How to Block Magisk Hide, Protect Android Apps From Root Hiding

Last updated May 24, 2021 by Alan Bavosa

Learn the 3 easy steps to Block Magisk Hide. Protect Android apps against Root Hiding/ Root Cloaking Tools including Magisk Manager and Magisk Hide. No Code, Zero Dev, No SDK.

What is Magisk?

Magisk is a “systemless” Rooting tool that is used to elevate privileges to gain system-level access (root access) to the Android OS and underlying file system. Magisk does not make changes to the Android bootloader or require flashing custom ROM. Instead, it stores modifications in the boot partition instead of modifying the real system files. Since the original system files remain unchanged, modifications can go undetected by Google SafetyNet and most root detection methods, which makes Magisk Manager an incredibly powerful and popular tool for compromising Android apps.

What is Magisk Manager?

Magisk Manager is a rooting framework (like its predecessors SuperuserSU and Xposed) that provides multiple functions related to Android Rooting and includes function-specific modules that exploit root access privileges in different ways. Magisk Manager is used to manage the apps or mods that fraudsters wish to grant root privileges (after using a program like Magisk to gain root access).

What is Magisk Hide?

Magisk Manager also has a feature called Magisk Hide, which is specifically designed to conceal both the rooted status of the device, as well as the applications that are using (or abusing) root access.

hackers.use.magisk.hide.conceal.rooting

Why Should Developers Block Magisk Hide to Protect Android Apps?

Appdome is a no-code mobile app security platform designed to add security features, like Block Magisk Hide to any Android app without coding. This KB shows mobile developers, DevSec and security professionals how to use Appdome’s simple ‘click to build’ user interface to quickly and easily prevent advanced tools from hacking Android apps.

Appdome Block Magisk Hide protects apps against fraudsters using the Magisk Hide root bypass/ root cloaking feature. This prevents fraudsters from concealing the fact that they have rooted the Android device. It also prevents Magisk from concealing its own existence as well as concealing the presence of other applications which have been granted ‘root access’ to the Android OS or file system.

Appdome customers often use Block Magisk Manager in conjunction with Block Magisk Hide in order to block the use of Magisk to root the Android device and block Magisk Manager from granting root access to other applications who request it.

These advanced root prevention features are designed to complement and extend Appdome ONEShield (Anti-Reversing, Anti-Tampering and Anti-Debugging) which provide the first line of defense against unauthorized app modifications.

3 Easy Steps to Block Magisk Hide to prevent Root Hiding, Root Cloaking in Android apps

Please follow these 3 easy steps to protect Android apps against Magisk Hide

Upload an Android App to Appdome’s no code security platform (.apk or .aab)
In the Build Tab, under Anti-Fraud, Select Mobile Malware Prevention and Toggle on Block Magisk Hide, and Block Magisk Hide (shown below)
Click Build My App

block magisk rooter

Congratulations! The Android app is now protected against Magisk Manager and Magisk Hide.

Appdome’s no-code mobile app security platform offers mobile developers, DevSec and security professionals a convenient and reliable way to protect Android apps using Block Magisk Hide. When a user clicks “Build My App,” Appdome leverages a microservice architecture filled with 1000s of security plugins, and an adaptive code generation engine that matches the correct required plugins to the development environment, frameworks, and methods in each app.

Prerequisites to Block Magisk Hide

Here’s what you need in order to build secured apps that can detect and Block Magisk Hide

Appdome account (If you don’t have an Appdome account, create a free Appdome account here)
Mobile App binary
A license to Block Magisk Hide
Signing Credentials (e.g., signing certificates and provisioning profile)

No Coding Dependency

Using Appdome, there are no development or coding prerequisites to build secured apps which can Block Magisk Hide. There is no SDK and no library to manually code or implement in the app. The Appdome technology adds the relevant standards, frameworks, stores, and logic to the app automatically, with no manual development work at all.

How to Sign & Publish Secured Mobile Apps Built on Appdome

After successfully securing your app using Appdome, there are several available options to complete your project, depending on your app lifecycle or workflow. These include:

Signing Secure iOS and Android apps
Customizing, Configuring & Branding Secure Mobile Apps
Deploying/Publishing Secure mobile apps to Public or Private app stores

Or, see this quick reference Releasing Secured Android & iOS Apps built on Appdome.

More Mobile App Security Resources

Here are a few related resources:

How to Prevent Rooting Android

How to Block Magisk Manager Rooting Framework

How to Block Dynamic Hacking Tools

Block ADB

How to Prevent Jailbreaking iOS

Check out Appdome’s Mobile App Security Suite or request a demo at any time.

If you have any questions, please send them our way at support@appdome.com or via the chat window on the Appdome platform.

Thank you!

Thanks for visiting Appdome! Our mission is to make mobile integration easy. We hope we’re living up to the mission with your project. If you don’t already have an account, you can sign up for free.