com.android.hotspot2.osulogin Copy

The OsuLogin app (AOSP-named package), associated with Android's Passpoint (Hotspot 2.0) support. Passpoint is a Wi-Fi Alliance protocol that lets a device automatically discover and authenticate to participating Wi-Fi hotspots without the user manually picking an SSID and signing in each time. Its name refers to the "Online Sign-Up" (OSU) part of Passpoint: the AOSP Passpoint documentation describes how Android walks the user through online sign-up to provision a Passpoint profile and then installs that profile. Version note: according to the AOSP Passpoint documentation, the Online Sign-Up (OSU) capability was deprecated by the Wi-Fi Alliance as of 30 June 2023, so its OSU sign-up path is likely to be exercised on fewer networks over time. The wider Passpoint feature itself is unaffected. A second package with the OsuLogin name also exists, a Google-signed one (com.google.android.hotspot2.osulogin); the package provenance shows both, differing in signer. Determine which runs on your fleet before referencing it. For Android Enterprise, EMM and kiosk deployments it is rarely relevant, as most fleets connect to managed or enterprise Wi-Fi configured by policy rather than through consumer Passpoint OSU sign-up. Disable only if you are sure your networks do not use Passpoint online sign-up, since removing it would break that specific onboarding path.

• Passpoint (Hotspot 2.0), including Online Sign-Up (OSU) and its 30 June 2023 deprecation - Android Open Source Project →
• OsuLogin (com.android.hotspot2.osulogin) signer provenance - Android System App Database →

• Re-signed by each device maker with its own platform key - 11 different certificates appear across 8 device makers in our sample. That is the signature of a stock AOSP/system package every OEM builds and signs itself, not a single maker's or a third party's preinstall. These are platform-level keys: they also sign the Android framework itself.
• Its largest observed manifest declares 5 permissions: 3 install-time and 2 vendor or uncatalogued.
• Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.