
A phone ordered online
Before signing in, review the bootloader, root, SELinux and other system signals. This can reveal signs of firmware changes or unusual configuration.
Review root, bootloader, Android integrity and sensitive permissions.
Monthly or yearly subscription, no ads. Eligible new subscribers get 3 days free, as determined by Google Play. Then the full selected plan price applies.
Google Play shows your local price and billing period before confirmation. Renews automatically; cancel in Google Play. Without trial eligibility, payment is immediate. Reinstalling does not grant another trial. The trial is for eligible Google accounts that have never had any subscription in this app.
Check your device — and sleep peacefully.
Overall device security level

Before signing in, review the bootloader, root, SELinux and other system signals. This can reveal signs of firmware changes or unusual configuration.

Review root, bootloader, SELinux and system signals before paying. Findings may point to modifications; they do not prove that a phone is completely factory-original.

Review root, bootloader, SELinux and camera/microphone permissions after repair or updates. Compare with earlier scan results when available.

Before signing in, review root, bootloader, SELinux and sensitive permissions for unusual configuration or signs of previous use.

Review new permissions, network activity and device state if an installation is followed by unusual heat, battery drain or behaviour.

Compare app activity, camera/microphone permissions, network signals and system state rather than drawing a conclusion from one symptom.

Before issuing a phone to a new employee, review root, bootloader, SELinux, sensitive permissions and other system signals.

Check device security and permissions before opening a banking app.

Before issuing the phone again, review root, an unlocked bootloader, unusual permissions, network anomalies and other changes.

Periodic checks help a team review activity and system state on shared work devices.

Before using a crypto wallet or exchange, manually review root, bootloader, SELinux, sensitive permissions and network state.

Review the device before adding work accounts, certificates or confidential company information.
Looks for known root-related files and apps. A finding is an indicator; it does not prove active access by another person or data theft.
Shows the bootloader lock state when it can be determined. An unlocked bootloader alone does not prove that Android was replaced.
Reviews key Android properties and system signals to help show whether the device configuration looks normal or suspicious.
Helps assess the state of Android’s built-in protection.
Lists apps that hold camera and microphone permissions and helps the user review sensitive access more clearly.
Reviews available mobile-network signals and flags sudden changes to an older network generation. This alone does not prove an attack.
Shows which installed apps used Wi‑Fi or mobile data and helps the user understand traffic consumption by app and by period.
Shows battery temperature and highlights unusual values. Charging, use and surroundings affect temperature; heat alone is not proof of malware.
Checks whether Android developer options appear to be enabled so the user can notice an important device configuration state.
Checks for test-keys, which can indicate a test, engineering or modified Android build.
Shows whether USB debugging is enabled. This setting alone does not prove device compromise.
Looks for known indicators of tools that can modify Android or conceal modifications. No check guarantees their absence.
A quick check that replaces guesswork with clearer evidence.
Strange battery drain, an app you don't remember installing, a permission you never noticed you granted.
Check your system, permissions and network in one app.
Get clear results and practical guidance for your next steps.
Diagnostic checks do not guarantee the absence of threats and do not block data transfers. Android restrictions can make a result unavailable or not checked.
Review root, the bootloader and system protection to understand your Android device.
See which apps have access to sensitive device features.
Review your connection and internet use by app.
Check app authenticity and device integrity with Google Play.
Compare scan results and see how your device has changed.
The completed check did not find the condition it was designed to detect.
A configuration or signal deserves review, but is not by itself proof of compromise.
Review access and your internet connection, then run the check again.
A stronger risk indicator was detected. Open the check details or Assistant for guidance.
Choose the access that helps you get a fuller picture of your device.
For device-integrity and internet-connection checks.
For reviewing the current connection and available network details.
For a detailed Wi-Fi check. Your location coordinates are not used.
For reviewing mobile-network generation and signal strength.
For viewing internet use by app.
For result notifications when you choose to enable them.
For reviewing installed apps and their permissions on the device.
For resuming your chosen scan schedule after a restart.
For purchasing and restoring your subscription through Google Play.
Root Lab brings device checks, disk-image analysis and organized results together on Windows.
Learn how the app handles your data.