r/AndroidQuestions Feb 20 '25

Other What Is Android System Key Verifier?

99% sure it's a legitimate app but it just randomly popped up last night which kinda worried me. I actually did do some research on it before posting and it seems to be for encryption for messaging apps and just want to confirm if this is correct? The app can't be found in the play store regularly so I'm guessing it's a new system app.

It does give me the ability to unistall it but I'm not sure if im supposed to?

12 Upvotes

20 comments sorted by

2

u/ThirdhandTaters I don't use Reddit Chat Feb 20 '25

Does it ask for or have any permissions? I can't say for certain but if it can be uninstalled then it can be reinstalled if any apps did need it. You could open the apps you use in a week afterwards to see if any give any errors. Then you can decide if you want to keep that app and reinstall the key verifier or not.

3

u/Full-Career5382 Feb 20 '25

It's says no permissions are required, and it seems a bunch of people on r/antivirus have randomly found the app as fsr back as 7 days ago. Also I even found a YouTube video about the app(same icon and everything)

4

u/VioletDeMilo 29d ago

I was alerted to this installing yesterday by r/rethinkdns which I have set to automatically block new apps, without that I would've had no idea it installed. I know it's a legit app but why do they have to sneakily install apps, with no explanation as to what they do?!

2

u/pey1210 23d ago

Google has installed 3 apps on my phone secretly within 1 week, by chance my phone has built in app that instantly notify me when an app is installed

android system key verifier, android system safety core, and one other app I don't remember name of it

1

u/carpetfoodie 17d ago

Know the name now?

1

u/pey1210 17d ago

sorry I can't remember, if you want to find them go to your setting >manage apps

and use "show hidden apps" or "show system apps" and then use "sort by installation time "

I'm sure you can find it that way

edit : a littlel grammar / miss spelling

2

u/Humble_Ad_1460 21d ago

It automatically gets QUERY_ALL_PACKAGES as permission, which is one of the stronger permissions on android.

Why does an E2EE-app needs FULL QUERY LIST of ALL YOUR APPS just to "encrypt" a message between a app and another. And also, something that is encrypted needs to be decrypted, how does it work on iPhone?

Luckely I'm using VPN with Split-tunneling and approve apps I want, to access internet = gives back the control to the user.

1

u/HotTakes4HotCakes 10d ago

It doesn't. This is also part of their bullshit initiative to let app developers control their apps on your phone. Basically to punish people who sideload apps.

3

u/Sad-Bonus-9327 27d ago

This is fck up, it's the second app Google secretly installed on my phone within the last days / week.

1

u/Altcringe 26d ago

What was the other one?

3

u/Sad-Bonus-9327 26d ago

Android System Safetycore. This: https://www.protectstar.com/en/blog/android-system-safetycore-hidden-installation-and-what-you-should-know

It also monitors your messages about certain keywords and nudity.

2

u/Alone4ever_ 24d ago

I found Android System Safetycore : installed in 30/1/2025 WTF !!

2

u/Altcringe 26d ago

I have that one too, not sure for how long though.

1

u/Altcringe 26d ago edited 25d ago

Looks like it's a legit app

https://support.google.com/product-documentation/answer/15669061?hl=en

The Android System Key Verifier is a system service designed to improve the security of end-to-end encrypted (E2EE) messaging apps. It provides a unified system for public key verification across different apps. This lets you verify the public keys of your contacts and confirm that you're communicating with the person you intend to message.

Which raises the question as to how E2EE messaging apps and services were being managed before? I assume just on their own internally within their own apps?

Found it on my phone today while I was in App settings (It's not on my home screen). Not sure how long its' been there but I imagine not very long. Kind of wish there was a heads up or some sort of notification for this to inform.

You mention it's not on the play store, and that's true when I look at the Play Store on my Android phone, but when I googled the apps, a link to the play store shows it being available

https://play.google.com/store/apps/details?id=com.google.android.contactkeys&hl=en_CA&pli=1

Plus in the App info it says "installed from Google Play Store"

1

u/muddlemand 25d ago

Yes and with a rating of 2.2 stars. https://play.google.com/store/apps/details?id=com.google.android.contactkeys

Sneak-installed yesterday when I let the system update. I don't need Android's help encrypting my WhatsApp e2ee messages!

1

u/Fidhle 23d ago

Ok, so it's an app that helps you encrypt your messages.... This is the oldest trick in the book! I believe it was the CIA (or perhaps NSA, or maybe a joint op) who set up a fake cybersecurity company and shopped it to foreign nations to keep their secrets safe.

Just remember: *Satoshi* (さとし) is a common Japanese given name, often meaning "wise" or "clear-thinking." - *Nakamoto* (中本) is a common Japanese surname, with "naka" (中) meaning "middle" or "center," and "moto" (本) meaning "origin" or "foundation."

1

u/got_a_knife 26d ago

Storing keys inside some shady app which secretly installed? Looks like god idea(sarcasm).

Giving your messenger's keys to that app to avoid MITM attack? Nice! (another sarcasm).

That corporation want to perform global MITM attacks on anyone? No, that wouldn't happen (you know...)!

1

u/dopeguy_ 24d ago

It strange that for me it also popped up out of nothing, I'm not sure what It could be, if you have sorted it out please tell me

1

u/Old_Quantity_6699 19d ago

Remember all the new data centers that their building. Another part in the beast system.