Build Phone Attestation For Free

The SafetyNet Attestation API is an anti-abuse API that allows app developers to assess the Android device their app is running on.

Definitions: The process of providing a digital signature for a set of measurements securely stored in hardware, and then having the requester validate the signature and the set of measurements.

Key Attestation gives you more confidence that the keys you use in your app are stored in a device's hardware-backed keystore. The following sections describe how to verify the properties of hardware-backed keys and how to interpret the schema of the attestation certificate's extension data.

Attestation is a kind of testimony or confirmation. It is customary to sign a deed, make a will or sign other written documents in the presence of a witness who also signs the document to attest to its contents and the authenticity of the party's signature.

Attestation helps us to find those devices that have been tampered with, or may have a bad or outdated version of software running on them, or even be outright s, to be identified. These are the types of things that you can determine.

This attestation provides assurance that the properties of the device (for example, the serial number) are legitimate (as attested to by the device's Secure Enclave and verified by Apple's servers) and not spoofed.

Device attestation tools in the market With the SafetyNet API, Android apps can send users notifications if their device fails, suggesting actions such as locking the device's bootloader or restoring the device to a clean factory ROM.