An app named “root” often appears in my Firewall AI and supposedly requests access. I can’t uninstall it! What can I do?
Don’t worry, the “root” app is not an actually installed app. It is a placeholder for all connections that your Android system establishes in the background. In many cases, the operating system accesses different services, servers, or domains — for example to check for updates or carry out certain system processes.
Why do I see “root” in Firewall AI?
- Placeholder function: Android often groups system connections under “root” when they cannot be assigned directly to a visible app.
- Possible tracker domains: Sometimes the system contacts servers that our block lists (for example “Spyware/Malware” or “Fake shops and fraud websites”) classify as suspicious. This is usually harmless, because Firewall AI automatically blocks these connections to protect you.
Are these connections dangerous?
In almost all cases, connections made by the “root” app are not a problem. They are simply part of the normal data exchange of your Android system.
If a connection appears in one of our lists, Firewall AI blocks it so that no data can flow — meaning you are well protected.
Can I delete “root”?
No, because “root” is not a real app. It only represents the system process. Removing it would damage the operating system.
What can I do if it bothers me?
- Nothing important is required: Since Firewall AI blocks risky connections anyway, you do not need to worry.
- Check notifications: If the alerts bother you, you can adjust the notification options in Firewall AI’s settings.
The “root” app shown in Firewall AI is harmless and cannot be uninstalled because it represents the system connections of your Android device. The notifications you are seeing about suspicious domains simply show that Firewall AI is working reliably and blocking suspicious connections. So you can continue using your smartphone without concern — Firewall AI is taking care of your security.


