I keep seeing an app called “root” in my Firewall AI that’s apparently requesting access, and I can’t uninstall it. What does this mean, and what can I do?

No worries—“root” is not an actual installed app. It’s simply a placeholder that represents all connections made by your Android system in the background. The operating system often contacts various services, servers, or domains—for example, to check for updates or to perform certain system processes.

Why do I see “root” in Firewall AI?

• Placeholder function: Android generally groups system connections under “root,” which don’t directly belong to a visible app.
• Possible tracker domains: Occasionally, the system reaches out to servers that appear on our block lists (like “spyware/malware” or “fake shops and fraud sites”). This is typically harmless because Firewall AI automatically blocks these connections to protect you.

Are these connections dangerous?

In almost all cases, connections made by the “root” app are not a problem. They’re simply part of Android’s normal data exchange processes.

If a connection is flagged on one of our lists, Firewall AI will block it so that no data can be transmitted—keeping you well-protected.

Can I delete “root”?

No. “root” isn’t a real app but rather a system process placeholder. Removing it would damage the operating system.

What if the notifications bother me?

• Nothing special is required: Firewall AI already blocks risky connections, so there’s no need to worry.
• Check notifications: If the alerts are distracting, you can adjust the notification settings in Firewall AI to reduce them.

Seeing the “root” app in Firewall AI is harmless and cannot be uninstalled, because it represents your Android system’s background connections. The “suspicious domain” notifications simply confirm that Firewall AI is doing its job and blocking potentially risky connections. Feel free to continue using your smartphone as usual—Firewall AI has you covered!