Is Rooting still as essential as it used to be?

Guster@lemmy.world to Android@lemmy.world – 197 points –

Back in the day - rooting Android phones and installing custom ROMs were such a big part of Android. I remember so well using titanium backup and Greenify and Cyanogenmod and the list goes on.

Is it still necessary to root in 2023 though?

I have been on vanilla Android without root access for the past couple of years and at this point most root features have made it into the vanilla Android OS. What are your thoughts?

100

I've been a flashaholic since the CWM days, but I haven't rooted since probably 2017 or so. Back in the day, rooting was practically necessary for a good UX, but Android's matured enough now that I haven't had the need for a few years.

Same. I still try to buy phones with ROM support in case something goes sideways, but I haven't used a custom ROM on my daily phone since 2016 or 2017 — and if I were to flash a custom ROM today, I still likely wouldn't root it. Things typically work well enough that jumping through hoops to un-break SafetyNet for banking and mobile payments and even some games is too much trouble.

For what it's worth, fixing safetynet is like a module or two and a couple reboots.

Ah, good old clockwork mod. Back when installing a custom rom was simple. Unlock boot loader, flash custom recovery, use recovery to install rom and wipe, done! None of this a/b partition and "you have to be on this specific version of stock rom to Flash this" crap. Those were the days.

Necessary is a matter of perspective, and what it is you need your device to do. Mine is that if you don't have root (or equivalent) on a computer, you don't really own it. That's a philosophical point more than a practical one - I'd want root even if I didn't currently have a use for it.

Practically, here are some things I use root for in 2023:

  • Advanced charge controller - limit battery charge to extend service life. Some devices have a built-in option now, but it's usually only a single switch for 85%. I usually set it to 60%.
  • Backup of apps with their data (Neo Backup), to install onto another device or after a factory reset - I don't think there's a way to do anything like this without root.
  • Mounting remote devices for access by arbitrary apps using EasySSHFS - I don't think there's a good equivalent.
  • Accessing exfat format external drives, like the SD cards in my camera using MiXPlorer's built-in filesystem drivers. Android is an asshole for not supporting more filesystems. It's Linux; the support already exists.
  • Hosts file ad blocking - DNS ad blocking is a viable alternative now.

If something blocks me from using it with root, I'll give it a 1-star review on Google Play and probably not use it even if I can get around the blocking. If my bank starts using more effective blocking, I will probably change banks.

I buy my phones outright, so that's MY equipment. I root it because I own it, full stop.

If a ROM or App tells me I can't be rooted then, like you, I won't use it. I have options.

Also, I'm the one paying for my data plan and I refuse to have ads leech on my rates. I will go WAY out of my way to suppress advertisers intruding on my browsing. That's pretty much the extent of my cyber-activism, but it's a hard line.

Don't use root but I do use custom rom safety net and play API work no banking app problems no Google play problems and advanced charge controller is built into my rom it even has that Google photo spoof built in it's not feature rich but it's clean, fast and I have removed most of the Google bullshit I am satisfied

I used to root my phone, run custom ROMs and tweaks, the whole thing. Was basically forced to keep stock when I got a galaxy S8, and now I haven't rooted even with my past few pixels, it doesn't feel useful anymore. I might root my pixel 5 in the future as I plan to keep it for a long time, but right now I'm stock

I stopped rooting when I got my first Pixel. It didn't feel necessary any more. Most of the things I rooted my phone for were just there now.

Haven't rooted in years. Don't really need to anymore.

Plus root breaks my banking app and I need that.

I've never had a phone that hasn't been rooted and also have always been able to use every app. Google pay might get pissy occasionally, but every banking app has always worked.

Essential? no.

Worth it? maybe.

Nice to have control of your own device? absolutely.

I have two devices, primary with root (through Magisk as KernelSU still has some issues for me) and secondary without root. Anytime I have to do something more demanding on the unrooted device I really wish I had root. Local terminal access, ability to disable some annoying "features" (verified app links) and multiple other things I use daily make it worth it for me.

EDIT: I saw mentions of custom roms in other comments. I have a custom rom installed (AOSP based). If I was on a stock rom (or god forbid something like MIUI) root would be a must for me.

Since the proliferation of mobile banking that doesn't even work if you have your phone rooted and the manufactures getting more hostile towards custom ROM developer I practically have stopped modding my phone altogether. I used to be a guy who flashes ROM couple times a day. However now, especially I'm working remotely, I find myself on my phone even less. My phone has become basically only used for texting, banking, and Uber Eats.

There's something interesting about mobile banking. I constantly see stories of issues with it on non-stock / unmodified software. The funny thing is that I have never had any issues personally. Until recently my banking app worked even without Magisk's Denylist (and the most picky app was McDonald's). Now (since few months) I have to add it to Denylist, but that's the only requirement, no SafetyNet, no Play Integrity, nothing.

I guess some banking apps are less annoying about phone payment, but a lot of them are.

I haven't felt a need to root a phone in years. These days you will get a usable UI and UX with basically all major brands and adblock can be done without root, so it's just not worth the hassle trying to hide the fact that you're rooted from banking apps etc. At least as far as I'm concerned, I'm sure that some people still see a benefit in rooting.

Edit: I actually just thought of a reason: updates once the phone is past its official support window but otherwise still functional (though you don't technically need root for that, just an unlocked bootloader, the new ROM doesn't need to be rooted either strictly speaking). I'd just buy a new phone, but that really just means I'm a part of the e-waste problem.

Can't root, breaking Safetynet destroys about 30% of what I use my phone for.

What? There is a module for that called SafetyNetFix. I am fully rooted and can usw any App I want.

You're basically playing cat and mouse with these fixes; I don't want to be stuck without access to apps for a day or two, and what I gain isn't that great anyway.

If that is your mindset, you're definitely better without root. My phone is rooted for three years now and never had any issue. I never had an app fail with my methods to hide Magisk. I even got GPay and contactless payment working when I still had Google services installed. Without them, it is impossible unfortunately.

I ran a Lineage OS on a Mi 5 for 2.5 years, there were definitely some days when my banking app would fail and then Magisk would come up with a fix a few days later. Given the prevalance of digital systems I'm not wanting to go without.

Feel like I'm being attacked for not wanting to root, in a thread asking people whether they root or not. This feels like people being asked if they believe in Jesus and those who say no are swamped by believers who then chastisise them.

Have you tried KernelSU? Also if you're careful with magisk you can get SafetyNet to work, even Play Integrity API (but only Basic and Device integrity as Strong requires locked bootloader (or a really bad implementation of security mechanisms as seen here))

As said above, don't want to be stuck without access to payment apps and ID apps even for a day or two. Risk not worth the reward.

That's your decision. I experience no issues with my setup, but you do what you want.

KernelSU? Hadn't heard of that one before.

Do you get proper compliancy with the Integrity API?

KernelSU? Hadn't heard of that one before.

It's relatively new, few months old at most and started as a joke.

Do you get proper compliancy with the Integrity API?

Screenshot_20230804-134241_Play Integrity API Checker

Feel free to ask more questions if you need. For me getting to this point was quite an experience, so I'd be happy to help.

I'm very interested! Which device is this and how did you get to this stage? I believe GKI only really exists for devices running kernel version 5.10 and over. My device is running 5.4 so I can't use this. I hope that in a couple of years KernelSU will become mainstream and I can reap the benefits of SafetyNet without having to deal with Magisk + Zygisk + LSPosed and a bunch of other stuff.

That was 3 months ago.

  • My phone is Redmi Note 10 Pro (global version) running a custom ROM (AOSP based).

  • You can install KSU on non-GKI devices: https://kernelsu.org/guide/unofficially-support-devices.html. I was probably using this one, but there are multiple KSU kernels available for my device and you can probably find some for yours in the telegram groups.

What does it break? I've always had a rooted phone and outside of Google pay, have never had anything not work.

Fixing safetynet is just another magisk module (or two, it's been so long I don't remember anymore).

Yes this. Pesronally this is like 75% for me considering how reliant I am on online banking nowadays.

Necessary for what? If you want to block ads system-wide, you can use the Private DNS feature. But to fiddle with system partition/install Xposed stuff you definitely need root

What DNS do you recommend?

nextdns, ControlD, Rethink DNS and AdGuard all have free tiers with adblocking capabilities and DoT.

Adguard has ad blocking DNS servers. They can be a little slow however. Cloudflare and cleanbrowsing both have anti-malware DNS. Cloudflare being the fastest. There are other options too.

I been on custom ROMs for years without root. But recently, root has moved from magisk to kernelsu, which is a kernel based root solution. Much better than magisk in terms of avoiding detection and required no extra install if your kernel already supports kernelsu. I've started using root features again thanks to kernelsu

I still root my phone for system-wide adblock, call recorder and Xposed modules I have been using since Jelly Bean.

Same. I recently got a new phone and considered hopping into the Apple ecosystem, but call recording kept me on Android.

Which app can you recommend for call recording?

I'm using the BCR magisk module for recording on a Pixel 7. BCR seems to be pretty universal, but some dialers (OnePlus dialer is one) have recording disabled via config and can be reenabled with adb.

I use Call Recorder on a rooted Pixel 5. Works well.

I purchased my first Android phone at 13, the Motorola Droid. In less than a month, it was rooted running a custom rom. I rom hopped weekly, tried all sorts of hacks and modifications, and eventually started releasing my own (very crappy) custom roms. I did this all the way through until I had the G6.

I eventually started getting phones where I can unlock the bootloader, and for a bit I would root such as my Essential phone or my Pixel 3a or 4a 5G but since the Pixel 6 I haven't had any reason for perpetual root. I unlock my bootloader, and I root when needed and remove magisk when no longer needed. The cat and mouse game of trying to bypass detection alone makes it a pain when I have banking, work apps, etc that all validate hardware attestation.

I use Lineage faithfully so my phone stays rooted. Also, I live in the US where carriers aggressively lock down their phones so they can upcharge everything. the whole "your hotspot will work at 3g speeds" is one reason to root. Adaway is another reason to root as well. I'm too cheap for home internet so I tether to get online. US carriers (and cable companies) hate that and try to prevent it. root and VPN gets around that. unlimited 5g hotspot.

The big thing now is Graphene OS on the Pixels. It is a custom ROM that works exactly like an OEM. The reason this works is because the Pixels ship with the same type of cryptographic hardware security chip as modern computers with TPM/secure boot. This chip makes it possible to create a verified chain of trust in the device so that Graphene can do over the air updates to the device. The ROM is configured with root disabled and the full Android 3 party lockdown user space for regular operations. You still have root through developer mode and USB if you need it. I've done custom ROMs for many years in the past, but nothing compares to the Graphene experience. As far as I am concerned, Graphene's list of supported devices is the entire list of available phones I will consider purchasing.

I've used GrapheneOS and liked it, now I'm playing around with /e/os

2 more...

I like vanilla Android, but many phone companies has their own version of it with meaningless pre-installed apps. I typically root and install vanilla OS and thats it.

A custom rom isn't the same as rooting though. I've used custom roms without rooting them quite a bit, so my answer to op's question is that no it really isn't that essential, unless you need some very specific magisk module or something.

Ah apologies, I have equate rooting same as flashing custom roms, custom roms only requires unlocking the bootloader.

Yes, I also noticed that recently I have little need to root to tweak around the system. But I do use some apps that requires root, and that is the only reason of my continuing doing so.

Even when I've done custom roms like lineqgeOS I haven't rooted. However when it comes to backing up apps root still does feel like the best way to back up specific app data with apps like swift backup.

A lot of the reasons why I used to root simply don't exist anymore. Personally, I haven't unlocked the bootloader or installed a custom ROM since maybe Nexus 4. Plus now, as others have said rooting your device makes most financial related apps stop working.

That's what did it for me. I need to be able to use bank apps, and appreciate the convenience of Google Pay on my Pixel 7 Pro. Can't do that with a custom rom or root. I loved rom hopping on my older droids, but I guess stock android has all the functionality I need.

Quite to the contrary, my phone doesn't even support rooting. Neither TWRP or any other alternative bootloader is written for the Motorola G73, and an image file isn't available to use with Magisk. I would love to root my phone, if I could.

I still root my phone for Freezing System Apps, reVanced, AdAway(system-wide adblock), Shell automation, circumventing Hotspot restrictions from my Carrier.

I've also been a customization junkie before (mainly with audio mods and UI plugins for Exposed). Not anymore.

But since then rooting to me become not only a means to the end, but an essential part of my phone, as in I get to control and choose what and why is installed/active, not the Vendor/Google. I would root my phone even if I didn't had the need, just cause I like owning things, opposed to modern standard of "everything is a service".

I use it for Swift Backup only.

Would swift backup with Shizuku enough to not need root?

Hold up... So are you saying that I could use Shizuku / Swiftbackup, and it would do backup and restore of app data, just like when I used to have root and Titanium Backup?! That would be a game changer, I never fully trusted Google backups or Samsung Smart Switch to do the full job.

I tried and it seems root is needed to backup wifi passwords but I think I was able to do a local backup of an app.

Ahhh, just found this in the FAQ, sadly I think it's not possible to backup app data using Shizuku.

https://swiftapps.org/faq#appparts

"The private app data in /data/data/ or /data/user/*/ that stores your app preferences, login info, databases, etc. This is the most important part to restore apps potentially with their state preserved.

Requirements: ⚠️ Root required for backup & restore ⚠️ Shizuku mode (ADB access) cannot read/write at these path"

First time I rooted was in 2007 for installing CyanogenMod. After Cyanogen stopped updating I haven't bothered rooting my phones.

Rooting is more security compromising than it's worth. There are a small set of use cases I could see but for the most part do either or below.

If you have a Pixel you would want to run GrapheneOS for maximum security and privacy.

All other phones you would ADB remove bloatware, run PrivateDNS with NextDNS or an alternative, and turn off as much analytics/permission/features as possible for a functional phone.

I used to root every phone I owned cause I could do so much more with it. I haven't rooted in so long, android does what I need now

No. I still use custom Roms, but only ones I can relock the bootloader. I like GrapheneOS and CalyxOS.

You can relock the bootloader with a custom rom? Which phone do you use?

Pixel 6a. That's why I exclusively use Pixels, they are the only device that offer this. Well, there are a few others but it's very rare outside of pixels and theirs tends to be very insecure and or outright broken/buggy. Pixels are supported by basically every rom out there.

I keep my Android phone rooted because there's specific functionality that I use daily that's a pain to do without root.

It's not my primary phone so the fact that it's 3 years out of date in order to preserve my root doesn't bother me. But if it was my primary phone I'd probably look into workarounds to avoid needing root.

On modern A/B devices, Magisk can preserve root through OTA updates. The procedure is:

  1. Install the OTA; do not reboot
  2. Install Magisk to the inactive slot from the Magisk app
  3. Reboot from the Magisk app

Not always. I tried that on my last OTA for my Pixel 7 and got locked out until it finally booted from slot_a after being off a while. Failed update.

Most of the features that drew me to root my phone back in the day (2012 to 2015) are now in my phone by default. They've been adopted by OEMs as part of their official skins so it's not really necessary to root anymore.

I haven't fucked with my daily driver phones for like 5 years. Sometimes I'll use apps like YouTube revanced or something for music... But honestly I can even do without that and get by with newpipe.

I don't root anymore, not since I switched to GrapheneOS. It breaks the Android security model. On GrapheneOS it's like fortifying a castle and then blowing a wide open hole in the wall. Just didn't make any sense.

Same here.

Anyway, it's not an arms race against the vendor anymore on GrapheneOS. Root is just a toggle switch I control, now.

I used to on my Motorola RAZR for custom themes and the ability to double tap volume keys for track skipping or rewind. Now I have an app to to do that and some watered down system themes. Now I just don't cause I don't see the reason for rooting anymore. And random apps like McDonald's have started checking for root or unlocked bootloader's for some reason.

Not at all.

I used to root all my phones going back to the HTC Incredible. You had to, if you wanted great UI, or locked-out functionally like wifi hotspotting.

These days my phone does everything I want right out of the box.

I guess I'd still consider rooting on order to do a debloat, but with onboard storage being what it is, I really don't care that I'm only disabling and hiding the bloat.

No but I think roms now are at an all time high for quality and stability.

I haven't even thought about rooting a phone in probably 10 years now.

If you want to use your phone for a few years it's very nececary in my experience, they tend to get slow quick and with LineageOS (previously Cyanogenmod) I can still use a Galaxy s5, well I could if half of the hardware wasn't broken but that's beside the point. I think ROMs are definitely neccecary but mine isn't rooted rn and it's probably debatable if you realky need that, I miss a proper adblocker so I should have rooted mine and probably will sooner or later considering I got Lineage on it already.

I haven't rooted in a long time. But if you tell me there is an app out there that can restrict or deny apps background usage (to increase deep sleep state %) and that you can only do it with root.

Then I'd say root might be necessary in those situations.

For example WhatsApp is the number one standby battery drainer in my phone. If I check partial wakelocks like 70% of them have the WhatsApp logo. (In BBS app). If I had a way to reduce them by 90% just keeping new messages and call working and root is needed for that then I'd want to root my phone.

I tried "Apps Ops" and it let me deny some of the permission. But maybe there is something more restrictive out there that needs root.

I'd check out Greenify, it has root and nonroot modes. I've found it to greatly increase my deep sleep when used religiously even without root

But isn't Greenify outdated or they still update it?

Another thing I'm thinking: I'm interested in running some adb shell command every few minutes or hours to change the WhatsApp standby bucket from active to working_set that seems to reduce a lot of wakelocks.

Currently my standby (after tweaking for days) is not that bad. Like 0.4% per hour at night using wifi when I go to sleep.

WhatsApp despite of the restrictions I added is still the app with most partial wakelocks.

Looks like it hasn't had updates since 2019, but if it ain't broke why fix it?

Yeah I agree with that.

But generally apps that do something more advanced get outdated every year with new android versions with different permissions and API. This is why I was asking.

But I guess this app has nothing that got impacted.

I did with my old samsung, motorola, asus, nokia. But my last phone, PoCo F3, no, especially because it's difficult to have a working Google Wallet with unlocked bootloader/root. I did it with my asus zenphone and nokia, but damn it broke every few weeks with a google update, and you needed to patch after patch after faking stuff and magisk addons etc for it to run a couple of weeks and BAM! Google Pay was disabled again... very annoying.

On my F3 I disabled/uninstalled unwanted apps with a debloater and I'm using Firefox for browsing. No need to root yet. When I'll change phone I'll root the old one.

Necessary for me to fix the "bugs" present in Android (Safetynet fix, F-droid & Aurora auto updates etc.) and some from the OEM (flawed camera libs from Xiaomi that unintentionally hamper the use of Gcam).

It depends on the phone. I would probably root a Samsung phone if I had one but my Pixel 6 has everything I want/need so I don't bother.

Samsung phones have way more features than pixels though

Do you mean software or something about the hardware? I’ve had a couple Samsung but never a Pixel, so just curious.

I find root essential if you use a custom rom. I usually buy cheap phones (like Poco/Xiaomi) and install a lineageOS build. Without magisk/kernelsu there are a lot of apps that are not going to work (like netflix, Google pay, bank apps, et...).

Nowadays most developers consider that you are a terrorist for having a non-oficial ROM and for me using the super bloated MIUI rom is not an option. If you have a good base os like pixelos, samsung's os or similar maybe you don't need it.

Also being able to fully block advertisement is a great plus of having root. I now that there are methods that does not require root but adaway, in my opinion, is the best.

I love that you replied to my 4 month old post. This would never happen on Reddit!

I root because my favorite adblocker is by a guy named kNinja, and I like having 3rd party Material You icons on my default launcher. Also prefer amoled black as a system theme through Repainter.

It's useful but pretty much impossible on most flagships