HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
topjohnwu
Magisk
Kotlin2019–2026
topjohnwu / Magisk

Magisk

The Magic Mask for Android

20Distinct people
25Mentions
0Explicit recommenders
64KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

The Magic Mask for Android

GitHub

Where it is used

No documented product use was verified in the last source check.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

Mentioned in the same Hacker News threads. That is not proof they are substitutes.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 5:04:57 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year25 dated mentions

Observed mentions: 2019-02-17 14:39:38 UTC to 2026-10-23 19:18:56 UTC.

02462019-01-01 00:00:00 UTC to 2020-01-01 00:00:00 UTC (exclusive): 3 mentions; 1 submissions, 2 comments20192020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 6 mentions; 0 submissions, 6 comments2021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 3 mentions; 0 submissions, 3 comments20222023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 4 mentions; 1 submissions, 3 comments2024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 5 mentions; 3 submissions, 2 comments2026-01-01 00:00:00 UTC to 2027-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments. Incomplete calendar period.2026*

* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20192019-01-01 00:00:00 UTC2020-01-01 00:00:00 UTC312
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC606
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC101
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC303
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC413
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC202
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC532
2026 (partial)2026-01-01 00:00:00 UTC2027-01-01 00:00:00 UTC101

What Hacker News says

25 sources
Unless your Pixel 4a is from Verizon (locked), keep it. Unlock the bootloader, then install LineageOS, MindTheGapps, and Magisk. Once you have Magisk stabilized, install the Advanced Charging Controller, and configure it to halt charging at 80%. That should solve your problems, and turn the updates back on. I don't think there is a way to make Google Pay work in this configuration, which is a drawback. I can put all the URLs here if you ask. Edit: https://lineageos.org/ [I did not remember that Lineage hosts gapps images] https://wiki.lineageos.org/gapps/ [IIRC, the APK is renamed to a ZIP and flashed with recovery, then name it back and install the app] https://github.com/topjohnwu/Magisk/releases/tag/v28.1 https://magiskmanager.com/ https://github.com/VR-25/acc/releases/tag/v2023.10.16
In Google Pixel 4a's old firmware is gone, trapping users on buggy battery update
If you have an Android phone (even if just an old one you don't use anymore, or a cheap one you're willing to buy) and you're willing to root it and wipe all data on it, you can: 1. Unlock the bootloader (if not already done) (this will wipe your device) 2. Install Authy on it and log into your Authy account 3. Root your device (I used Magisk https://github.com/topjohnwu/Magisk) 4. Once rooted, you can access the Authy app data and extract the TOTP secrets, then import them into a different app (there's a script to make this easier here https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d..., but you can also just go exploring manually in the root file system and find the Authy storage file) It was somewhat of a pain in the ass to do this, but Authy really annoyed me with how difficult they make it to migrate off of their bullshit
Read the rest
, so it was worth it to me to finally be able to delete their app after extracting the secrets this way.
In Ente Auth: open-source Authy alternative for 2FA
I have been running de-googled LineageOS since before it renamed/reformed from CyanogenMod, so since somewhere around 2013/14. That has looked rather different depending on what exactly I need from my phone but I'll share what my current set up looks like. First, I have don't use any kind of Google/Samsung/Apple Pay wallets so if you do, this may not be helpful; I've never looked into trying to get any of those working. Also, by "de-googled" I mean that I don't have GApps installed on my phone. I do have microG[0] installed as a Magisk[1]/LSPosed[2] module; this allows a few apps to believe I have GApps while most apps do not see/have access. I do not turn on microG for any apps (i.e. no connection to the Google servers/services via microG). Most of my apps come from F-Droid[3], a few from Aurora Store[4] (a 3rd-party frontend for the Pla
Read the rest
y Store that does not require either an account or GApps installed), a very few from FFupdater[5], and have played with using Obtanium[6] but currently only have one (weather) app updating via it. I have several different repositories configured in F-Droid but I don't generally keep mental track of which repository I am dependent on for which apps; the default, IzzyOnDroid[7], Bitwarden[8], NewPipe[9], microG[10], and Collabora[11] are some of them. I have two banking apps installed via Aurora Store, one of which requires microG and root-hiding (via Magisk module) while the other doesn't require either. My browsers (Firefox, Firefox Klar, Brave) come from FFupdater and none require microG. My texting (QUIK SMS), email (K-9 Mail), TOTP authenticator (Aegis), password manager (Bitwarden), GPS/Maps (OsmAnd), file syncing (Nextcloud), notes (Nextcloud Notes), HN reader (HN), and Contacts/Calendar sync (DAVx5, ICSx5) apps all come via F-Droid (either the main repo or others). I have many others apps which come from F-Droid or Aurora Store but the above are my most used. For file, calendar, notes, photo, & contact syncing, I have a Nextcloud server set up and find it to work quite well; the Nextcloud apps are also quite good. Someone who doesn't want to run their own could use a hosted account[12]. Contacts & calendars are synced to Nextcloud via DAVx5 & ICSx5. The primary challenges I am aware of at this point are hardware (it is increasingly difficult to install LineageOS on most hardware due to bootloader locks), and navigation (OpenStreetMap data usually doesn't include addresses in the USA). For hardware, the solution is essentially just to properly research the phone you want to buy; I always make sure the model is well supported by LineageOS before purchasing and then tend to hang on to it for several years. For navigation, I usually find the address on my desktop or mobile browser (via DuckDuckGo) and then manually input the location into OsmAnd before the trip but I also keep WeGo Here maps installed in case I don't have time for that (it usually takes <2 minutes and rarely more than 5 to manually find & enter the address). Additionally, getting the one banking app to work without GApps was a pain in the butt initially (requiring testing several Magisk & LSPosed modules), but now it just works and I don't really think about it. Overall, I don't find my version of de-googled to be a detriment; my phone is useful and I have more control over my data and over annoyances (such as unnecessary notifications) than I would otherwise. [0] https://microg.org [1] https://github.com/topjohnwu/Magisk [2] https://github.com/mywalkb/LSPosed_mod [3] https://f-droid.org [4] https://aurorastore.org [5] https://f-droid.org/packages/de.marmaro.krt.ffupdater | https://github.com/Tobi823/ffupdater [6] https://f-droid.org/packages/dev.imranr.obtainium.fdroid/ | https://github.com/ImranR98/Obtainium [7] https://apt.izzysoft.de/fdroid [8] https://mobileapp.bitwarden.com/fdroid [9] https://archive.newpipe.net/fdroid/repo [10] https://microg.org/fdroid.html [11] https://www.collaboraoffice.com/downloads/fdroid/repo [12] https://nextcloud.com/sign-up
In Google Fit APIs get shut down in 2025, might break fitness devices
This seems to be partly a Lineage problem - with probably some Android culpability mixed in. Lineage had their own very simple to install superuser addon, but that was dropped a few versions ago. Some Android changes prompted this, but probably also their attitude against rocking the boat (no rooting, no signature spoofing, etc). The remaining solution was Magisk. Magisk was equally easy to install, but recently deprecated that easy install method so that only patching the ROM file remains (you get that file from the ROM you run, unpack the archive, if you are unlucky you need to unpack a second payload.bin file, https://wiki.lineageos.org/extracting_blobs_from_zips#extrac...). But not only is that more complicated, it also does not persist after a Lineage upgrade, which happens every week, see https://github.com/topjohnwu/Magisk/issues/3
Read the rest
820#issuecomment.... Totally crazy for a project not in early alpha. I want root to properly manage my battery via https://github.com/VR-25/acc ( with ideally https://github.com/MatteCarra/AccA as Magisk module). How ridiculously complicated that is now and that the install procedure is broken without them documenting it soured me quite a bit on Magisk, but I also start to develop some bad feelings about Lineage - because it is them that would be in the best position to provide a simple root solution. But they just refuse it, and even forbid discussing such topics on their subreddit - that alone shows me that the project is very user hostile currently. I doubt with that attitude they can make a turnaround, but I'd be happy to be wrong... Sadly the other bigger ROMs are to my knowledge not better in this category, neither /e/ with their service suite, nor DivestOS with the passionate developer nor CalyxOS or GrapheneOS with their "security" focus are interested in giving the user full access to their device. Android seems to be a dead end here, real Linux is needed.
In New F-Droid repository format for faster and smaller updates
Oh. I haven't rooted an Android device since 2014. I just did some lazy research for the version of LineageOS I'm using. Am I missing something, or is it normal to find the procedure confusing and somewhat scary? There is github.com/LineageOS/Superuser and github.com/topjohnwu/Magisk, it seems I need to build Superuser from source (yikes); Magisk from F-Droid wants to install a newer version from Github (but that doesn't work); the version that works wants to patch a ROM file, which I don't know where to get from... The app lists changelogs rather than instructions. I understand it's partly the fault of Android's security architecture, but I wish it was actually manageable for normal people.
In New F-Droid repository format for faster and smaller updates
Adding to the list of things that you can do with root on Android: - App Manager[1] has a powerful feature that lets you disable trackers in every single app on the device. (Menu > 1-Click Ops > Block/unblock trackers) - Neo Backup[2] is the most comprehensive backup app on Android, with automatic scheduling. It lets you back up and restore anything you want, including app data that the developer labeled "no_backup". - Install and upgrade apps from third-party app stores without needing to manually confirm each installation. Extremely useful for Aurora Store[3] and Neo Store.[4] - Universal SafetyNet Fix,[5] combined with MagiskHide Props Config[6] and Magisk,[7] allows you to spoof SafetyNet on your device to improve compatibility with apps that check for it, including some banking apps, commerce apps, and games. > trusting Magisk, going
Read the rest
without Clockwork Mod on many platforms, eschewing security updates I have no problem trusting Magisk[7] as a free and open source Android rooting solution. ClockworkMod Recovery has been discontinued for years. The most advanced Android recovery is TWRP,[8] and TWRP is not needed to root the device with Magisk. I don't know what you mean by "eschewing security updates" since rooting Android does not prevent you from receiving security updates. [1] App Manager: https://github.com/MuntashirAkon/AppManager [2] Neo Backup: https://github.com/NeoApplications/Neo-Backup [3] Aurora Store: https://f-droid.org/en/packages/com.aurora.store/ [4] Neo Store: https://github.com/NeoApplications/Neo-Store [5] Universal SafetyNet Fix: https://github.com/kdrag0n/safetynet-fix [6] MagiskHide Props Config: https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf [7] Magisk: https://github.com/topjohnwu/Magisk [8] TWRP: https://twrp.me/
In LineageOS 20
It's still possible to use XPrivacyLua (https://github.com/M66B/XPrivacyLua) with passing SafetyNet. It's a cat-and-mouse game, but the community is still ahead. You can achieve this with latest Magisk (v24+, https://github.com/topjohnwu/Magisk), enabled Zygisk and following modules: - LSposed Zygisk (https://github.com/LSPosed/LSPosed, fork of Xposed) - Universal SafetyNet Fix (https://github.com/kdrag0n/safetynet-fix) - Shamiko [optional, more hiding but needs configuration] (https://github.com/LSPosed/LSPosed.github.io)
In Google Maps now requires WiFi scanning to use navigation

Showing the 15 most recent of 25 sources. Enable JavaScript to search and browse every indexed mention.

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.