The Android operating system has always been one with supreme security. When you install applications, they don’t have the chance to move from their own bit of land that they are fenced in by. When you root a device, however, which is something that people have been doing since the birth of the operating system, you are removing that fence which means stuff with bad intentions, such as malware, can get up to no good.

New apps that people love to use—Android Pay, Netflix, Pokemon Go, so forth—can’t run the risk of malware getting on your system—anything that involves money and your banking means you might end up losing money and so the risk is far too high with Android’s reputation on the line.

Knowing this, Android developers stepped up the security like never before in an effort to stop people having root access for as long as they try to use these apps like Android Pay. The way they did this was by introducing a new feature called SafetyNet: rooting trips SafetyNet and then it knows not to allow you to use these apps like Android Pay. Due to the way SafetyNet is set up, even the best rooting developers in the world weren’t able to conjure up a way to get past it.

There are millions of people out there though that love rooting Android and have been doing so for years—even the workers at Google loved to root their devices—so the idea that rooting altogether would disappear, never to be seen again, would be an exaggerated one.

For starters, some people much prefer Android s root access in comparison to using the apps like Android Pay, they’ll just pull out there wallets and use a regular bank card instead. But then there was also something else that worked in favor of rooted users: a new tool was developed that allowed the operating system to be rooted and unrooted just by tapping a button. One button when inside the app called Magisk.

The new rooting tool, Magisk, allows users to toggle it on and off, so it keeps Android developers happy—you can now toggle off the root access with Magisk, use apps like Android Pay and then toggle the root access back on again when you’re done—and it also is simple enough to keep rooted users happy as well.

How to Root Android 7.0 (Nougat) with Magisk

Download the Magisk installer from the Downloads section of the XDA-Developers thread.

If you already have rooted your device, you’ll need to unroot it now before going ahead with the installation of Magisk. If you have used TWRP and then flashed Chainfire’s SuperSU, you can just remove the SuperSU by opening it up and then choosing to uninstall it from the menu. For everyone else, you might be interested in installing the unSU script instead.

You can only use Magisk if there is a custom recovery image available for you to install. You can look for a custom recovery image made for your device from the TWRP website. Remember that before you can install a custom recovery image, you need to have the bootloader unlocked first. The way you unlock the bootloader changes depending on your smartphone manufacturer. If you find a guide made for your manufacturer, then chances are you can follow it because it’s the same for all devices from the one manufacturer.

Find out the steps required to boot your smartphone into the custom recovery. The way manufacturers choose to enter recovery mode changes depending on who it is, but the good news is that booting into custom recovery is always the same steps as booting into the stock recovery for your phone because it just replaces it. So, all you really need to do is find out what steps you need to boot your device into the standard recovery mode that all devices come with and then you’ll be able to boot to the custom recovery as well.

Once you are in the custom recovery, tap on the “Install” button and then tap on the Magisk SuperSU zip file. Then to install the zip file you have selected, tap on the “Install Image” button (if you are using TWRP Recovery.) You’ll also need to swipe at the bottom of the phone’s display to confirm the installation of the zip file if it is TWRP Recovery.

After the Magisk SuperSU is installed, you then need to reboot the phone from the TWRP Recovery menu. Once your phone boots back up again, it’s time to install the Magisk Manager application directly on the phone. Before you can install it, though, you first need to enable the Unknown Sources option from the Android Settings. To do that, swipe down from the top of the Android homecreen to pull down the notification shade, and then tap on the “Settings gear icon” at the top.

Tap on the “Security” link from the Settings.

Inside the settings is the “Unknown Sources” option that you now need to tap on.

You’ll get a message letting you know about the risks of enabling the Unknown Sources before it turns on for you. Tap on the “OK” button to continue.

The Unknown Sources toggle is now turned on.

Next, you need to get the Magisk Manager application from the XDA-Developers thread under the same Downloads section that you got the Magisk SuperSU earlier. Download it like you would any other app and then tap on the ‘Install” button to install it on your device.

The Magisk Manager sends a superuser request to your device. Tap on the “Grant” button to continue.

You’ll need to allow Magisk Manager permissions to access your files from the device if you want to get the best experience. Tap on the “Allow” button here.

It lets you know that Magisk Manager is not yet installed. Tap on the “Go to Install” section” to continue.

At the bottom of the next screen is the “Download and Install” button that you need to tap on now.

You can choose to view the release notes if you want before installing. When you are done, just tap on the “Install” button, and then the Magisk manager is finally installed.

Wait until you get the “Installation succeeded!” message on the phone’s display and then tap on the “Reboot” button.

Once the reboot is complete and the phone starts up again, you can start using Magik on your device to have root access as well as Android Pay and Netflix working again.