Singpass App on Custom ROMs

[newsera]

Hi everyone,

Singpass App no longer works in my phone. I see this message "Your personal data matters. We have locked the app to keep your data secure. Ensure your device is not rooted or running apps for unknown sources. (T0)" and I see only one button saying "I understand. Quit the app now"

Anyone has a workaround for this? I am running Evolution X ROM on my Poco. Magisk hide works? I don't think the apps get root permission by default even on custom ROMs.

 

[xonix]

Was it working before on the custom rom ?
Maybe something trigged the safety net feature that many banking apps use to reduce risk for users. Example, Google pay nfc payment won't work as long you have unlocked bootloader.

I would never think of running custom rom on my main phone with access to my banking apps, singpass and other payment apps etc...

 

[SkyShroud]

Only start having this problem after recent google nuke on the root api
I wonder anyone got any solution to this singpass root issue
Even banking app not as stringent as this singpass

Nvm, a bit more google end up with this
https://forum.xda-developers.com/t/using-software-with-v-key-components.4237637/
Apparently singpass went all out and check for custom rom regardless root or not, really wtf
Singpass really intrusive

 

[xonix]

You prefer the Singpass app ( that has access to your personal info & life ? ) to be less stringent with running on 3rd party roms ?

 

[SkyShroud]

Strangely, the app start working again, after I simply force stop the app, without applying anything stated in the xda thread. What a weird app.

You prefer the Singpass app ( that has access to your personal info & life ? ) to be less stringent with running on 3rd party roms ?

As much as you believe in the security, I am sure the facebook contain more information about your life than anything
Likewise, that one email you use for that many commerce platforms like taobao, amazon, shopee etc is enough to create a chain of vulnerability.
Not only that, if you use the same password for all of those, then, it is a complete vulnerability.

Then again, most people don't even create different email to be used for different commerce platforms.
Likewise, can't be bothered to think up different passwords for different commerce platforms either.

All in all, an average person usage is full of vulnerabilities, that is also why companies have to go a step further and create security token.

Last but not least, if a person know how to install a custom rom and even root their devices, you can say at least they not dumb enough to fall into phishing scams like some people did no matter how much security you have.

 

[xonix]

Strangely, the app start working again, after I simply force stop the app, without applying anything stated in the xda thread. What a weird app.



As much as you believe in the security, I am sure the facebook contain more information about your life than anything
Likewise, that one email you use for that many commerce platforms like taobao, amazon, shopee etc is enough to create a chain of vulnerability.
Not only that, if you use the same password for all of those, then, it is a complete vulnerability.

Then again, most people don't even create different email to be used for different commerce platforms.
Likewise, can't be bothered to think up different passwords for different commerce platforms either.

All in all, an average person usage is full of vulnerabilities, that is also why companies have to go a step further and create security token.

Last but not least, if a person know how to install a custom rom and even root their devices, you can say at least they not dumb enough to fall into phishing scams like some people did no matter how much security you have.

Ok

 

[xKazeolus]

so..if im reading it right. you are able to use the singpass app again on a custom rom+root? or its only custom rom assuming its not rooted by default.

i unrooted my phone in order to use singpass so this is good news. haha!

 

[MGeaR356]

Actually there is a bug. If u are rooted and try to register singpass app, will kanna error when keying in singpass pw

U need to Un root then register then re root and ensure magisk hide both sub processes.. Singpass should work

 

[SkyShroud]

so..if im reading it right. you are able to use the singpass app again on a custom rom+root? or its only custom rom assuming its not rooted by default.

i unrooted my phone in order to use singpass so this is good news. haha!

Actually there is a bug. If u are rooted and try to register singpass app, will kanna error when keying in singpass pw

U need to Un root then register then re root and ensure magisk hide both sub processes.. Singpass should work

That I don't know.

For my case, it stop working after safetynet failed then magisk put out a canary build that fix the safetynet. So I installed that but it still doesn't work. Then, I just left it until that day I try to follow the XDA's thread but before I did those, I "force stop" the singpass and re-run it, and all of a sudden, it worked again. It is puzzling, zero idea what is the real problem here, especially I did reboot the phone a few times but apparently, force stop and reboot have different result.

All in all, I just have the usual magisk hide app plus hide magisk app itself with some rubbish naming.

 

[MGeaR356]

Sometimes siao siao one.. Magisk hide will untoggle one of the singpass process then leads to detecting root.. Do check on that

 

[SkyShroud]

Really dulan, they update the app again. I think these wannabe "developers" are stalking the threads.

I think we need to spam their feedback forms and support emails, to complain their deliberate attempt to inconvenient advanced root users.

https://www.singpass.gov.sg/singpass/common/contactus
On a side note, I once again bypass the update by running it in work profile app. Still gonna complain, **** devs.

 

[800900]

Any higher authority / parliament member overseeing Singpass division ?

Let's complain to them ?

 

[dreant]

Can anyone give a brief overview on how I can get Singpass to work again on my rooted phone (Magisk)?
It seems to have stopped working after the most recent update. =(

 

[orangeman]

Same here, any idea?

 

[SkyShroud]

Any higher authority / parliament member overseeing Singpass division ?

Let's complain to them ?

I got complain ah, you can also do so via the "feedback" under contact us

They say security blah blah blah and highlight that there maybe some people who rooted but not aware they are rooted (lol?).
Then they sign off with "We note your feedback as we continually review our guidelines and practices to balance security and usability for the Singpass app."

In any case, more people complain better, then they will take it seriously.

 

[SkyShroud]

Can anyone give a brief overview on how I can get Singpass to work again on my rooted phone (Magisk)?
It seems to have stopped working after the most recent update. =(

Same here, any idea?

1. In your magisk, you need make sure the "(isolated)" service of singpass is checked as well.
2. If still doesn't work, you can install "Riru" from magisk module and then "Riru-Unshare" from
   https://github.com/vvb2060/riru-unshare/releasesReboot and try again
3. If still doesn't work, you can install "app manager" from F-Driod app store to disable the isolated service.
   https://f-droid.org/packages/io.github.muntashirakon.AppManager/
4. If still doesn't work, it might be singpass checking for rooted apps thus you can use "XprivacyLua" via "LSposed" module in Magisk, to block singpass to "Get applications". Don't use "edxposed", "LSposed" simply better.
5. If still doesn't work, you can use "Shelter" from playstore to activate work profile and run Singpass

Doing 4th should work, if you running android 10 but if you on 11, you might need use "shelter". On 11, running the app from within shelter might not work, may need to run it via launcher menu.

Edit: Do note this is outdated, please use latest Magisk v24+ with Shamiko.

 

[kumokumo]

Seems like all this trouble makes rooting not worth it.

 

[roidred]

1. In your magisk, you need make sure the "(isolated)" service of singpass is checked as well.
2. If still doesn't work, you can install "Riru" from magisk module and then "Riru-Unshare" from
   https://github.com/vvb2060/riru-unshare/releasesReboot and try again
3. If still doesn't work, you can install "app manager" from F-Driod app store to disable the isolated service.
   https://f-droid.org/packages/io.github.muntashirakon.AppManager/
4. If still doesn't work, it might be singpass checking for rooted apps thus you can use "XprivacyLua" via "LSposed" module in Magisk, to block singpass to "Get applications". Don't use "edxposed", "LSposed" simply better.
5. If still doesn't work, you can use "Shelter" from playstore to activate work profile and run Singpass

Doing 4th should work, if you running android 10 but if you on 11, you might need use "shelter". On 11, running the app from within shelter might not work, may need to run it via launcher menu.

Yes SIngpass is checking for installed apps. That's why magisk is not able to hide. LSposed didn't work in my case.

 

[SkyShroud]

Seems like all this trouble makes rooting not worth it.

Mail them and complain lor. Tell them keylogger can be installed without root, so called focus on security is bs.

 

[IOKNEE]

1. In your magisk, you need make sure the "(isolated)" service of singpass is checked as well.
2. If still doesn't work, you can install "Riru" from magisk module and then "Riru-Unshare"
   Reboot and try again
3. If still doesn't work, you can install "app manager" from F-Driod app store to disable the isolated service.
4. If still doesn't work, it might be singpass checking for rooted apps thus you can use "XprivacyLua" via "LSposed" module in Magisk, to block singpass to "Get applications". Don't use "edxposed", "LSposed" simply better.
5. If still doesn't work, you can use "Shelter" from playstore to activate work profile and run Singpass

Doing 4th should work, if you running android 10 but if you on 11, you might need use "shelter". On 11, running the app from within shelter might not work, may need to run it via launcher menu.

Step 1-2 used to work on Android 11 but the recent update of SingPass app can detect root again even at step 4. My phone is Xiaomi so I can't use Shelter as in step 5. Waiting for experts to point out how to make this **** work again.

EDIT: downgraded to version 11.0.0 and everything are good again. Probably I will use "Detach" to avoid updating the app until there's a solution for this. **** this ****.