com.samsung.android.knox.attestation

Samsung's on-device agent that proves to apps and servers that a Galaxy phone has not been rooted or tampered with. You can disable it, with a caveat: read what stops working first.

What it does

Knox Attestation lets an app or a company server ask Samsung whether a Galaxy phone is in a trustworthy state, for example that it runs official firmware and has not been rooted. This package is the device side of that check: it gathers the evidence and returns a signed result that Samsung's attestation server verifies. It has no screen and runs only when an app asks for an attestation.

Also shown as Knox Attestation.

If you disable it

Apps or company services that require a Knox integrity check, such as some banking, payment and work apps, may refuse to run or enroll.

How to disable it

On most phones Settings greys out Disable for this package, so ADB is the way to turn it off. The commands below work without root and can be undone.

adb shell pm disable-user --user 0 com.samsung.android.knox.attestation

adb shell pm enable com.samsung.android.knox.attestation

The stronger option removes it for your user only; the original copy stays on the phone and a factory reset brings it back. Prefer disabling: it is easier to undo.

adb shell pm uninstall -k --user 0 com.samsung.android.knox.attestation

adb shell cmd package install-existing com.samsung.android.knox.attestation

New to ADB? Set it up in about ten minutes.

Data and battery

Sends device integrity measurements to Samsung's attestation server when an app requests a check.

Where it appears

• Made by Samsung Electronics.
• Android versions: 9 to 16.
• Seen on: Galaxy S25 Ultra, Galaxy S25, Galaxy S25+, Galaxy S24 Ultra, Galaxy S24.