[BUG] AppLock defeated

[helpdeskdan]

I'd like to briefly praise the author for working on this project and making it available for free on F-Droid. The state of android security is abysmal.

My 12 year old has discovered how to defeat just about any Android lock, including AppLock. When you pull up settings, you get a split second before the lock screen come up. If you switch apps, back and forth, you get many split seconds. If you are patient, you can, very slowly, navigate through settings till you get to accessibility permissions. From there, you can revoke accessibility on AppLock and it stops working.

[rushb1331uwu]

You can also use pop-up view if its enabled for every app

[PYUDNG]

You can use Shizuku mode to avoid this, but Shizuku mode has its own drawbacks—the Shizuku service will stop working as soon as the phone is restarted. Similarly, popup view can also bypass the app lock...
Due to the numerous system features in Android that may interfere with the app lock, it is quite difficult to make it completely unbypassable. I recommend using this app lock in non-critical or less important scenarios: As the saying goes, "It keeps out the honest but not the determined." It can create some obstacles for those trying to access your apps, but it’s challenging to completely stop them.

[helpdeskdan]

Thank you kindly to rushb1331uwu and PYUDNG for your responses. Perhaps Shizuku running as root could solve this issue? I've never tried Shizuku and don't know how to use it. I will have to look into that.

I applaud your efforts and encourage you to continue working on this app.

[PranavPurwar]

For the issue about Shizuku on reboot, you can follow these instructions to automatically start it whenever you reboot the phone. RikkaApps/Shizuku#462

[helpdeskdan]

With Shizuku and all experimental functions, AppLock works quite well! It is VERY difficult to disable necessary functions in the settings. Not impossible, but MUCH more difficult! Excellent work!

I wonder if there is a way to automatically re-enable permission functions, perhaps on boot.....

[helpdeskdan]

TDLR:

If you are using Shizuku, and you disable accessibility - AppLock still works! That's fantastic progress! It works till reboot, that's what I need to solve. Possible options:

Option 1. Auto re-enable Accessibility using root?
Option 2. Child can login with fingerprint and not code? (Another problem, android randomly asks for code only)

[PranavPurwar]

Makes sense, I will add it. As for the original issue, I think it could work if I make it such that if accessibility service is enabled (or anti uninstall is enabled), whenever accessibility access is taken away, start it instantly with Shizuku back again. I'd have to check out if Android allows that though, recent restrictions have made it really hard.

[helpdeskdan]

Might be possible to re-enable accessibility with root, but that does not help most people.

[PranavPurwar]

Hey @helpdeskdan could you try the new build? that basically makes it more difficult to bypass it + like 10 times more annoying just to try it

edit: I tried using Shizuku to enable accessibility service, it doesn't seem to work. The service is not relaunched as is expected.

[helpdeskdan]

Sure, I'm on 1.5.1, do you have a newer build? Shizuku mode? (Accessibility Service seems to stop working after a while, maybe I should open a bug for that)

[PranavPurwar]

Yes, nightly build such as https://github.com/PranavPurwar/AppLock/actions/runs/18168845821 would work. Scroll down to the artifacts section and download the apk-debug build

[helpdeskdan]

I'm not sure, I think it crashes on install.

Feature Request: Show app version somewhere in app

[rushb1331uwu]

Nope i tried it on the nightly you provided and it still is bypassable
Even using shizuku