Android does provide device attestation via Keymaster 3 and has for years: https://source.android.com/security/keystore/attestation https://source.android.com/s

Android does provide device attestation via Keymaster 3 and has for years: https://source.android.com/security/keystore/attestation https://source.android.com/security/keystore/attestation SafetyNet does not specifically give you a device ID, but keystore attestation does. SafetyNet is a higher-level API used to verify you're in a trusted compute environment (which is also sufficient for anti-spam, btw). The keystore attestation API provides everything you need to acquire signed data directly from the HSM with things like device IDs and security trust level baked in. You need to read up: https://datatracker.ietf.org/doc/draft-bweeks-acme-device-attest/ https://datatracker.ietf.org/doc/draft-bweeks-acme-device-at...