Google has announced that it's hardening Play Integrity API verdicts so they're less spoofable but also faster and more privacy-friendly.
- Improved device integrity verdicts on Android 13+ will require the use of hardware-backed security signals using Android Platform Key Attestation, making them much harder to bypass. Google will adjust verdicts when it detects "security threats across Android SDK versions, such as when there is evidence of excessive activity or key compromise."
- The Play Integrity API will now have the "same level of reliability and support across all Android form factors."
- Because these new verdicts reduce the number of device signals that need to be collected and evaluated, Google says verdict latency can improve by up to 80%.
Developers can opt in to use these new verdicts today or wait until May 2025 which is when all API integrations will automatically transition.
In addition:
- The "meets-strong-integrity" response is being updated to require a security patch level within the last year on devices running Android 13+.
- A new device attributes field lets apps adjust their behavior based on the user's Android SDK version.
- All optional verdict signals are being standardized across apps, games, SDKs, and more.
- Improved device integrity verdicts on Android 13+ will require the use of hardware-backed security signals using Android Platform Key Attestation, making them much harder to bypass. Google will adjust verdicts when it detects "security threats across Android SDK versions, such as when there is evidence of excessive activity or key compromise."
- The Play Integrity API will now have the "same level of reliability and support across all Android form factors."
- Because these new verdicts reduce the number of device signals that need to be collected and evaluated, Google says verdict latency can improve by up to 80%.
Developers can opt in to use these new verdicts today or wait until May 2025 which is when all API integrations will automatically transition.
In addition:
- The "meets-strong-integrity" response is being updated to require a security patch level within the last year on devices running Android 13+.
- A new device attributes field lets apps adjust their behavior based on the user's Android SDK version.
- All optional verdict signals are being standardized across apps, games, SDKs, and more.