Glossary
What is a rooted or jailbroken device?
A rooted device is an Android phone on which the user has gained administrator (root) access; a jailbroken device is an iPhone or iPad where the user has removed the restrictions Apple puts on the operating system. Both let software do things the platform normally forbids, such as reading other apps’ data or changing how an app behaves. App owners use root and jailbreak detection to find installs where their own protections could be bypassed.
What it means
Normally each app runs in a sandbox and cannot see another app’s files or alter the system. Rooting and jailbreaking remove that separation. Many owners do it for customisation, and it is not wrongdoing in itself.
The same access is what attackers use to inspect an app, change its code while it runs, fake the device’s location, or read secrets it stores.
Why it matters to an app owner
- In-app purchases, credits and rewards can be tampered with.
- Hooking tools can alter responses or skip checks in the app.
- Location can be faked in apps that depend on it.
- Sensitive data stored on the device is easier to extract.
What detection can and cannot do
Detection runs on the device, so a determined attacker can hide from it. Treat the result as evidence, not as proof, and keep a decision to your server rather than inside the app. A reasonable response is to ask for extra verification or limit high-risk actions, not always to refuse the user.
Where FingerPrint Checker fits
Apps built with the FingerPrint Checker mobile SDKs report whether the device is rooted or jailbroken, each as true, false or unknown. The result is recorded and returned to you with the event, but it is not scored yet: it does not change the trust score or the decision, and it acts only through rules you write in your own code.
Frequently asked questions
Is rooting or jailbreaking illegal?
In most places it is not illegal for the owner of a device, though it can void a warranty and breach an app’s terms.
Should I block rooted devices?
Often not outright. Many owners are honest. Limit sensitive actions or ask for a second step instead, based on your risk.
Can jailbreak detection be bypassed?
Yes. Because it runs on the device, a skilled attacker can hide it. That is why you should combine it with server-side checks.
Try it on your own sign-up flow
Every new account gets 2,000 free checks. No card required.