Play Integrity: Device Integrity vs Account Integrity — What Each Signal Means
Play Integrity verdicts hand you two very different signals in one response: what the device looks like, and what the account looks like. Developers often mush them together into a single pass/fail — and then wonder why legitimate users get locked out, or why abuse slips through.
This post breaks down play integrity device integrity labels versus account integrity labels, how to combine them into risk tiers, and how to act on each tier without torpedoing your UX.
Device integrity labels
The deviceRecognitionVerdict is a list of labels. The three that matter:
MEETS_BASIC_INTEGRITY — the device passes basic checks but can't prove much more. Emulators and many custom-ROM devices land here. It tells you "this looks like a real device, probably," and not much else.
MEETS_DEVICE_INTEGRITY — the device is a genuine, Play Protect-certified device passing Google's device checks.…