DisableFlagSecure

LSPosed

Have you ever tried to take a screenshot in your banking app, Netflix, or a secure messenger — only to get a blank black image? That is FLAG_SECURE at work. DisableFlagSecure, a razor-thin 20 KB LSPosed module by the LSPosed team, surgically removes that restriction across every app on your device. Take screenshots, record your screen, and mirror via scrcpy without limitations — all without modifying a single system file.

What Gets Unlocked

A single module. A single flag removed. Every app that ever blocked your camera button becomes capturable.

Screenshot in Any App

Take screenshots in banking apps, payment wallets, secure messengers, and any other app that shows a blank black image when you press the power + volume button. The FLAG_SECURE restriction is lifted system-wide for all activated apps.

Screen Recording Unlocked

Record your screen with any screen recorder app while secure apps are open. Previously, FLAG_SECURE apps would appear as a solid black region in recordings — DisableFlagSecure eliminates this restriction entirely.

Secure Layer Bypass

Captures content from Secure Layers — including DRM-protected streaming surfaces such as Netflix L3. Apps that render video on a protected hardware compositor layer are also affected, enabling capture of content previously impossible to screenshot.

scrcpy Compatible

Full compatibility with scrcpy, the open-source screen mirroring and control tool. Mirror or record your Android screen via USB or Wi-Fi from a PC — even when banking apps, streaming apps, or other secure apps are in the foreground.

Oplus Device Support

Dedicated support for devices running ColorOS, OxygenOS, and HydrogenOS (Oplus/OnePlus/Realme ecosystem). Custom system-level screenshot implementations on these ROMs are handled with separate compatibility patches.

Ultralight — Just 20 KB

The entire module weighs only 20.39 KB. There is no UI to configure, no settings screen, no background service. Install it, activate it in LSPosed, reboot — it works. Zero overhead on system performance or battery life.

What is FLAG_SECURE and Why Does It Exist?

FLAG_SECURE is a window flag defined in Android's WindowManager.LayoutParams. When an app applies this flag to its window, Android instructs the compositor to treat that window's content as sensitive. The system then prevents the window from appearing in screenshots, screen recordings, and screen sharing sessions — displaying a black or blank region instead.

The flag was designed with legitimate security intentions: banking apps use it to prevent credential capture, DRM-protected streaming apps use it to comply with content licensing agreements, and enterprise apps use it to protect confidential business data. However, it is frequently applied far too aggressively — many apps block all screenshots even in non-sensitive screens, such as error messages or support pages.

DisableFlagSecure hooks into the Android Window Manager and SurfaceFlinger layers via the LSPosed Xposed API. When an app attempts to set FLAG_SECURE on its window, the hook intercepts and removes the flag before it is applied — the rest of the system proceeds normally, treating the window as non-secure. On Android 12 and above, an additional method was introduced (since v4.0.0) to also bypass the newer Secure Layer mechanism used by streaming apps.

Common Use Cases

Banking & Finance
Screenshot balance, transactions, or error messages in banking apps and payment wallets.
Streaming Services
Capture frames from Netflix, Disney+, Prime Video, and other DRM-protected streaming apps.
Secure Messengers
Screenshot conversations in apps that block screenshots as a privacy measure.
Mobile Games
Record or stream gameplay from games that block screen capture using FLAG_SECURE.
PC Screen Mirroring
Use scrcpy to fully mirror and control your device from a PC, even with secure apps active.
Enterprise & Work Apps
Capture content from MDM-managed work apps and enterprise software that enforce screenshot blocks.

Frequently Asked Questions

DisableFlagSecure (also known as Enable Screenshot) is an LSPosed module by the LSPosed team that removes the FLAG_SECURE window flag from all apps. This flag is what prevents screenshots and screen recordings in apps like banking apps, Netflix, and secure messengers. Once removed, you can freely capture any screen.

It works on any app that sets the FLAG_SECURE flag, including banking apps, payment wallets, streaming services (such as Netflix L3), secure messaging apps, and any other application that displays a blank screen when you attempt to take a screenshot.

Yes. Since v4.2.0, DisableFlagSecure includes fixed compatibility with scrcpy, the popular open-source screen mirroring tool. This allows you to mirror and record your Android screen via USB or Wi-Fi even when secure apps are open on the device.

DisableFlagSecure supports Android 12 and above. Support for Android 11 and lower was dropped since v4.2.0. The module requires the official LSPosed framework — unofficial or mod versions of LSPosed are explicitly not supported.

The original repository by tehcneko was archived with a final "Swan Song" release. Development has since been continued by aviraxp under the same LSPosed organization, keeping the module updated for new Android versions and the latest Xposed API (v101+).

Module Info

  • Version v5.0.1
  • Module By
    LSPosed
  • Contributors tehcneko, dependabot[bot], aviraxp, Howard20181, yujincheng08
  • Source Code View Repository
  • Requirement
    LSPosed
  • Latest Update