Android Remote Attestation

What is the new device integrity check on Android?In some games, Roblox creators can now use a security check (called remote attestation or hardware attestation) along with additional trust measures that lets them confirm that: You’re playing on a real, physical device. The Roblox app hasn’t been modified and is running on a trusted operating system version. This helps keep games fair and safe by making it much harder to develop cheat tools or modified apps. A large majority of active Android devices can pass this check.Why am I seeing a message about my device not meeting security requirements?You may see a message like: "This place requires additional hardware security requirements. Please run Roblox on a supported device."This usually appears when: You try to join a game that has enabled stricter security based on this integrity check, and

Your Android device cannot provide a valid hardware-backed attestation for Roblox. When that happens, the game’s creator may block or limit access from your device to protect other players from cheats and unfair advantages.Which devices can be affected?Remote attestation support is determined by the device manufacturer and operating system, not by Roblox. On Android, this hardware-level feature is either supported by the device or not; there is no separate user setting to turn it on or off.You’re more likely to see problems if: You use an older or very low‑end Android phone or tablet whose hardware doesn’t implement secure key attestation. Your device is rooted, has an unlocked bootloader, or runs an unsupported custom ROM. These changes will break hardware attestation. You’re on an Android emulator or virtual device. Most modern Android devices that follow Google’s security requirements will pass this check automatically, without you having to do anything.What can I do to fix this?If you believe your device should be supported, you can try the following steps:

Update your device softwareOpen Settings > System > Software update (or similar) and install any Android OS updates available.

Remove root or custom firmware (advanced users)If your device is rooted, has a custom ROM, or an unlocked bootloader, return it to the manufacturer’s official software and re‑lock the bootloader.

Avoid emulators and virtual devices Roblox’s integrity checks are designed to treat most Android emulators and virtual devices as untrusted, and will fail the check.

To play, use a physical Android device that meets security requirements.

Try a different deviceIf your current phone or tablet still cannot pass the integrity check after updates and restoring stock software, the safest option is to log into Roblox from another supported device (such as a newer Android phone, iOS device, Xbox, Windows PC, or other supported platform).

Why can’t Roblox just make an exception for my device?Remote attestation is specifically designed so Roblox can verify device integrity remotely using cryptographic information signed by secure hardware on the device.If we skip or weaken these checks for some devices:

Cheat clients, emulators, and modified apps could pretend to be legitimate devices. Games that depend on this feature for competitive play would no longer be protected. For this reason, when a game requires remote attestation, Roblox can’t override the requirement for specific devices.Can I still play on Roblox if my device doesn’t support this feature?In many cases, yes. Game creators choose whether and how strictly to use device-backed integrity (for example, only for ranked/competitive modes or trusted lobbies).This means: You may still be able to play other games that do not require this level of device integrity. For games that do require it, you’ll need to use a supported device that can pass the check. For power-users: Are all third-party ROMs blocked?No. We currently support GrapheneOS when the bootloader is locked. We may support other third-party ROMs if: They do not break the AOSP security model, They support installation with a locked bootloader, They properly configure and publish self-signed verified boot keys for their ROM, and They promptly update to the latest AOSP patch level. We frequently update minimum operating system security requirements. If ROMs do not consistently adhere to the standards above, we will remove them from the set of supported verified boot keys.