Use Phone Attestation For Free

We plan to gradually turn down the SafetyNet Attestation API starting in January 2024. We have extended the timeline to give you enough time to migrate to the new Play Integrity API and avoid disruptions to your business.

Get started using App Check with SafetyNet on Android Set up your Firebase project. Add the App Check library to your app. Initialize App Check. Next steps. Monitor metrics and enable enforcement. Enable App Check enforcement. Use App Check in debug environments.

The SafetyNet Attestation API provides a cryptographically-signed attestation, assessing the device's integrity. In order to create the attestation, the API examines the device's software and hardware environment, looking for integrity issues, and comparing it with the reference data for approved Android devices.

Trusted Server: Review nonce generation logic, and make sure it meets Play Integrity API requirements. Make sure the server code can distinguish between SafetyNet Attestation API responses and Play Integrity API responses. ... Add logic to validate and parse Play Integrity API responses.

App attestation uses a series of integrity tests and measurements to verify an app's integrity. Once integrity is proved, a cryptographic is provided and shared with the backend servers for verification.

Key attestation aims to provide a way to strongly determine if an asymmetric key pair is hardware-backed, what the properties of the key are, and what constraints are applied to its usage. ID attestation allows the device to provide proof of its hardware identifiers, such as serial number or IMEI.

The SafetyNet Attestation API provides a cryptographically-signed attestation, assessing the device's integrity. In order to create the attestation, the API examines the device's software and hardware environment, looking for integrity issues, and comparing it with the reference data for approved Android devices.