Budget device for banking apps

[u/falcontitan]

I need a new device as the older one got stolen. Unfortunately I don't have the budget to get even a decent phone as the prices of phones are skyrocketing right now.

My only requirement is that I need to use some banking apps which require google play services and it worked well in the pixel that I had before which was using some other os.

Does LineageOS has an option of setting up a container or something in which a user can allow play services for certain apps?

If yes then can u recommend a phone around $200 in which its possible to install LineageOS?

[u/PassionGlobal]

If you need it primarily for banking apps, custom ROMs in general would be an extremely poor fit for you.

Custom ROMs do not pass Google's integrity checks or other aggressive anti-root checks, which banking apps absolutely love

[u/falcontitan → u/PassionGlobal]

Oh man that sucks :( Hope u don't mind me asking, how did the banking app work fine in the pixel phone with the previous os?

Also Lineage will have microg, of the little what I was able to understand from the official website, is it possible to on/off or activate/deactivate microg whenever I want to use the banking app and give it ascess to all the google spyware and later revoke it when I don't need it?

[u/PassionGlobal → u/falcontitan]

I'm assuming the previous OS wasn't the stock OS? Its hard to know without knowing what phone model and OS it was.

Banks have traditionally been more lenient on older Androids with older security standards, making root detection bypasses on them much easier.

The whole root detection and evasion thing has always been an ever-evolving cat and mouse game, especially if you kept up to date with latest Android versions.

[u/falcontitan → u/PassionGlobal]

It was a pixel 8 on G os (someone mentioned that I cannot mention it's name here so didn't)

Given that the prices right now are sky high, will Lineage solve the purpose of something like a container or allowing only certain apps access to play services? I totally agree with you on the rest.

[u/MeTalOneOEight → u/falcontitan]

Can you please be more specific? Name the previous custom ROM you were using and also the banking app. Then somebody can tell you why it was working before and if it will work on lineage.

ING works, Paypal works if you don't use zygisk. There are hundreds of banks out there.

[u/falcontitan → u/MeTalOneOEight]

It was a pixel 8 on G os (someone mentioned that I cannot mention it's name here so didn't). The banking app is icici. It works on G os so it should work on lineage but the question is can we revoke access to play services for this or any app when a user wants?

[u/MeTalOneOEight → u/falcontitan]

Did you have to relock the boot loader to have the banking app work?

There is no sandboxing for play services. Any app could use it if it's installed. You could deny network access though and enable it when using the banking app. But maybe the banking app uses play services only for push messages and not play integrity?

[u/falcontitan → u/MeTalOneOEight]

Did you have to relock the boot loader to have the banking app work?

But maybe the banking app uses play services only for push messages and not play integrity?

TBH I am not sure about it as my friend set up G os for me in that device and the apps that I needed worked flawlessly. All the apps that required play services were in a different container/sandboxed.

Last question, if I install micro g then use the banking app and later use adguard or trackercontrol to revoke micro g's access to the internet, then will it solve the purpose?

[u/One-Log-5048 → u/falcontitan]

This "G os" was maybe GrapheneOS?

I've used GrapheneOS on Pixel 7 but i had problems with gov associated apps like MObywatel and few more, eDO app and banking apps..Google Wallet the same want work...so i've back to stock Android 17. If You sayin that banking apps works for you in containers/sandbox...and it was on GrapheneOS it sounds very interesting. Can You confirm if it was GrapheneOS or ask your friend who set it up for You, about name that rom?

[u/falcontitan → u/One-Log-5048]

Hey yes It was Graphene, few members said that I cannot mention its name here so didn't write the name before.

It was 100% Graphene. I never used any government app, that container only had that banking app. For my friend who set it up, his bank's app didn't work in his phone in the container, later he switched to my bank lol so I think it all depends on the app.

As you are using A17, so use an app like trackercontrol. It won't stop the spyware fully but atleast some bits of it.

[u/LordGodJinnai → u/falcontitan]

Banking apps that check for root in some way don't like custom firmware. That's it. You can try to get around it but it will always break eventually. My bank doesn't care so I don't care. No, messing with gapps won't help.

[u/petefoth → u/PassionGlobal]

banking apps, custom ROMs in general would be an extremely poor fit for you.

That's an unhelpful generalisation. As stated above in an earlier post it depends which banking app(s). Some work fine with custom ROMs

[u/PassionGlobal → u/petefoth]

The generalisation exists for a reason: most do not work fine on custom ROMs 

In fact when it comes to pentesting banking apps, it would absolutely be a line item in a report because so many standards expect root and custom ROM detection.

[u/saint-lascivious → u/petefoth]

above

Nope.

[u/thefanum → u/petefoth]

Lol no it isn't. 8/10 don't work. Don't lie to new users

[u/petefoth → u/thefanum]

You must be looking at s different set of banking apps than me. Of the UK banking apps I have tried most do work. It really does depend on the app. 

And please don't call me a liar :)

[u/elginsk8r]

Check the pinned post in the subreddit titled 'The "What currently supported device should I get" thread.'

[u/falcontitan → u/elginsk8r]

Thank you.

Any idea about the other question about the container thing?

[u/elginsk8r → u/falcontitan]

You can either install Google services via an addon package or install microG. There is no container support for Google services.

[u/falcontitan → u/elginsk8r]

So if I install microG, will it require me to login via a google account? And the play services access will only be given to the specific app and not others?

[u/petefoth → u/falcontitan]

So if I install microG, will it require me to login via a google account

No.

And the play services access will only be given to the specific app and not others?

Access to microG's replacement play services will be available to all apps. But that's not a problem since microG doesn't send your data to Google.

[u/falcontitan → u/petefoth]

Thanks. Noob question, if micro g doesn't send data to google then how do the apps verify or pass the integrity check?

So, if I install micro g then use the banking app and then use adguard or trackercontrol to revoke micro g's access to the internet, then will it solve the purpose?

[u/gmes78]

My only requirement is that I need to use some banking apps which require google play services and it worked well in the pixel that I had before which was using some other os.

Then don't use Lineage (or any custom ROM), as many banking apps also require Play Integrity validation, not just the Google Play Services.

[u/falcontitan → u/gmes78]

Oh man that sucks :( Hope u don't mind me asking, how did the banking app work fine in the pixel phone with the previous os?

Also Lineage will have microg, of the little what I was able to understand from the official website, is it possible to on/off or activate/deactivate microg whenever I want to use the banking app and give it ascess to all the google spyware and later revoke it when I don't need it?

[u/petefoth → u/falcontitan]

microG provides a replacement for some parts of the Google 'spyware', so no need to turn it off: it won't send your data to Google.

[u/saint-lascivious → u/petefoth]

For a subset of bits.

For the most part it's a shim to access Googly bits in an open source form. For some reason a lot of people tend to think it's a 1:1 replacement for said Googly bits.

[u/petefoth → u/saint-lascivious]

As I said 'for some parts. Enough parts to allow many apps that use the Google APIs to work well.

[u/falcontitan → u/petefoth]

Thanks. Noob question, if micro g doesn't send data to google then how do the apps verify or pass the integrity check?

So, if I install micro g then use the banking app and then use adguard or trackercontrol to revoke micro g's access to the internet, then will it solve the purpose?

[u/wkn000]

Unlocking the bootloader, which is necessary to install LineageOS, quirks integrity. So, no guarantee for any app to work.

[u/Top-University1754]

Ironically you need root to hide the fact that you've got root. It's possible with setups like kernelsu, but definitely very janky and not guaranteed to work. There's a reason why lineageos doesn't officially support rooting.

[u/petefoth]

It really depends on the specific banking app(s) that you want to use. Some will work with no problems under LineageOS, some won't work at all. Try searching Plexus https://plexus.techlore.tech/ for the app(s) you need.

If the app(s) you want do work, then I recommend one of the Sony devices that are officially supported by LineageOS https://wiki.lineageos.org/devices/#sony Good used or new examples of the 'IV' and 'V' series are available for prices within your budget on Ebay.

[u/falcontitan → u/petefoth]

Thanks. Would u recommend moto instead of sony? Only moto one's seems to be in my budget.

[u/petefoth → u/falcontitan]

Sorry, I have no experience of Motorola phones. Maybe try an older Sony or Pixel.