Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The fix depends on which component failed. Missing Google apps usually means the wrong GApps package, an unsupported Android version or CPU architecture, or installation at the wrong point in the LineageOS process. A “Device is not certified” message is a Google certification problem. A banking app that refuses to open or authenticate is usually enforcing its own device-integrity policy. These are separate failures, so installing GApps or clearing Play Store data cannot guarantee that a bank app will work.

Start by recording the phone model and codename, LineageOS and Android versions, whether the build is official, the GApps package and version, root or other modifications, and the exact error. Then follow only the branch that matches the symptom.

Identify the failure before changing anything

Use the visible symptom to choose a safe troubleshooting path. Do not treat every Google-related error as a Play Integrity failure.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
What you see Most likely class of problem First check
Play Store, Gmail or other Google apps are absent Google Apps (GApps) were not installed, or the package does not match the device Android version, CPU architecture and the exact device installation guide
Play Store says “Device is not certified” Google Play Protect certification has failed Play Store certification status, bootloader state, OS modifications and root
Play Store says Google Play services is missing or outdated Google Play services is absent, disabled or unable to update The Google Play services app entry and its update state
One banking app will not launch, sign in or approve a payment The bank’s own security or integrity policy The bank, country, phone model, LineageOS build and exact message

Capture screenshots or write down the wording before clearing data or reinstalling. A message about certification is not evidence that a particular bank rejects the phone, and a bank’s rejection is not proof that GApps are incorrectly installed.

#1 Best Overall
Samsung Galaxy A17 5G Smart Phone 128GB US 1 Yr Manufacturer Warranty Black | Large AMOLED, High-Res Camera, Durable Design, Super Fast Charging, Expandable Storage, Circle to Search, 2025
  • YOUR CONTENT, SUPER SMOOTH: The ultra-clear 6.7" FHD+ Super AMOLED display of Galaxy A17 5G helps bring your content to life, whether you're scrolling through recipes or video chatting with loved ones.¹
  • LIVE FAST. CHARGE FASTER: Focus more on the moment and less on your battery percentage with Galaxy A17 5G. Super Fast Charging powers up your battery so you can get back to life sooner.²
  • MEMORIES MADE PICTURE PERFECT: Capture every angle in stunning clarity, from wide family photos to close-ups of friends, with the triple-lens camera on Galaxy A17 5G.
  • NEED MORE STORAGE? WE HAVE YOU COVERED: With an improved 2TB of expandable storage, Galaxy A17 5G makes it easy to keep cherished photos, videos and important files readily accessible whenever you need them.³
  • BUILT TO LAST: With an improved IP54 rating, Galaxy A17 5G is even more durable than before.⁴ It’s built to resist splashes and dust and comes with a stronger yet slimmer Gorilla Glass Victus front and Glass Fiber Reinforced Polymer back.

What Google Apps are—and why installation timing matters

LineageOS can boot and run without Google Apps. GApps are optional packages that add components such as the Play Store, Google Play services and other Google applications. The package must match both the Android version in the LineageOS build and the phone’s architecture. A package for a different Android release or architecture can leave apps missing, produce setup crashes or prevent Google services from registering correctly.

Use the GApps package recommended by the official device guide rather than choosing a package solely because its name looks familiar. Different LineageOS releases and architectures can require different packages; a package that worked on a previous installation is not automatically suitable for an upgrade.

Install GApps before the first LineageOS boot

LineageOS installation guidance requires the recommended Google Apps package to be sideloaded before the first boot into the newly installed system. The first-boot boundary matters because the setup process initializes the system with the packages present at that time.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Confirm the exact phone model and codename in the official LineageOS device guide.
  2. Verify the Android version and architecture required by that guide.
  3. Download the guide’s recommended GApps package for that release.
  4. Complete the required LineageOS installation steps in the guide and enter the recovery’s sideload function when instructed.
  5. Sideload the matching GApps package while still in recovery, before starting LineageOS for the first time.
  6. Reboot to LineageOS and complete setup, then check whether Play Store and Google Play services are present.

Do not assume that installing an arbitrary package from a running system is an equivalent repair. The documented sequence is part of the installation procedure.

If you already booted LineageOS without GApps

If the phone has already completed its first LineageOS boot, the documented recovery route is a factory reset, followed by sideloading the correct GApps package and then booting again. This erases the current user data, so back up anything you can still access before proceeding.

Rank #2
Tracfone Motorola Moto G 2025, 64GB, Saphire Blue (Locked to | Prepaid Smartphone- 6.6" 120Hz Display, 5G , 50MP Quad Pixel Camera, Long-Lasting Battery
  • Carrier: This phone is locked to Tracfone, which means this device can only be used on the Tracfone wireless network. Tracfone plan required, activating is easy, just 3 steps.
  • DISPLAY: Immersive viewing on a 6.7-inch super-bright 120Hz display with powerful stereo speakers and Bass Boost for cinematic entertainment.
  • CAMERA SYSTEM: Advanced 50MP Quad Pixel camera captures sharp, detailed photos and videos in any lighting condition
  • PERFORMANCE: Lightning-fast 5G connectivity paired with a powerful processor and RAM Boost for smooth multitasking.
  • BATTERY LIFE: Long-lasting 5000mAh battery with TurboPower charging technology delivers hours of power in minutes.
  1. Back up photos, authenticator data, messages and any files that are not already synchronized.
  2. Return to the recovery specified by the device guide.
  3. Perform the guide’s factory-reset or data-format procedure.
  4. Without booting into the freshly reset system first, sideload the matching GApps package.
  5. Boot LineageOS and run setup again.

The exact buttons, partitions and commands vary by device. Follow the current guide for the phone’s codename instead of applying a recovery sequence from another model.

Factory Reset Protection and forgotten stock accounts

Before replacing stock Android, LineageOS advises removing Google accounts from the old installation when the device’s procedure calls for it. Leaving an account in place can leave Android Factory Reset Protection active and cause unusual setup or activation errors after the reset. That warning concerns installation and setup; it is not a universal explanation for a banking app’s later integrity refusal.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Fix a “Device is not certified” message

Play Protect certification and Play Protect malware scanning are different features. Certification determines whether Google recognizes the device as eligible for Google apps, while the scanning feature checks installed apps for harmful behavior. Turning off malware scanning does not make an uncertified device certified.

Check the certification status

Open the Play Store, open your account menu, choose Settings, and look in About for the Play Protect certification entry. Google changes menu labels between Play Store releases, so use the closest current wording. Record whether it says the device is certified or not certified.

Google states that only Play Protect certified devices are eligible to include Google apps such as the Play Store. It also warns that apps and features may not work correctly on an uncertified device, and that system or app updates may be unavailable. Certification therefore affects more than the status line in the Play Store.

Rank #3
Sale
Samsung Galaxy A17 5G Smart Phone 128GB, US 1 Yr Manufacturer Warranty Blue | Large AMOLED, High-Res Camera, Durable Design, Super Fast Charging, Expandable Storage, Circle to Search, 2025
  • YOUR CONTENT, SUPER SMOOTH: The ultra-clear 6.7" FHD+ Super AMOLED display of Galaxy A17 5G helps bring your content to life, whether you're scrolling through recipes or video chatting with loved ones.¹
  • LIVE FAST. CHARGE FASTER: Focus more on the moment and less on your battery percentage with Galaxy A17 5G. Super Fast Charging powers up your battery so you can get back to life sooner.²
  • MEMORIES MADE PICTURE PERFECT: Capture every angle in stunning clarity, from wide family photos to close-ups of friends, with the triple-lens camera on Galaxy A17 5G.
  • NEED MORE STORAGE? WE HAVE YOU COVERED: With an improved 2TB of expandable storage, Galaxy A17 5G makes it easy to keep cherished photos, videos and important files readily accessible whenever you need them.³
  • BUILT TO LAST: With an improved IP54 rating, Galaxy A17 5G is even more durable than before.⁴ It’s built to resist splashes and dust and comes with a stronger yet slimmer Gorilla Glass Victus front and Glass Fiber Reinforced Polymer back.

Understand the common causes

Google lists an unlocked bootloader, a modified Android operating system and root among common reasons a device fails certification. A standard LineageOS installation normally involves an unlocked bootloader and a modified operating system, so certification can fail even when the installation is otherwise functioning and the phone is not rooted.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Unlocked bootloader: the bootloader state can be visible to Google’s device-integrity checks.
  • Modified operating system: a custom ROM is not the same software image that shipped with the phone.
  • Root or system modifications: root frameworks and other changes can alter the signals used for certification.
  • Incorrect or incomplete Google components: missing or disabled Play services can create a separate Google-services failure that should not be confused with certification.

Do not promise that reinstalling GApps will change a certification result. GApps supply Google components; they do not turn a modified system into the manufacturer’s certified software image.

Separate certification from a broken Play services installation

If the Play Store says that Google Play services cannot be found or is outdated, inspect the service itself:

  1. Open Android Settings and go to Apps (the exact label may be Apps & notifications).
  2. Find Google Play services and confirm that it is installed and enabled.
  3. Check its version and install any update offered through the Play Store or the device’s supported update path.
  4. Restart the phone and test the Play Store again.

A missing or disabled service can prevent Google apps from working even when the certification screen is a different issue. Conversely, an uncertified-device warning can remain after Play services is installed correctly.

Why a banking app can fail even when Google apps work

A bank controls its own launch, authentication and transaction checks. It may evaluate bootloader state, verified-boot or verity signals, root indicators, the operating-system build, device recognition, app tampering and Play Integrity verdicts. The bank can also change its policy without a LineageOS update.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
Samsung Galaxy S26 Ultra, Unlocked Android Smartphone, 512GB, Black | Privacy Display, Galaxy AI, AI Camera, Super Fast Charging 3.0, Durable Battery, 2026, US 1 Year Warranty
  • PRIVACY DISPLAY: Automatically hide your screen from those beside you. The built-in privacy display can be preset¹ to turn on when receiving notifications, typing passwords, or using specific apps
  • TYPE IT IN. TRANSFORM IT FAST: Enhance any shot in seconds on your smartphone by using Photo Assist² with Galaxy AI.³ Add objects, restore details, or apply new styles by simply typing or tapping
  • NIGHTS, CAPTURED CLEARLY: From gigs to city lights, record and capture moments after dark with clarity using Nightography so your photos and videos stay crisp and clear on your Samsung Galaxy
  • MAKE IT. EDIT IT. SHARE IT: Turn everyday moments into something personal with creative tools built right into your mobile phone, whether it’s a special contact photo, custom wallpaper, an invitation or more⁴
  • HELP THAT KEEPS UP: Stay in the moment while Now Nudge with Galaxy AI helps you respond faster and stay organized with smart suggestions⁵ that appear exactly when you need them on your phone

There is no general LineageOS setting that guarantees compatibility with every banking app. The available information cannot establish the policy of an unnamed bank, and a generic tweak should not be presented as a fix.

Play Integrity is an app-facing signal, not a “rooted or not” switch

Google’s Play Integrity system provides verdicts that an app can use to assess the environment in which it is running. On Android 13 and later, Google’s strong-integrity requirements include additional device-integrity conditions and a security-update requirement covering the previous year. An app can choose which verdicts and other signals it requires.

LineageOS explains that some devices expose bootloader-unlock and verity status to Android during boot. The project does not intentionally remove those signals to make a device appear more secure. Its FAQ states: “We don’t purposefully remove those flags, as it isn’t our place to lie about security features.” The LineageOS device-support requirements likewise prohibit altering Play Integrity validation responses.

As a result, a phone can be unrooted and still fail a check used by a bank. “Not rooted” describes one condition; it does not mean that the device has a locked bootloader, stock verified-boot chain, certified operating-system image or the integrity verdict that a particular app demands.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Collect the information the bank or app support needs

When a single app fails, record all of the following before changing the system:

Best Value
Tracfone Moto g Play 2024 Prepaid Phone with a 1-Yr Plan Included | Prepaid Smartphone with Full YR Plan Included bundled with 1500 Min/Text/Data for365 days of service - Locked to Tracfone
  • Carrier: This phone is locked to Tracfone, which means this device can only be used on the Tracfone wireless network. Activating is easy, just 3 steps.
  • ACTIVATION Promotion: Includes 1500 min, 1500 texts & 1500 MB Data + add more as you need it
  • CAMERA SYSTEM: 50MP Quad Pixel camera. Capture sharper, more vibrant photos day or night with 4x the light sensitivity.
  • PERFORMANCE: Blazing-fast Qualcomm performance. Get the speed you need for great entertainment with a Snapdragon 680 processor and 4GB of RAM.
  • 64GB built-in storage. Get plenty of room for photos, movies, songs, and apps. Made for US
  • Bank name and the country or region of the account
  • Phone manufacturer, model and device codename
  • Official or unofficial LineageOS build
  • LineageOS version and underlying Android version
  • GApps package and version, if installed
  • Bootloader locked or unlocked
  • Root, modules, custom kernels or other modifications
  • The exact error, including whether the failure occurs at launch, sign-in, one-time-code entry or payment approval

Ask the bank whether it supports the specific device and operating-system configuration. If it does not, use only an access method the bank itself documents, such as its official website, another supported device or a branch process. No particular alternative is established for every bank, so do not assume that a browser login or another app will provide full banking functionality.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Do not relock the bootloader as a generic certification fix

Relocking is not a universal way to make LineageOS pass certification or a banking app’s integrity check. The operation is device-specific, can erase data and can leave a phone unable to boot if the installed software is not accepted by the locked bootloader.

LineageOS gives this warning in its FAQ: “Few devices allow for it and even less work properly after that. Relocking can result in actual unusable devices, so be warned!”

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Only consider a bootloader operation when both the manufacturer and the exact LineageOS device guide explicitly support that state and procedure. The evidence here does not establish that relocking restores access to any particular bank app. If the guide does not document a safe relock path, leave the bootloader state alone and contact the device or bank support team.

A safe troubleshooting sequence

Use this order to avoid erasing data or making an unsupported change while the real problem is still unclear.

  1. Classify the symptom. Decide whether Google apps are missing, Play Store certification fails, Play services is missing or outdated, or only one banking app refuses to work.
  2. Write down the environment. Record the model/codename, official status, LineageOS and Android versions, GApps package, root state and exact message.
  3. Check the device guide. Confirm that the build, GApps architecture and Android release are all supported for that codename.
  4. Repair an incorrect GApps installation. If the first boot happened without the required package, back up data, factory-reset as documented, sideload GApps in recovery and boot again.
  5. Check Play Store certification. Use the Play Store’s certification entry and keep that result separate from Play Protect malware scanning.
  6. Check Play services. Make sure it is installed, enabled and current before diagnosing an app-specific refusal.
  7. Investigate the banking app with its provider. Supply the complete configuration and ask whether that bank supports the device and OS.
  8. Stop before risky bootloader changes. Do not relock, wipe or add root modifications merely because an online suggestion claims they will change an integrity verdict.

Common mistakes and their consequences

Mistake Why it fails Safer response
Installing a random GApps package after setup The package may target another Android release or architecture, and the supported installation sequence was missed Use the device guide; if already booted, follow the documented reset-and-sideload route
Disabling Play Protect malware scanning Scanning and device certification are separate functions Read the Play Protect certification status instead
Assuming no root means every bank app must work Apps can evaluate bootloader, verified-boot and Play Integrity signals Ask the bank about its policy for the exact device and OS
Relocking without device-specific instructions An incompatible locked state can make the phone unusable Follow only an explicitly supported manufacturer and LineageOS procedure
Clearing data before recording the error Useful diagnostic details and local app data may be lost Capture the message and back up data first

What can and cannot be concluded

You can usually determine whether the immediate problem is an incomplete GApps installation, a Play services installation issue, an uncertified Play Store device or an app-specific integrity refusal. You cannot infer a bank’s compatibility policy from the Play Store certification line, and you cannot guarantee a banking-app fix without the bank, country, model, build and exact error.

For Google apps, use the exact package and timing required by the device guide. For certification, treat the unlocked bootloader and modified operating system as material factors and understand that malware-scanning settings are unrelated. For banking apps, assume the developer’s policy is decisive unless that developer confirms support for the LineageOS configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.