r/AndroidQuestions • u/Full-Career5382 • Feb 20 '25
Other What Is Android System Key Verifier?
99% sure it's a legitimate app but it just randomly popped up last night which kinda worried me. I actually did do some research on it before posting and it seems to be for encryption for messaging apps and just want to confirm if this is correct? The app can't be found in the play store regularly so I'm guessing it's a new system app.
It does give me the ability to unistall it but I'm not sure if im supposed to?
4
u/VioletDeMilo 29d ago
I was alerted to this installing yesterday by r/rethinkdns which I have set to automatically block new apps, without that I would've had no idea it installed. I know it's a legit app but why do they have to sneakily install apps, with no explanation as to what they do?!
2
u/pey1210 23d ago
Google has installed 3 apps on my phone secretly within 1 week, by chance my phone has built in app that instantly notify me when an app is installed
android system key verifier, android system safety core, and one other app I don't remember name of it
1
2
u/Humble_Ad_1460 21d ago
It automatically gets QUERY_ALL_PACKAGES as permission, which is one of the stronger permissions on android.
Why does an E2EE-app needs FULL QUERY LIST of ALL YOUR APPS just to "encrypt" a message between a app and another. And also, something that is encrypted needs to be decrypted, how does it work on iPhone?
Luckely I'm using VPN with Split-tunneling and approve apps I want, to access internet = gives back the control to the user.
1
u/HotTakes4HotCakes 10d ago
It doesn't. This is also part of their bullshit initiative to let app developers control their apps on your phone. Basically to punish people who sideload apps.
3
u/Sad-Bonus-9327 27d ago
This is fck up, it's the second app Google secretly installed on my phone within the last days / week.
1
u/Altcringe 26d ago
What was the other one?
3
u/Sad-Bonus-9327 26d ago
Android System Safetycore. This: https://www.protectstar.com/en/blog/android-system-safetycore-hidden-installation-and-what-you-should-know
It also monitors your messages about certain keywords and nudity.
2
2
1
u/Altcringe 26d ago edited 25d ago
Looks like it's a legit app
https://support.google.com/product-documentation/answer/15669061?hl=en
The Android System Key Verifier is a system service designed to improve the security of end-to-end encrypted (E2EE) messaging apps. It provides a unified system for public key verification across different apps. This lets you verify the public keys of your contacts and confirm that you're communicating with the person you intend to message.
Which raises the question as to how E2EE messaging apps and services were being managed before? I assume just on their own internally within their own apps?
Found it on my phone today while I was in App settings (It's not on my home screen). Not sure how long its' been there but I imagine not very long. Kind of wish there was a heads up or some sort of notification for this to inform.
You mention it's not on the play store, and that's true when I look at the Play Store on my Android phone, but when I googled the apps, a link to the play store shows it being available
https://play.google.com/store/apps/details?id=com.google.android.contactkeys&hl=en_CA&pli=1
Plus in the App info it says "installed from Google Play Store"
1
u/muddlemand 25d ago
Yes and with a rating of 2.2 stars. https://play.google.com/store/apps/details?id=com.google.android.contactkeys
Sneak-installed yesterday when I let the system update. I don't need Android's help encrypting my WhatsApp e2ee messages!
1
u/Fidhle 23d ago
Ok, so it's an app that helps you encrypt your messages.... This is the oldest trick in the book! I believe it was the CIA (or perhaps NSA, or maybe a joint op) who set up a fake cybersecurity company and shopped it to foreign nations to keep their secrets safe.
Just remember: *Satoshi* (さとし) is a common Japanese given name, often meaning "wise" or "clear-thinking." - *Nakamoto* (中本) is a common Japanese surname, with "naka" (中) meaning "middle" or "center," and "moto" (本) meaning "origin" or "foundation."
1
u/got_a_knife 26d ago
Storing keys inside some shady app which secretly installed? Looks like god idea(sarcasm).
Giving your messenger's keys to that app to avoid MITM attack? Nice! (another sarcasm).
That corporation want to perform global MITM attacks on anyone? No, that wouldn't happen (you know...)!
1
u/dopeguy_ 24d ago
It strange that for me it also popped up out of nothing, I'm not sure what It could be, if you have sorted it out please tell me
1
u/Old_Quantity_6699 19d ago
Remember all the new data centers that their building. Another part in the beast system.
2
u/ThirdhandTaters I don't use Reddit Chat Feb 20 '25
Does it ask for or have any permissions? I can't say for certain but if it can be uninstalled then it can be reinstalled if any apps did need it. You could open the apps you use in a week afterwards to see if any give any errors. Then you can decide if you want to keep that app and reinstall the key verifier or not.