[KB8157] ESET mobile applications on a rooted or jailbroken device

Issue

Solution

A rooted or jailbroken device

A rooted or jailbroken device is vulnerable to risk as another software might control the device's settings or operating system. For example, it might cause active ESET security applications such as ESET Endpoint Security or ESET Mobile Security to close, although these applications have the highest Device Administrator permission level.

ESET mobile products cannot guarantee complete protection on rooted or jailbroken devices, as the ESET applications might not work correctly.


Rooting

Rooting is the process by which users put their device in a privileged mode and gain "root access" to a device. Rooting is generally performed on Android devices, but rooting can also occur on other Linux-based devices, such as Nokia's now-retired Symbian operating system. The purpose of rooting a device is to obtain the highest system privileges that allow users to run specialized functions that otherwise would not be available.

Because users have the highest root privileges available on a rooted device, their devices are vulnerable to security risks as malicious code might affect the operating system.


Jailbreaking

Jailbreaking is the process of disabling the limitations imposed by a device's manufacturer. Jailbreaking is generally performed on Apple devices running the iOS operating system, such as iPhone or iPad, and it removes the restrictions set by Apple. This enables users to install third-party software from outside the official app store.

Essentially, jailbreaking enables users to make changes (such as changing their iPhone's default browser or mail client) or use software that Apple does not authorize.

Read more about macOS and iOS threats in the WeLiveSecurity Threat Report T2 2021 (page 34).


How can I tell that my device is rooted or jailbroken?

There are several ways to verify if the Android device has been rooted. You can use ESET Password Manager mobile application, ESET Mobile Security for Android, ESET Endpoint Security for Android, or you can view the status information directly on your device to verify whether your device has been rooted or jailbroken.

ESET Password Manager (mobile application)
  1. On your mobile device, open the ESET Password Manager application and log in to your account.

  2. Tap the menu icon (three vertical lines) and tap Security Report.

    Figure 1-1
  3. If your device is rooted or jailbroken, you can see the yellow notification at the bottom of the screen. Tap Rooted device or Jailbroken device notification for more information.

    Figure 1-2
  4. Read the information about rooting or jailbreaking. For more information, tap Need help? Learn more.

    Figure 1-3
ESET Mobile Security for Android

ESET Mobile Security for Android shows a yellow alert notification on the main screen if the mobile device has been rooted. The rooted device notification setting is enabled by default.

  1. Open the ESET Mobile Security for Android application. 

  2. If your device has been rooted, the yellow alert notification will appear on the main screen. Tap the Rooted device notification and read the information about the rooted device. 

    Figure 2-1
ESET Endpoint Security for Android

ESET Endpoint Security for Android shows a yellow alert notification on the main screen if the mobile device has been rooted.

Turn on the Rooted device notification setting

You need to manually turn on the Rooted device notification setting, as it is not enabled by default.

Click the Enable rooted device notification in ESET Endpoint Security for Android expander below Figure 2-1 and follow the steps to enable Rooted device notification in ESET Endpoint Security for Android.

  1. Open the ESET Endpoint Security for Android application.

  2. If your device has been rooted, the yellow alert notification will appear on the main screen. Tap the Rooted device notification and read the information about the rooted device.

    Figure 3-1

Enable rooted device notification in ESET Endpoint Security for Android

  1. Open the ESET Endpoint Security for Android application.

  2. On the main screen, tap Device security.

    Figure 4-1
  3. Tap the toggle next to Device Security to enable it.

    Figure 4-2
  4. Type the Admin password and tap Enter.

    Figure 4-3
  5. Tap the toggle next to Device settings policy to enable it and tap Device settings policy.

    Figure 4-4
  6. Verify the toggle next to Rooted device is enabled.

    Figure 4-5
  7. Tap the arrow icon in the top left corner and navigate back to the main screen. You will see the yellow notification on the main screen if your device has been rooted.


Verify the status information on your device
Not applicable for all Android devices

This procedure might not work on your Android device.

  1. On your Android device, navigate to Settings.

  2. Scroll down and tap About phone.

  3. Tap Status information.

  4. Check the Phone status. If the displayed status is Official, your device has not been rooted.


What should I do if my device is rooted or jailbroken?

If you are aware that your device is rooted or jailbroken, ESET does not recommend using such a device. You should return it to the vendor or make a complaint.

Many mobile device manufacturers tend to adjust the Android operating system according to their own preferences.

Some devices (for example, Xiaomi) have permission to be rooted by default, or they provide advanced permission settings.


Deliberate use of a rooted or jailbroken device

ESET products might not work correctly on a rooted or jailbroken device

ESET applications might not work correctly on rooted or jailbroken devices. ESET security products might not be able to detect malicious software and your personal data might be exposed to risk.

ESET Technical Support may not provide support for rooted devices

ESET Technical Support may refuse to provide support for customers with ESET applications for Android installed on rooted devices.

If you decide to use a rooted or jailbroken device, you must be aware of possible consequences. ESET strongly recommends not using rooted or jailbroken devices.