Firefox for Android adding Google Integrity checks
Firefox for Android adding Google Integrity checks
https://www.omgubuntu.co.uk/2026/06/mozilla-firefox-android-google-play-integrity
Publish Date: 2026-06-09 16:56:00
Source Domain: www.omgubuntu.co.uk
Mozilla is added support for Google’s Play Integrity API, known for blocking users of custom ROMs from accessing banking apps, to Firefox for Android.
According to a resolved issue in Mozilla’s public tracker, a new lib-integrity-googleplay library has been added to Firefox’s Android codebase. It requests a Play Integrity token, which is then passed to Mozilla’s MLPA (Machine Learning Proxy) server.
The token gates access to Firefox’s server-side AI tools, like Smart Window, for rate-limiting purposes. It means Mozilla can ensure that only unmodified, Play-installed copies of Firefox on Google-certified devices can use its1 compute resources.
Per documentation, developers can: “…call the Integrity API at important moments in your app to check that user actions and requests are coming from your unmodified app binary, installed by Google Play, running on a genuine Android device”.
“Your app’s backend server can decide what to do next to prevent abuse, unauthorized [sic] access, and attacks.”
It would not mean Firefox can no longer be installed or run on non-certified or rooted Android devices, but it could mean that users on non-certified or rooted devices can’t access all AI features in Firefox for Android.
Other device ‘attestation’ APIs are available for Mozilla to use which wouldn’t be as restrictive, and Mozilla had said it was open to exploring them.
This is not Ubuntu-related, but it is context for Mozilla’s machinations and intentions under the (now, not-so-)new leadership. Firefox is the default web browser in Ubuntu.
Nonetheless, the appearance of ‘device attestation’ in Firefox’s mobile codebase has raised eyebrows in the FOSS community, including from mobile projects based on the Android Open Source Project (AOSP) codebase, like Lineage OS and GrapheneOS, which omit Play services.
Given that Firefox’s entire USP on Android is that it’s an…
