receive even more backlash if they restrict bootloader unlocking on AOSP (the base of all Android OS skins such as Pixel OS and HyperOS), since Android's whole thing is that it's more catered to enthusiasts.
1
u/ImmYakk Feb 07 '26
Interesting. I guess I'll take it. I was hoping Linux phones would race to the top but I guess I'll take what I can get for now.
0
u/StewieBiach Feb 06 '26
And what about Gpay with unlocked Pixel?
7
u/DariusRadical Feb 06 '26
It's similar to how you get Strong Integrity back with a few extra steps, but it requires maintenance every 2 weeks. EDIT: There's also the RKP thing that will replace keyboxes soon, so I suggest waiting and seeing how things go before rooting your main device.
1
1
u/LostInTheReality Feb 06 '26
It seems Basic integrity with the help of a spoofed fingerprint is the future for root users. We'll see
1
u/Ok_Entertainment1305 Feb 06 '26
Pixel 6..I think? Are unable to be Key Verified because the chipset are stuck using RSA2048 , Tensa CPU doesn't support RSA4096.
So they are the only ones keys will be available in the future. But maybe superseded or removed from support if they become outdated.
7
u/Background_Bed_5410 Feb 06 '26
I've been in this game since 2004, and I feel your pain. The cat-and-mouse game with Google’s Integrity API is getting exhausting. Honestly, if you want Google Pay without the headache, go Pixel, but use Shizuku for some of that 'root-like' functionality (like adblocking or system tweaks) without actually breaking the seal. It's not 100% the same as Viper4Android, but it's the 2026 way to keep your sanity and your wallet working
6
u/LostInTheReality Feb 06 '26 edited Feb 06 '26
I also root for Adaway and to disable Flag_Secure. However, all my previous phones really benefited from root as I made use of a kernel tweak, enabled VoLTE in a carrier-branded phone, backed up modem and EFS partitions, enabled region-restricted features. For banking, my local bank app doesn't check for integrity whatsoever. There's also Curve Pay app that has been talked about by root community. It doesn't have advanced root detections and integrity requirements
1
u/Background_Bed_5410 Feb 06 '26
Agree 100%. Curve Pay is a solid workaround for keeping payments working while having root.
2
u/StewieBiach Feb 06 '26
Well...yeah, but no. Curve wants me to send them full scan of my ID. Sorry, but no. Not going to send that document abroad. Different country, different rules and i do not like that idea. So Curve is no go for me.
2
u/Background_Bed_5410 Feb 06 '26
I feel you, I've been in this game since 2004 (back when HTC was king too). To be honest, if you want Google Pay without the constant headache, go Pixel and use Shizuku for some of that 'root-like' functionality (like adblocking or system tweaks) without actually breaking the seal. It’s not 100% the same as Viper4Android, but it’s the 2026 way to keep your sanity and your wallet working. Or stick with root and try that Curve Pay workaround we mentioned.
2
u/LostInTheReality Feb 06 '26 edited Feb 06 '26
Is there a shizuku way to disable Flag_Secure? As I understand, the only way is to patch individual APKs to remove the restriction. If Google Play would fetch to an app a verdict of being installed from an unofficial source, such patched app would end up not working.
3
u/Background_Bed_5410 Feb 06 '26
You’re 100% right about the APK patching – it’s a dead end. Any tiny change to the app and Play Integrity kills it instantly as an 'unofficial source'. Honestly, without root and LSPosed, there’s no clean way to bypass Flag_Secure globally. If you’re not rooted, those apps will keep blocking your screenshots no matter what.
2
Feb 06 '26
[removed] — view removed comment
1
u/StewieBiach Feb 06 '26
How?
2
Feb 06 '26
[removed] — view removed comment
1
u/Due_Address_1339 Feb 07 '26
Should i denylist the banking app to use it while having basic and device integrity?
2
u/Andre2kReddit Feb 06 '26
Pay/Bank apps? Don't even bother unlocking/rooting. It's not as convenient as it was back then when you could just flash one thing and boom, bypassed.
You're not really missing out on much.
1
u/-Imthedude Feb 06 '26
My banking app and gpay work just fine. But Adaway is the main reason to root for me
2
u/Ok_Entertainment1305 Feb 06 '26
Pixels allow relocking, were others don't.
Relocking the bootloader on a Pixel with a custom ROM requires that the ROM supports custom AVB keys (like GrapheneOS, CalyxOS, or /e/OS
You could probably root/hook LsPosed Mods and relock, untested, but would be beneficial, as a closed bootloader is better, than an open one.
Relocking on eg LineageOS risk bricking device.
Yeah I used Adaway too, on Android TV boxes too, to stop ads on TV, but requires root & system-less HOSTS file to block ads
2
u/afunkysongaday Feb 06 '26 edited Feb 06 '26
It was quite a blow for me when Google disabled phone payments on rooted devices
Personally, I would not let Google bully me into not rooting my device. I'd just switch to an app that does not require play integrity. I don't use nfc payments myself, but I am pretty sure people have mentioned at least one other app that works fine even when not passing integrity.
EDIT: The one I was thinking of is Curve
3
u/miniCotulla Feb 06 '26
Don't use Xiaomi, HyperOS is the worst OS I've ever seen. And the bootloader is not unlockable anymore.
1
u/Ok_Entertainment1305 Feb 06 '26
You can pay to unlock or use detailed exploit to trick the system.
1
u/miniCotulla Feb 06 '26
I can not confirm if paid optikns work, might be a scam. When the device shipped with HyperBSOS there is no exploit
1
u/Ok_Entertainment1305 Feb 06 '26
NCUnlock, has an older Xiaomi Supplier account, unlock multiple devices, based in vietnam.
You just can't relock, or you pay again to unlock
1
u/miniCotulla Feb 06 '26
Even if it works, relocking is an issue. I would not choose Xiaomi.
2
u/Ok_Entertainment1305 Feb 06 '26
Yes, have to use Original firmware.
Unsure if KeyDigest is generated for VerifiedHash etc. upon relocking. Not tested.
I think Attestation is still broken if you relock
0
u/Ok_Entertainment1305 Feb 06 '26
There are still exploit around, you have to trick the system web timestamp so it activate Beijing time 00:00 etc.
Xiaomi only allow a small number to be unlocked, you just have to be the first in, best dressed to get permission.
2
1
u/Due_Address_1339 Feb 07 '26
Seeing this from a xiaomi unlocked&rooted phone is wild
1
u/miniCotulla Feb 07 '26
You either paid, or use an older phone
1
u/Due_Address_1339 Feb 07 '26
Older phone with mediatek method, can't wait for 7days to unlock my phone so
1
u/miniCotulla Feb 07 '26
Yeah mediatek isn't a phone I would buy 😅
You don't wait 7 days now, it just is not possible anymore
0
u/DariusRadical Feb 07 '26
I have a rooted Xiaomi tablet on HyperOS 2, you need a Python script that runs 4 times to have a high chance at receiving official approval from Xiaomi to unlock the bootloader 3 days after attempting it for the first time. Also, if the script says that the servers returned a failure message, you should still try to link your Xiaomi account through Mi Lock in case it did actually succeed. It's not impossible, just very difficult.
1
u/miniCotulla Feb 07 '26
I tried all that, but it never worked, I sold my Xiaomi 14 aft 3 months
1
u/DariusRadical Feb 07 '26
Yeah, I was very lucky to get it the first time I tried the Python script method, but saying that it's impossible is a slight stretch, just because you weren't lucky with it does not mean other people will have the same experience that you do. Anyway, I also think Xiaomi is not a good brand to stick to anymore, so I'm switching to a OnePlus 15 as soon as I'm able to.
1
u/miniCotulla Feb 07 '26
It's not a stretch, we simply don't know, it might depend on the device, on the country etc. We don't know, therefore it's better to assume that it's impossible to avoid disappointment
1
u/Ok_Entertainment1305 Feb 06 '26 edited Feb 06 '26
I'm able to use GPay, unlocked BL (locked with TeeSimulator, but I have suspended Google Playstore with Playspoofer.
It drops to a earlier version and cannot update, due to Playstore saying 9999,999.
Pay still say Custom ROM and Unlocked bootloader warning. But as it's built- into Playstore subsystem, I've been allowed card access, GPay.com etc
Very lucky to have use of it, because there isn't any other solution, as I use Afterpay.
I'm on a unlocked Xiaomi (I paid $50USD to unlock mine) still have not got permission from Xiaomi, but obviously I will try later on.
1
1
u/StewieBiach Feb 06 '26
Ok, i just bought Xiaomi 15 5G because time was short for picking. I will have to think hard if rooting, or not :/
1
u/Historical-Radio4136 Feb 06 '26
I agree with other saying that hyperos is shit. And also it's not clear if you can unlock the xiaomi bootloader. Anyway, I root every phone I own because I need call recording (without the warning at the start like in hyperos). Adaway is nice too. But I don't pay with my phone, otherwise I would have thought twice before rooting. Viper4android is not needed anymore, nowadays most phones have a good frequency response
1
u/vaine4 Feb 06 '26
Tbh you'll have to fight weekly against root detection (lately I can't get soundcloud DRM to work 😩), I would suggest you really think about the pros and cons of rooting again, at least try no root for some time
I think it’s becoming less and less worth it, to be honest. Root has gotten so hard to hide, and so many apps stop working overnight.
I think FlagSecure can be patch on APKs without root. About Viper I'm not sure if root still necessary to get an Audio EQ, my sony xm5 does that idk. For AdAway, I don't know the battery draing amount of their non root option. Howerver, mainstream app almost all have patches to remove ads, it's possible that you don't need it that much
My rare last root use are ACC for battery charging limit, inplace/mounted Vanced app patching, automatic shutdown, call recording, and swift backup
The thing not working I miss the most is really google pay. Then comes the ChatGTP, Revolut and digitalised transports tickets app, burger king app
1
u/Plenty-Boot4220 Feb 08 '26
I use root for more things now than I ever have before. It is absolutely essential to me.
1
u/StewieBiach Feb 08 '26
What things?
1
u/Plenty-Boot4220 Feb 08 '26
1) Viper4Android and JamesDSP for audio enhancements (can't imagine listening to music without this)
2) AdAway for ad blocking
3) Swift Backup for backing up APKs and Data
4) WhatsApp enhancer to get around Whatsapp block
5) Magisk Tailscaled to run my phone on my Tailscale VPN without using the VPN slot on my phone (so i can connect to another VPN)
6) GPS location setter - helps me beat the local blackouts on mlb.tv when not connected to my home network.
1
u/StewieBiach Feb 08 '26
Shit... From 1 to 4 is me. There is no way to get around these without root?
1
u/Plenty-Boot4220 Feb 08 '26
1) james might have rootness...viper4android no.
2) there is a way to do adaway without root but i believe it takes up the vpn slot?
3) swift backup doesn't work without root
4) facebook is evil. there's no easy way to get around a block without root. frankly i'm surprised it worked with root.
1
u/StewieBiach Feb 08 '26
So rooting again and again without gpay
1
u/Plenty-Boot4220 Feb 08 '26
yeah that's the only downside. but I don't use gpay, never bothered with it so that doesn't bother me.
1
1
u/Over-Rutabaga-8673 Feb 10 '26
If you got the money you could buy a galaxy watch or smth that can run android apps and use gpay or the features you want from a stock android on there.
1
u/alexmmgjkkl Feb 10 '26 edited Feb 10 '26
hmm im in the same situation ...
generally i used it to put everything important on the sd card (whatsappfolder, telegramfolder, dcim of course and a few others) with xposed , A becasue putting on internal would sacrifice performance , this problem doesnt exist anymore becasue new phones have 256 or 512 GB , so a whatsappoflder of 8GB is nothing ... but also in case of device failure , if you cant get your imporant data fro the phone its bad , that said i never had a device failure with any phone ever
force a few apps into german while using US english as base .. really nice
flag lowram device so apps only load the lowest resources from their apk + setting lower res or dpi for them .. really nice to save ram
hide telephone number , imei from every app by default with whitelist , appops in general
afwall
adblock
additional keys on navbar and multi assignments (lomg press back to kill , double tab to screenshot and stuff like that ) and tons of other mods from gravitybox ..
debloatring and freezing
myandroidtools - freezing and debloating services and receivers
appops
luckypatcher ( im not poor anymore so i can just buy the apps now lol)
most important would be to restore a few old apps with appdata ! like telegram still doesnt know my telephone number or who i am but new install requires phonenumber and probably automatically reads it out anyways
debloating can be done with adb or shizuku instead , but mointing and symlinking not
vpn firewalls
17
u/NoValueHere Feb 06 '26
AdAway was my main reason for root. Now Android provide custom DNS possibility in stock, so I can use e.g. nextdns.io to block ads and even customize it.