Connect with us

Tips & Tricks

[FIX] SafetyNet Failed: CTS Profile Mismatch Errors – Full Guide!



This article is all about the CTS Profile Mismatch Error and how to fix it. 

Before starting with the steps to fix the Magisk CTS Profile False/Mismatch Errors, let’s first understand what is ‘SafetyNet.’ We all know that rooting our Android phones give us a lot of freedom and we can do some great things with a rooted smartphone like installing a custom ROM, a custom Kernel, overclocking the processor, etc.

But, if you have a device with which you use Google’s Android Pay, then it won’t work if you root your phone. SafetyNet is a thing that Google uses to detect whether your Android smartphone is rooted or not and if it detects that you have a rooted phone, certain apps can block you from accessing them. We have seen this with the Netflix app that users cannot even find the app to download from the Play Store if their devices are rooted.

CHECK OUT – How To Hide Home Button on Galaxy S8’s Always On Display

Magisk, as most of you might know, is a Universal Systemless Interface, to create an altered mask of the system without changing the system itself. (Thanks, XDA). With Magisk and Systemless root, we can skip most of the SafetyNet tests, revert but the thing is that the Google’s Compatibility Test Suite (CTS) is still a problem.

So, you might get the ‘Magisk safetynet CTS Profile Mismatch Error’ even if you have the Magisk installed on your android phone. So, assuming that you have already installed the Magisk, let’s start with the steps to fix this error.

CTS Profile Mismatch Magisk

TIP – You can check your SafetyNet status from the Magisk Manager. You will find an option that says ‘Tap to start SafetyNet Check.’ Tap on that, and it will show you the status.



CTS Profile Mismatch Magisk

So, the thing is that if you have rooted your smartphone and it is having any other root manager than the MagiskSU, then the chances are that it doesn’t hide from Google’s SafetyNet and you get the error. SuperSU, which is the most popular root manager app, is on almost every rooted device so, if you want to get rid of the CTS error, make sure that you are using the MagiskSU and not SuperSU. So, here is how to switch from SuperSU to MagiskSU –

  • If you have the Xposed Installer installed, then uninstall it. No need to worry about all the modules you were using. You can install the systemless version of the Xposed using Magisk. To uninstall Xposed, go to Framework > Uninstaller and choose ‘Uninstall’ option. After the process completes, reboot your device by tapping on the ‘Reboot’ option.
  • This step is a bit trickier, and if, you have made any changes in the system after rooting your phone, you need to revert them. For Example, let’s suppose you removed the bloatware apps via Titanium Backup. So, you need to install them again.  Or, let’s assume that you used AdAway to remove ads. So, you need to remove that also. And we all know what’s the best way to revert all the changes – Flashing the Stock System Image of your phone.
  • Now, you need to Unroot via the option in SuperSU and then, restore the Stock Boot Image of your phone. For that, Go to the SuperSU app and then settings. There, you will find an option called ‘ Full Root.’ Just tap on that and tap ‘Continue.’ Now, it will ask you if you want to restore the stock boot image. Here, make sure that you tap on ‘Yes’ option. Now, for installing Magisk, you need TWRP installed, so if you already have TWRP, you need to tap on ‘No’ when SuperSU asks if you want to restore the stock recovery image.
  • Now, you need to install the Magisk zip. For this, head to the Magisk Manager app and go the Install section. Here, you will find an option named ‘Download.’ Tap on that and once downloaded, boot into recovery. Once you are in TWRP, tap on ‘Install’ and select the Magisk ZIP file from the Magisk Manager folder. To flash the ZIP file, slide the button to the right and when finished, tap on ‘Reboot System.’
  • Now, got to Magisk Manager app, and go to settings. Here, make sure to enable  Magisk Hide, BusyBox, and Systemless hosts options. Lastly, clear the data of the Play Store by going to Settings > Apps > Play Store > Manage Space > Clear Data.

Now, head to the Magisk Manager app and go to Magisk Hide. Make sure that this option is enabled and it will be used to hide additional apps like Google Play Store and Google Services Framework and other apps that you think are having the issues with SafetyNet.

READ: How To Save Game Data On Android With Helium


If you are unable to fix the CTS Profile Mismatch error even after doing everything mentioned above, you can try unSU. We have to use this because, i.e., even after doing the ‘Full Unroot’ via the SuperSU, not all the data of the SuperSU is removed. The developer osm0sis has created a flashable zip that you can download and flash via TWRP. The flashing procedure is same as you flashed the MagiskSU ZIP.



CTS Profile Mismatch Magisk

So, we also don’t know why but the CTS Profile Mismatch error can occur even with Magisk installed if you have turned on the ‘USB Debugging’ Option. So, you need to head to the Settings? Developer Options and then, turn off the ‘USB Debugging.’ Lastly, do a reboot and check if the issue has been fixed or not.


This is a pretty simple step. So, back in time if you ever changed the SELinux mode to ‘Permissive,’ then you need to revert it to ‘Enforcing,’ i.e., the default mode. So, open the same app via which you change the SETLinux Mode to Permissive and change the mode back to ‘Enforcing’. Now, you need to reboot the phone. You can find the apps to do so on XDA easily.

READ: [SOLVED] LG G4 Won’t Turn On or Boot Up? Here’s How To Fix


Having a custom ROM? Well, then you can try installing a custom Kernel. Why are we saying this? Well, the CTS is used by Google to verify that the device and its firmware meet the certification standards. A phone with custom ROM won’t pass this test. But, there is still a way. You need to install a custom Kernel known as the ‘Franco Kernel’ and to install this, you need to buy an app called ‘Franko Kernel Updater’ or ‘FKU.’ Once you have installed it, open it and then tap on ‘Download’ option. Don’t wanna spend money? Well, head to XDA, and you can find the best ‘Franco Kernel’ ZIP file for your smartphone for free.

The Franco Kernel helps in such a way that the apps that use SafetyNet check the Basic Integrity don’t get any error.


safetynet cts profile mismatch fix

This is probably the best thing to do if all the things mentioned above aren’t working at all. See, when you head over to the settings of Magisk Manager, you will see an option that says ‘Magisk Core Only Mode’ under the ‘Magisk’ options. Many users have reported that turning this particular option ON fixes the magisk CTS Profile false error. Google has already updated its SafetyNet to check if there is Magisk on a particular device or not. So, enabling the Core Only Mode helps a lot in this case.

So, what this option does? Well, enabling Masigk Core Only Mode means that all the Magisk Modules currently active are disabled and so, the only thing your phone has is the Superuser from Magisk and the root access. This step helps because sometimes, there are certain Magisk modules that cause issues with the SafetyNet test. And yes, make sure to reboot once you enabled the Magisk Core only mode.


cts profile false basic integrity false

A lot of users have recommended some more ways to fix the CTS Profile Mismatch error on their device. First, you need to go into the Magisk Settings and there, check if the ‘Magisk Hide’ option is turned on or not. If it is turned on, then simply turn it OFF and again turn it ON. Check if the error is there or not. If it is, then turn off the Magisk Hide option, reboot the phone, open Magisk Settings and turn On the Magisk Hide again.


If this too doesn’t fix it, then there is one more method suggested by some users who faced this problem. In the Magisk Settings, you will find two options – ‘Systemless Hosts’ and ‘Enable Busybox’. Disabling these two options may also help in fixing the CTS Profile False error.


This is a step that no one would like to take if the CTS Profile False issue occurs. Well, if nothing works, then the only way you have left to fix that error is to install the stock ROM again, install the custom recovery again, then flash Magisk ZIP file to gain the root access and check if the issue persists now or not. If you are lucky, the issue will be gone completely.

If you have a Xiaomi phone with a custom ROM installed, you can use this Magisk Module to pass the CTS test.


So, this was a detailed guide about fixing the CTS Profile Mismatch Error or Magisk Basic integrity False error even with Magisk installed. If the steps mentioned above don’t work, you need to start from scratch, i.e., flash Stock ROM, install TWRP, flash Magisk ZIP and do the same thing again. Did the steps work for you? Do let us know via the comments section.


What is CTS profile mismatch?

CTS means Compatibility Test Suite & CTS Profile Mismatch is an error that causes SafetyNet check to fail, even if you have Magisk on your device.

What is the SafetyNet Check?

Google Developed SafetyNet & it is an API (Application Programming Interface) that is used to detect if a certain device is in a good state or not.

How Do I Fix How do I fix Magisk SafetyNet?

1. Use MagiskSu
2. Try unSU
3. Turn OFF USB Debugging
4. Set Selinux Back to Enforcing
5. Try a Custom Kernel

How do I Enable Magisk Hide?

Open Magisk Manager App, then swipe from the left & select Magisk Hide. Now, you can turn on and off it for certain apps.

A Geek & Internet Freak currently pursuing Engineering Bachelors in Information Technology. A die-hard Android fan who keeps track of every little happening in the Android world. When not writing, he loves watching videos of his favourite creators on YouTube & he is the one who handles DroidHolic's YouTube channel as well!



  1. Fernando

    June 20, 2017 at 11:19 PM

    Hey Arvind, need some help here. I installed Resurrection Remix in my Moto G4 Play and don’t know what to do for passing the Safetynet. Do I have to change my rom or something? I only want to install Netflix.

  2. Madness

    August 31, 2017 at 8:18 AM

    I am on a Samsung Galaxy Note 5. I have tried everything in your list except the Franco Kernel since it doesn’t work on the Note5. I am running the LineageOS 7.1.1 by RaymanFX. Still getting “ctsProfile: false” in Magisk Manager. Any suggestions?

    • Madness

      August 31, 2017 at 8:19 AM

      I forgot to mention N920T – the T-mobile version.

    • Arvind Rana

      August 31, 2017 at 9:29 AM

      Well, in that case, you need to ask in XDA because we added all the steps that should be taken but those aren’t working for you.

  3. shivam

    December 14, 2017 at 3:20 PM

    coolpad Note 3
    After reboot my root is void

  4. steve

    April 19, 2018 at 8:32 AM

    thanks for the guide. for me i think it was just a matter of enabling magisk hide, after an update and re-root that option was not enabled. I am not sure but i think it was enabled automatically the first root. I also cleared play store data.
    -all’s right with the world now.

    • Dadank

      June 25, 2018 at 3:55 AM

      Can you please tell me all the points you did it? Because idk how to get certified of Google?:(

  5. Swierk

    March 10, 2020 at 5:25 PM

    does uninstalling play store (system app) will break safetynet pass on android 10?

    • Arvind Rana

      March 11, 2020 at 1:05 PM

      No Idea.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Copyright © 2016-19 DroidHolic. All Rights Reserved. Android is a trademark of Google LLC. DroidHolic is not affiliated, associated, authorized, endorsed by, or in any way officially connected with Google LLC., or any of its subsidiaries or its affiliates