Nadeem Iqbal
Nadeem Iqbal

Reputation: 2338

Unqiue ID of an Android device that can survive Factory Reset like Fingerprint Pro App

I wanna ask how fingerprint pro app is uniquely identifying the android device even after Factory Reset.

I have tried following:

  1. Android_ID (eg: 34c1b1e7daa2d82e)

    ISSUE: resets on factory reset.

  2. Build Fingerprint (eg: google/coral/coral:13/TP1A.221005.002.B2/9382335:user/release-keys)

    ISSUE: changes with OS updates (OTA).

  3. Google AppSet ID (eg: 8d8f3c1e-4c93-4d11-8f88-1a9b6e9a53cd)

    ISSUE: resets on factory reset

There is one case till now where fingerprint pro app changed the id but that is a chinese device Doogee Android 12. Other devices are giving same.

Any help would be highly appreciated.

Upvotes: -2

Views: 134

Answers (1)

IliyaTi
IliyaTi

Reputation: 451

Fingerprint Pro likely isn’t relying on a single public identifier (like Android_ID, Build Fingerprint, or AppSet ID) since each of those can change on factory reset or OTA. Instead, it appears to combine hardware‐bound properties that are stored in non‐volatile parts of the device—properties that aren’t wiped by a factory reset. It might be using:

  1. Hardware Serial or IMEI: Some devices expose a hardware serial number or IMEI that is permanently embedded in the device’s hardware. Although access to these identifiers is restricted (and may require special permissions or privileges), they are inherently persistent across resets. See: Telephony Documentation(IMEI)

  1. Hardware Attestation / Key Attestation: Modern Android devices often have a hardware-backed keystore or TEE (Trusted Execution Environment). Using the Key Attestation API, an app can generate a key pair that is tied to the device’s unique hardware. The attestation certificate can include information that, when processed (for example, hashed), produces a persistent device fingerprint. This approach is resistant to factory resets and even many OS updates.

  1. Composite Fingerprinting: The app may also combine multiple stable device characteristics (e.g., manufacturer, model, bootloader version, and other immutable system properties) into a single composite fingerprint. Even if individual components (like Build Fingerprint) can change due to an OTA, the core hardware details tend to remain constant. A cryptographic hash of these values can serve as a persistent ID.

  1. Vendor-Specific or Undocumented Properties: In some cases, device manufacturers include hidden system properties that remain constant through resets and OS updates. Fingerprint Pro might leverage such properties if available.

The fact that you observed different behavior on a Doogee device suggests that some devices (especially with custom firmware) might expose or handle these identifiers differently, which can result in variations.

Upvotes: 0

Related Questions