i want to know does the android device id change when the android version is update to latest. If it changes, how can i get notified about the version change.
This may no longer be a correct answer. The following from https://android-developers.googleblog.com/2017/04/changes-to-device-identifiers-in.html
Android ID
In O, Android ID (Settings.Secure.ANDROID_ID or SSAID) has a different value for each app and each user on the device. Developers requiring a device-scoped identifier, should instead use a resettable identifier, such as Advertising ID, giving users more control. Advertising ID also provides a user-facing setting to limit ad tracking.
Additionally in Android O:
The ANDROID_ID value won't change on package uninstall/reinstall, as long as the package name and signing key are the same. Apps can rely on this value to maintain state across reinstalls.
If an app was installed on a device running an earlier version of Android, the Android ID remains the same when the device is updated to Android O, unless the app is uninstalled and reinstalled.
The Android ID value only changes if the device is factory reset or if the signing key rotates between uninstall and reinstall events.
This change is only required for device manufacturers shipping with Google Play services and Advertising ID. Other device manufacturers may provide an alternative resettable ID or continue to provide ANDROID ID.
Device ID is a 64-bit number (as a hexadecimal string) that is randomly generated on the device’s first boot and should remain constant for the lifetime of the device, though the value may change if a factory reset is performed on the device.
The device ID does not change when the Android version is updated to the latest version. If you want to change your device ID then visit here.
Yes it changes,
I found that device ID changed in my case. In my app each device is connected with my database for certain special tasks, varies device by device and I uniquely identify each device by Settings.Secure.ANDROID_ID which gives me device unique ID.
But I found that that it changed on one of Samsung android device and disconnected from Database Server.
Related
I found an application & they are using Device Identity as user login. After uninstall & install its showing same DeviceID.
When I test this app on my android device. The device identity doesn't match with this String.
String android_id = Settings.Secure.getString(this.getContentResolver(),
Settings.Secure.ANDROID_ID);
But when I tried this on android emulator string matched with that app device ID.
But in my physical Device....
Showing on that app: 93edad60438f8004
Getting String Device ID: 5f1cf6393c37ae96
How can I get device ID as that application?
That App on Emulator
Emulator Device ID
As of Android 26, every app on the device gets told a different Android ID for privacy reasons. This prevents companies from being able to share data on a user without his permission by just correlating the device id.
Also, a device id should NEVER be used as login credentials. I can get a version of Android that allows me to claim whatever id I want on an emulator with a quick recompile of AOSP. It can be spoofed way too easily. If you need to be able to log in a device, use a randomly generated key from your server and encrypt it with a key stored in the keystore. Do not count on an hardware identifier. They can be spoofed, and just as importantly you can't revoke them without breaking the user's ability to use your app. With a randomly generated token you can invalidate it server side and the user just has to log in again.
I have an application in which I want to identify the device with Unique ID,
I have tried multiple solutions but doing after phone reset unique ID gets changed(like ANDROID_ID)
I have used below StackOverflow links which are not usable now.
Is there a unique Android device ID?,
How to get unique device numer in Android?,
Get Unique ID of Android Device?,
How to get unique device hardware id in Android?,
Get unique device ID in android
Android Q has restricted access for IMEI and serial number. It is available only for platforms and apps with special carrier permission. Also, permission READ_PRIVILEGED_PHONE_STATE is not available for non-platform apps.
Many people may mark this as duplicate but please note that
I am looking for a unique id that will last for a device. (which will not change even after resetting/formating the device)
It's not possible in latest Android versions by design to prevent apps from tracking devices due to privacy reasons. Especially if you want to track after a device factory reset as mentioned.
See Best Practices Guide
Recommendation is to use Advertising ID and not associate it with any hardware identifiers. You may identify the user account, but not the device itself. This allows the user to change the user account if they deem necessary or uninstall/reinstall the app at worst.
Play Store policy notes
Association with personally-identifiable information or other identifiers. The advertising identifier must not be connected to personally-identifiable information or associated with any persistent device identifier (for example: SSID, MAC address, IMEI, etc.) without explicit consent of the user.
Now, you may track a device as long as
you don't distribute your app via the play store (i.e sideloading, but you do risk getting booted if Play Protect on device may notice you. I can't remember the default setting, but if the device has play services, it may scan sideloaded apps and remove them if it finds malicious behavior.)
Use hardware identifiers on older versions of Android, (still subject to Play Protect, and also Play Store if you distribute through there) or force users to use a custom ROM
I am getting different Android IDs for same device for 2 apps in spite of they are being signed with same keystore. This problem is occurring only in Android Oreo OS. Can anyone help me why there are 2 different Android IDS generated?
The method i am using for Android Id -
int deviceId = Settings.Secure.getString(pContext.getContentResolver(), Settings.Secure.ANDROID_ID)
Its behaving as intended. in Android 8.0, the value of ANDROID_ID is now scoped per app means ANDROID_ID is now unique for every app
Please Read about Android 8.0 Behavior Changes
For apps that were installed prior to an OTA to a version of Android 8.0 (API level 26) (API level 26), the value of ANDROID_ID remains the same unless uninstalled and then reinstalled after the OTA. To preserve values across uninstalls after OTA, developers can associate the old and new values by using Key/Value Backup.
For apps installed on a device running Android 8.0, the value of ANDROID_ID is now scoped per app signing key, as well as per user. The value of ANDROID_ID is unique for each combination of app-signing key, user, and device. As a result, apps with different signing keys running on the same device no longer see the same Android ID (even for the same user).
That is the expected behaviour on Oreo and above devices. Device Id is now unique for every app for each user.
Android official documentation:
For apps installed on a device running Android 8.0, the value of
ANDROID_ID is now scoped per app signing key, as well as per user. The
value of ANDROID_ID is unique for each combination of app-signing key,
user, and device. As a result, apps with different signing keys
running on the same device no longer see the same Android ID (even for
the same user).
Link: https://developer.android.com/about/versions/oreo/android-8.0-changes
Since Android 8, android_id is "unique to each combination of app-signing key, user, and device" so as to deny "developers the ability to track users across multiple applications". These unique IDs are stored in
/data/system/users//settings_ssaid.xml.
When android_id value init, the first time set the value?
Which case does the android_id value change?
As evident, android_id "is randomly generated when the user first sets up the device and should remain constant for the lifetime of the user's device" unless a factory reset is performed which clears all settings.
On Android 8+ the app specific android_id "value may change if a factory reset is performed on the device or if an APK signing key changes".
Keeping all in view it doesn't seem a good idea to build a device_id with android_id.
We use the below code to get a unique ID:
String id = Settings.Secure.getString(mContext.getContentResolver(),
Settings.Secure.ANDROID_ID);
In the Android O changes guide we can see the below points:
Android O makes the following privacy-related changes to the platform.
https://developer.android.com/preview/behavior-changes.html
The platform now handles identifiers differently.
Values of ANDROID_ID are now scoped per-app instead of per-user. The value of ANDROID_ID is unique for each combination of application package name, signature, user, and device. Two apps running on the same device no longer see the same Android ID, and so cannot correlate.
The value of ANDROID_ID does not change on package uninstall or reinstall, as long as the package name and signing key are the same.
The value of ANDROID_ID does not change if the package signing key changes due to an update.
For apps that were installed prior to the OTA, the value of ANDROID_ID remains the same unless uninstalled and then reinstalled.
If you wish to continue using Android ID for device-bound free trial protection, you can do so. Make sure that the package name and signature match.
For a simple, standard system to monetize apps, use Advertising ID. Advertising ID is a unique, user-resettable ID for advertising, provided by Google Play services.
My understanding of the above is that now the Android_ID going forward will be app bound rather than device bound. However I am confused about the below point:
For apps that were installed prior to the OTA, the value of ANDROID_ID remains the same unless uninstalled and then reinstalled.
If you wish to continue using Android ID for device-bound free trial protection, you can do so. Make sure that the package name and signature match.
1) What does this mean? Unless my app is reinstalled it will continue having the legacy android_id, even if we send an update?
2) If you wish to continue using Android ID for device-bound free trial protection, you can do so. Make sure that the package name and signature match.: what does this mean?
1) Imagine your app has the id abc when installed on an N device. Now when the device gets updated to O the device id returned to you will continue to be abc. However if the user uninstalls and reinstalls the app after upgrading to O, ANDROID_ID will change to some other value.
On the other hand if the app was installed on an O device and is then uninstalled and reinstalled the ANDROID_ID will remain the same.
2) It means that as long as the package name and signature remain the same the value of ANDROID_ID will remain the same. It will also remain the same if your app gets updated on an O device and the signature changes.
Essentially, android will now use the package name/ signature to generate the unique identifier on O.
The android documentation is not explicit about the ANDROID_ID values for applications with different package names but shared User ID value and signed with same key. The tests on Nexus 5, Android O Beta 3 show the value of Android ID for 2 applications is same in this case also.
I depends on device.uuid to control my users, Does UUID change when factory reset, in Phonegap android.
If you are talking about device UUID for android , its a random ID generated on first boot of the device. It will stay the same until OS upgrade or Factory Reset. So you can use that id as an unique identifier for the device from your app. This way users don't even need to sign in to your app. Just by opening itself you get a unique (almost) identifier, that you could use.
According to the docs:
A 64-bit number (as a hex string) that is randomly generated when the user first sets up the device and should remain constant for the lifetime of the user's device. The value may change if a factory reset is performed on the device.
Useful articles from android developers Identifying App Installations and Best Practices for Unique Identifiers.
Update with new information:
On Android 8.0 (API level 26) and higher versions of the platform, a 64-bit number (expressed as a hexadecimal string), unique to each combination of app-signing key, user, and device. Values of ANDROID_ID are scoped by signing key and user. The value may change if a factory reset is performed on the device or if an APK signing key changes. For more information about how the platform handles ANDROID_ID in Android 8.0 (API level 26) and higher, see Android 8.0 Behavior Changes.
Note: For apps that were installed prior to updating the device to a version of Android 8.0 (API level 26) or higher, the value of ANDROID_ID changes if the app is uninstalled and then reinstalled after the OTA. To preserve values across uninstalls after an OTA to Android 8.0 or higher, developers can use Key/Value Backup.
Old answer
device.uuid on android it gets the native android.provider.Settings.Secure.ANDROID_ID
According to the docs
A 64-bit number (as a hex string) that is randomly generated when the
user first sets up the device and should remain constant for the
lifetime of the user's device. The value may change if a factory reset
is performed on the device.
Note: When a device has multiple users (available on certain devices
running Android 4.2 or higher), each user appears as a completely
separate device, so the ANDROID_ID value is unique to each user.
So yes, if the user do a factory reset the value may change.