Question

So, I thought I was being clever and using various hashes and permutations of Android’s secure unique ID to identify my users….

But it turns out that 9774d56d682e549c is a magic ID returned by

Secure.getString(getContentResolver(), Secure.ANDROID_ID);

for a good number of devices… It appears every emulator I build has the same ID, and many of other peoples phones (lots of moto droids!) and flashed OS mods tend to return this same repeating value. Non-MotoDroid / Non-Flashed handsets seem to all give me a unique string back. But this one is in my DB about 60 times!

I’m going to be optimizing my app to check for that string before registering, but what would be a recommended way of handling it to get another unique value?

My current thought is to check for it, generate an EXTREMELY LARGE random value, hash it, then store than in SharedPreferences and then either use the ANDROID_ID or the one stored in sharedprefs (if the users phone is giving the value). Anyone have any better ideas, or does this seem solid enough to mitigate this crazy bug?

Answer 1

Take a look at the Identifying app installations article. You can’t rely on ANDROID_ID.

The best solution is to generate a custom id with:

String id = UUID.randomUUID().toString();