Package
com.google.android.gsf.login
Google Account Manager
Package intelligence
Observed signing, permission, version and size signals from contributing devices - descriptive of that sample, not a verdict. These come from the v2 Package Search sync, which not every device has contributed to yet, so for some packages this detail is partial or not present at all.
- Signed by Google's own signing key (the same key Google uses across devices), so it is a Google-provided preinstall that updates independently of the system image.
- Its largest observed manifest declares 49 permissions: 3 runtime (user-granted), 7 signature or system-level, 20 install-time and 19 vendor or uncatalogued.
- Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.
Declared permissions (49)
Largest permission set observed for this package. Text is Android's own published description where one exists; platform permissions Android does not document show their granted protection level (in grey) instead; vendor or unknown constants show the name only.
| Permission | Description |
|---|---|
ACCESS_NETWORK_STATE |
Allows the app to view information about network connections such as which networks exist and are connected. |
ACCESS_WIFI_STATE |
Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices. |
AUTHENTICATE_ACCOUNTS |
Install-time permission, granted automatically. docs ↗ |
BACKUP |
Signature or privileged system permission. |
BROADCAST_STICKY |
Allows the app to send sticky broadcasts, which remain after the broadcast ends. Excessive use may make the phone slow or unstable by causing it to use too much memory. |
CHANGE_COMPONENT_ENABLED_STATE |
Signature or privileged system permission. |
CHANGE_NETWORK_STATE |
Allows the app to change the state of network connectivity. |
CHANGE_WIFI_STATE |
Allows the app to connect to and disconnect from Wi-Fi access points and to make changes to device configuration for Wi-Fi networks. |
CONTROL_KEYGUARD |
Signature-level system permission, for platform-signed apps. |
DUMP |
Signature or privileged system permission. |
INTERNET |
Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet. |
INVOKE_CARRIER_SETUP |
Signature or privileged system permission. |
MANAGE_ACCOUNTS |
Install-time permission, granted automatically. docs ↗ |
PERSISTENT_ACTIVITY |
Allows the app to make parts of itself persistent in memory. This can limit memory available to other apps slowing down the phone. |
READ_CONTACTS |
Allows the app to read data about your contacts stored on your phone. Apps will also have access to the accounts on your phone that have created contacts. This may include accounts created by apps you have installed. This permission allows apps to save your contact data, and malicious apps may share contact data without your knowledge. |
READ_LOGS |
Signature or privileged system permission. |
READ_PHONE_STATE |
Allows the app to access the phone features of the device. This permission allows the app to determine the phone number and device IDs, whether a call is active, and the remote number connected by a call. |
READ_PROFILE |
Install-time permission, granted automatically. |
READ_SYNC_SETTINGS |
Allows the app to read the sync settings for an account. For example, this can determine whether the People app is synced with an account. |
READ_SYNC_STATS |
Allows an app to read the sync stats for an account, including the history of sync events and how much data is synced. |
RECEIVE_BOOT_COMPLETED |
Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running. |
SUBSCRIBED_FEEDS_READ |
Install-time permission, granted automatically. |
SUBSCRIBED_FEEDS_WRITE |
Install-time permission, granted automatically. |
USE_CREDENTIALS |
Install-time permission, granted automatically. |
VIBRATE |
Allows the app to control the vibrator. |
WAKE_LOCK |
Allows the app to prevent the phone from going to sleep. |
WRITE_CONTACTS |
Allows the app to modify the data about your contacts stored on your phone. This permission allows apps to delete contact data. |
WRITE_PROFILE |
Install-time permission, granted automatically. |
WRITE_SETTINGS |
Allows the app to modify the system's settings data. Malicious apps may corrupt your system's configuration. |
WRITE_SYNC_SETTINGS |
Allows an app to modify the sync settings for an account. For example, this can be used to enable sync of the People app with an account. |
com.android.chrome.TOS_ACKED |
- |
com.android.vending.INTENT_VENDING_ONLY |
- |
com.android.vending.TOS_ACKED |
- |
com.android.vending.billing.ADD_CREDIT_CARD |
- |
com.android.vending.billing.BILLING_ACCOUNT_SERVICE |
- |
com.android.vending.billing.IBillingAccountService.BIND2 |
- |
com.google.android.googleapps.permission.ACCESS_GOOGLE_PASSWORD |
- |
com.google.android.googleapps.permission.GOOGLE_AUTH |
- |
com.google.android.googleapps.permission.GOOGLE_AUTH.ALL_SERVICES |
- |
com.google.android.googleapps.permission.GOOGLE_AUTH.YouTubeUser |
- |
com.google.android.googleapps.permission.GOOGLE_AUTH.mail |
- |
com.google.android.googleapps.permission.GOOGLE_AUTH.youtube |
- |
com.google.android.googleapps.permission.GOOGLE_MAIL_SWITCH |
- |
com.google.android.gtalkservice.permission.GTALK_SERVICE |
- |
com.google.android.gtalkservice.permission.SEND_HEARTBEAT |
- |
com.google.android.permission.BROADCAST_DATA_MESSAGE |
- |
com.google.android.providers.gsf.permission.READ_GSERVICES |
- |
com.google.android.providers.settings.permission.READ_GSETTINGS |
- |
com.google.android.providers.settings.permission.WRITE_GSETTINGS |
- |
Manage on devices
ADB commands for this package (the inverse of each is included so you can undo). Run from an authorised shell or wire the equivalent into your DPC. Verify on a test device first - this database doesn’t yet classify which packages are safe to change. --user 0 targets the current user; drop it (and use a privileged shell) to act device-wide.
/system, so Restore re-adds it (-k keeps app data)Seen on
Each record is a device profile (make + model + Android version). Each unique handset that syncs against a matching profile will increase the observations of a package, thereby increasing confidence that a package is expected to be on a device.
| OEM | Model | Android | Provenance | Observations | Last seen |
|---|---|---|---|---|---|
| QEMU | Standard PC (i440FX + PIIX, 1996) | Android 8.1 | 9 | 13 Feb 2026 |
Known labels
Locale-aware display names seen in the wild.
| Label | Locale | Seen |
|---|---|---|
| Google Account Manager | en-us | 9 |
| Google Account Manager | en-US | 1 |