Universal SafetyNet Fix: Download & Play Integrity Migration Guide (2026)
Universal SafetyNet Fix (USNF) is the landmark Zygisk module created by renowned developer kdrag0n that revolutionized systemless root hiding and attestation spoofing on Android. Designed to restore SafetyNet attestation passes (ctsProfileMatch and basicIntegrity) on rooted phones and custom ROMs, Universal SafetyNet Fix pioneered the technique of dynamic build property interception and software attestation fallback.
While Google has completed its migration from legacy SafetyNet to the modern Play Integrity API, understanding and installing Universal SafetyNet Fix remains vital for legacy Android devices (Android 8 through 12) and apps that still query SafetyNet endpoints. For modern Android 13-16 devices, this guide also covers upgrading to Play Integrity Fix.
Technical Specifications & Features
| Metric | Details |
|---|---|
| Module Name | Universal SafetyNet Fix |
| Original Developer | kdrag0n |
| Root Environment | Magisk v24+ (Zygisk), Riru (Legacy releases) |
| Android OS Compatibility | Android 8.0 through Android 13 |
| Target Attestation | basicIntegrity: true, ctsProfileMatch: true |
| Successor Module | Play Integrity Fix (by chiteroman / osm0sis) |
How Universal SafetyNet Fix Works
When Google introduced hardware-backed attestation in Android 8.0, key generation moved to the device’s secure enclave (TEE or Titan M chip). If the bootloader was unlocked, the hardware key attestation returned an uncertified verdict, causing SafetyNet to fail.
Universal SafetyNet Fix bypassed this through an ingenious mechanism:
- It intercepted calls made by Google Play Services to check hardware attestation support.
- It modified the keystore response to falsely report that the device lacked hardware attestation support.
- This forced Google Play Services to fall back to basic software-based attestation.
- It injected a valid, certified Google Pixel build fingerprint, resulting in a green
ctsProfileMatch: trueverdict.
Step-by-Step Installation Guide
Follow these steps to install the module on supported devices:
Step 1: Configure Magisk Settings
- Open the Magisk Manager app.
- Tap the Settings icon.
- Ensure Zygisk is enabled.
- Enable Enforce DenyList, tap Configure DenyList, and check Google Play Services (
com.google.android.gms).
Step 2: Download & Flash Module
- Download the verified release archive:
- In Magisk Manager, navigate to the Modules tab.
- Tap Install from Storage, select the downloaded zip, and let the script run.
- Tap Reboot.
Step 3: Clear Cache
- Open phone Settings > Apps > Google Play Services > Storage > Clear Cache.
- Open Google Play Store > Storage > Clear Storage.
- Reboot device.
Migrating from SafetyNet to Play Integrity in 2026
Because Google shut down SafetyNet APIs in favor of Play Integrity, users on Android 13, 14, and 15 should install Play Integrity Fix alongside or in place of Universal SafetyNet Fix to ensure banking and payment apps continue operating without error.
Official Links & Developer Support
- Download Package: Safetynet-fix.zip
- Web Portal: Web link
- Developer Support: Donate | Support
Frequently Asked Questions
Why is SafetyNet passing but Google Wallet still failing?
Google Wallet no longer checks legacy SafetyNet; it exclusively queries the Google Play Integrity API. To resolve Google Wallet issues, install Play Integrity Fix and ensure your device passes MEETS_DEVICE_INTEGRITY.
Is Universal SafetyNet Fix still maintained?
The original kdrag0n repository is archived, but the active fork is maintained under the Play Integrity Fix project by chiteroman and osm0sis.