Jump to content

MitID: Difference between revisions

From Consumer Rights Wiki
Stone (talk | contribs)
Updated the page, since i couldnt figure out how to do that on first commit
Stone (talk | contribs)
updated the references and text
Line 1: Line 1:
MitID App Blocked on Custom ROMs Like GrapheneOS Since June 2024 Due to Google API Changes The MitID app, Denmark's national digital ID, now fails activation on custom Android ROMs, displaying a "rooted or compromised" error due to new Google Play Integrity API requirements.{{IncidentCargo
MitID App Blocked on Custom ROMs Like GrapheneOS/CalyxOS/LineageOS Since June 2024 Due to Google API Changes
The MitID app, Denmark's national digital ID, now fails activation on custom Android ROMs, displaying a "rooted or compromised" error due to new Google Play Integrity API requirements.<ref name="grapheneos-issue1609">https://github.com/GrapheneOS/os-issue-tracker/issues/1609</ref><ref name="grapheneos-discuss">https://discuss.grapheneos.org/d/1520-status-of-mitid-app</ref>
{{IncidentCargo
|Company=Google
|Company=Google
|StartDate=2024-06-24
|StartDate=2024-06-12
|Status=Active
|Status=Active
|Product=Identification and person verification
|Product=Identification and person verification
|ArticleType=Service
|ArticleType=Service
|Type=Digital restrictions, Privacy, Ownership, Forced Migration
|Type=Digital restrictions, Privacy, Ownership, Forced Migration
|Description=MitID on android forces the use of Google play API to access your bank or any digital signatures in public and private self-service
|Description=MitID on Android forces the use of Google Play Integrity API to access banking or digital signatures in public and private self-service solutions
}}
}}
==Background==
==Background==
MitID is Denmark's national electronic ID system, primarily a smartphone/tablet app that serves as a personal digital key for secure login and digital signatures in public and private self-service solutions, such as accessing government services (e.g., skat.dk, borger.dk), online banking, and confirming online actions with a swipe.  
MitID is Denmark's national electronic ID system, primarily a smartphone/tablet app that serves as a personal digital key for secure login and digital signatures in public and private self-service solutions, such as accessing government services (e.g., skat.dk, borger.dk), online banking, and confirming online actions with a swipe.<ref name="norden">https://www.norden.org/en/info-norden/electronic-id-denmark-mitid</ref><ref name="borger">https://lifeindenmark.borger.dk/apps-and-digital-services/mitid</ref><ref name="digst">https://en.digst.dk/systems/mitid/</ref><ref name="mitid-about">https://www.mitid.dk/en-gb/about-mitid/</ref> Alternatives include code viewers or chips for those unable to use the app.<ref name="borger"/> In past similar incidents (e.g., a 2022-2023 outage), people contacted MitID developers directly, leading to quick fixes, but no such resolution has been reported for the current API-related block.<ref name="grapheneos-discuss"/> User complaints on platforms like Trustpilot highlight frustration with the app's security checks blocking non-standard devices, but official support responses focus on unrelated issues, such as language settings errors, without acknowledging or promising fixes for custom ROM users.<ref name="trustpilot">https://www.trustpilot.com/review/mitid.dk</ref> As a result, new activations remain impossible on uncertified ROMs, while pre-existing ones continue to function temporarily.<ref name="grapheneos-discuss"/>
==Incident==
Since June 12, 2024, MitID has enforced Google Play Integrity API checks during activation, which custom ROMs like GrapheneOS fail as they are not Google-certified.<ref name="lbschenkel">https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc</ref><ref name="grapheneos-discuss"/> Pre-existing activations may still work, but new ones do not.<ref name="grapheneos-discuss"/> The MitID app displays an error claiming the device is "rooted or compromised," preventing activation, as it fails the Google Play Integrity/SafetyNet checks required for verification.<ref name="grapheneos-issue1609"/><ref name="grapheneos-discuss274">https://discuss.grapheneos.org/d/1520-status-of-mitid-app/274</ref>
===Company Responses===
====MitID (Digitaliseringsstyrelsen)====
Digitaliseringsstyrelsen has not issued a public statement addressing the MitID app's incompatibility with custom ROMs due to Google Play Integrity API enforcement since June 12, 2024.<ref name="trustpilot"/> Support responses focus on unrelated issues, and no fix has been promised for new activations on uncertified devices, though pre-existing setups may work temporarily.<ref name="trustpilot"/><ref name="grapheneos-discuss"/>


Alternatives include code viewers or chips for those unable to use the app. In past similar incidents (e.g., a 2022-2023 outage), people contacted MitID developers directly, leading to quick fixes, but no such resolution has been reported for the current API-related block.
''(from one of the custom ROM forums a person mentioned that they did send a request for this issue, and the response received was that it won't be prioritised because of the small market share, reference needed)  
''


User complaints on platforms like Trustpilot highlight frustration with the app's security checks blocking non-standard devices, but official support responses focus on unrelated issues, such as language settings errors, without acknowledging or promising fixes for custom ROM users. As a result, new activations remain impossible on uncertified ROMs, while pre-existing ones continue to function temporarily.


==[Incident]==
Since June 12, 2024, due to MitID starting to enforce Google Play Integrity API checks during activation, which custom ROMs like GrapheneOS fail as they are not Google-certified. Pre-existing activations may still work, but new ones do not. The MitID app displays an error claiming the device is "rooted or compromised," preventing activation, as it fails the Google Play Integrity/SafetyNet checks required for verification.{{Ph-I-I}}


===[Company]'s response===
====GrapheneOS====
{{Ph-I-ComR}}
GrapheneOS developers have documented the issue, noting the Play Integrity API blocks new MitID activations, with no workaround.<ref name="grapheneos-issue1609"/> They recommend disabling app auto-updates to maintain existing setups and suggest using physical MitID code readers as an alternative.<ref name="grapheneos-discuss"/><ref name="grapheneos-discuss274"/>
 
====Google====
==Consumer response==
Google has not addressed MitID-specific issues, maintaining that Play Integrity API (fully enforced by May 2025) only certifies official OS builds for security, treating custom ROMs as untrustworthy, with no plans to support them despite advocacy.<ref name="lbschenkel"/>
==Consumer Response==
{{Ph-I-ConR}}
{{Ph-I-ConR}}
==References==
==References==
 
<references>
# <nowiki>https://www.norden.org/en/info-norden/electronic-id-denmark-mitid</nowiki>
<ref name="norden">https://www.norden.org/en/info-norden/electronic-id-denmark-mitid</ref>
# <nowiki>https://lifeindenmark.borger.dk/apps-and-digital-services/mitid</nowiki>
<ref name="borger">https://lifeindenmark.borger.dk/apps-and-digital-services/mitid</ref>
# <nowiki>https://en.digst.dk/systems/mitid/</nowiki>
<ref name="digst">https://en.digst.dk/systems/mitid/</ref>
# <nowiki>https://www.mitid.dk/en-gb/about-mitid/</nowiki>
<ref name="mitid-about">https://www.mitid.dk/en-gb/about-mitid/</ref>
# <nowiki>https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc</nowiki>
<ref name="trustpilot">https://www.trustpilot.com/review/mitid.dk</ref>
# <nowiki>https://discuss.grapheneos.org/d/1520-status-of-mitid-app</nowiki>
<ref name="lbschenkel">https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc</ref>
# <nowiki>https://www.reddit.com/r/dktechsupport/comments/1j8ps28er_der_nogen_med_grapheneos_som_har_en_funktionel/</nowiki>
<ref name="grapheneos-discuss">https://discuss.grapheneos.org/d/1520-status-of-mitid-app</ref>
# <nowiki>https://github.com/GrapheneOS/os-issue-tracker/issues/1609</nowiki>
<ref name="grapheneos-issue1609">https://github.com/GrapheneOS/os-issue-tracker/issues/1609</ref>
# <nowiki>https://discuss.grapheneos.org/d/1520-status-of-mitid-app/274</nowiki>
<ref name="grapheneos-discuss274">https://discuss.grapheneos.org/d/1520-status-of-mitid-app/274</ref>
# <nowiki>https://gist.github.com/lbschenkel/4199be415f2a139b64688ae74c92a7fc</nowiki>
<ref name="reddit-dktechsupport">https://www.reddit.com/r/dktechsupport/comments/1j8ps28/er_der_nogen_med_grapheneos_som_har_en_funktionel/</ref>
#
</references>
{{Ph-I-C}}
{{Ph-I-C}}

Revision as of 21:35, 17 October 2025

MitID App Blocked on Custom ROMs Like GrapheneOS/CalyxOS/LineageOS Since June 2024 Due to Google API Changes The MitID app, Denmark's national digital ID, now fails activation on custom Android ROMs, displaying a "rooted or compromised" error due to new Google Play Integrity API requirements.[1][2]

Background

MitID is Denmark's national electronic ID system, primarily a smartphone/tablet app that serves as a personal digital key for secure login and digital signatures in public and private self-service solutions, such as accessing government services (e.g., skat.dk, borger.dk), online banking, and confirming online actions with a swipe.[3][4][5][6] Alternatives include code viewers or chips for those unable to use the app.[4] In past similar incidents (e.g., a 2022-2023 outage), people contacted MitID developers directly, leading to quick fixes, but no such resolution has been reported for the current API-related block.[2] User complaints on platforms like Trustpilot highlight frustration with the app's security checks blocking non-standard devices, but official support responses focus on unrelated issues, such as language settings errors, without acknowledging or promising fixes for custom ROM users.[7] As a result, new activations remain impossible on uncertified ROMs, while pre-existing ones continue to function temporarily.[2]

Incident

Since June 12, 2024, MitID has enforced Google Play Integrity API checks during activation, which custom ROMs like GrapheneOS fail as they are not Google-certified.[8][2] Pre-existing activations may still work, but new ones do not.[2] The MitID app displays an error claiming the device is "rooted or compromised," preventing activation, as it fails the Google Play Integrity/SafetyNet checks required for verification.[1][9]

Company Responses

MitID (Digitaliseringsstyrelsen)

Digitaliseringsstyrelsen has not issued a public statement addressing the MitID app's incompatibility with custom ROMs due to Google Play Integrity API enforcement since June 12, 2024.[7] Support responses focus on unrelated issues, and no fix has been promised for new activations on uncertified devices, though pre-existing setups may work temporarily.[7][2]

(from one of the custom ROM forums a person mentioned that they did send a request for this issue, and the response received was that it won't be prioritised because of the small market share, reference needed)


GrapheneOS

GrapheneOS developers have documented the issue, noting the Play Integrity API blocks new MitID activations, with no workaround.[1] They recommend disabling app auto-updates to maintain existing setups and suggest using physical MitID code readers as an alternative.[2][9]

Google

Google has not addressed MitID-specific issues, maintaining that Play Integrity API (fully enforced by May 2025) only certifies official OS builds for security, treating custom ROMs as untrustworthy, with no plans to support them despite advocacy.[8]

Consumer Response

Summary and key issues of prevailing sentiment from the consumers and commentators that can be documented via articles, emails to support, reviews and forum posts.


Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.


References

Cite error: <ref> tag with name "reddit-dktechsupport" defined in <references> is not used in prior text.

Add a category with the same name as the product, service, website, software, product line or company that this article is about.

The "Incidents" category is not needed.


Add your text below this box. Once this section is complete, delete this box by clicking on it and pressing backspace.