Load Phone Attestation For Free

Google plans to phase out the SafetyNet Attestation API from June 2023. You can see the timeline here and you need to migrate to the new Play Integrity API for avoid disruption to your business.

Setting SafetyNet attestation Log into the Admin Portal. Go to Policies & Configs > Policies. Select a security policy and click Edit. Alternatively, create a new security policy by clicking Add New > Security. Scroll down to the Android section. Select ?Require Google SafetyNet Attestation?.

Key Attestation gives you more confidence that the keys you use in your app are stored in a device's hardware-backed keystore. The following sections describe how to verify the properties of hardware-backed keys and how to interpret the attestation certificate's extension data.

Trusted Server: Review nonce generation logic, and make sure it meets Play Integrity API requirements. Make sure the server code can distinguish between SafetyNet Attestation API responses and Play Integrity API responses. ... Add logic to validate and parse Play Integrity API responses.

The SafetyNet Attestation API provides a cryptographically-signed attestation, assessing the device's integrity. In order to create the attestation, the API examines the device's software and hardware environment, looking for integrity issues, and comparing it with the reference data for approved Android devices.

Get started using App Check with SafetyNet on Android Set up your Firebase project. Add the App Check library to your app. Initialize App Check. Next steps. Monitor metrics and enable enforcement. Enable App Check enforcement. Use App Check in debug environments.

App attestation uses a series of integrity tests and measurements to verify an app's integrity. Once integrity is proved, a cryptographic is provided and shared with the backend servers for verification.