Sometimes users are faced with the need to delete a user certificate of a certification authority (CA) on their smartphone. This may be due to the installation of malware, incorrect configuration of the corporate network, or simply a desire to clear memory of outdated security credentials. The presence of extra root certificates in the trusted store creates a potential vulnerability for traffic interception.
In this article we will look in detail at where these files are located, how to find them through the standard settings menu, and what to do if the system interface does not show them. We'll also look at more advanced cleaning methods using a computer and the command line. Certificate management is an important skill for ensuring the digital hygiene of your device.
It is worth noting that the procedure may vary slightly depending on the version of the operating system Android and the manufacturer's shell (for example, OneUI, MIUI or Pixel UI). However, the logic of the key store remains the same for the entire ecosystem. Let's begin a detailed study of the process.
Why do you need to delete certificates?
Root certificates serve as the foundation of trust on the Internet. When you visit a bank's website, your browser checks its digital signature certificate against the trusted list in the system. If someone installed someone else's root certificate on your phone, they could theoretically decrypt your encrypted traffic using a man-in-the-middle (MITM) attack.
Often, such certificates are installed by data interception applications, some antivirus apps, or when connecting to corporate networks via Wi-Fi. After uninstalling an application or leaving a company, these certificates can remain in memory, creating unnecessary risk. Clearing storage returns the device to a factory-trusted-only state.
In addition to security issues, deleting old records helps resolve problems connecting to certain Wi-Fi networks that may require fresh credentials. Sometimes the system simply “forgets” to update the certificate status, and manual reset becomes the only solution.
⚠️ Attention: Never delete system certificates that were preinstalled by the manufacturer. Uninstall only those that you installed yourself or that appeared after installing third-party applications. Removing system roots can lead to the inoperability of many applications and sites.
Search and delete through standard settings
The easiest and safest way to manage trusted roots is to use the built-in security menu. The path to it may vary, but it is usually hidden in the deep system settings. You will need to find the section responsible for encryption and credentials.
On most modern smartphones, the algorithm is as follows: go to Settings, then select Security or Biometrics and security. Next, look for the section Other security settings or immediately Encryption and credentials. This is where the certificate management menu is hidden.
Inside this menu you will see an item Trusted credentials or User certificates. By clicking on it, the system will show a list of all manually installed root certificates. If the list is empty, then there are no third-party roots on the device and there is nothing to delete.
- 🔍 Go to
Settings → Security → Encryption and Credentials data - 📂 Open the section
Trusted credentials - 🗑️ Click on the certificate and select
Delete - ✅ Confirm the action using a PIN code or fingerprint finger
If you cannot find this item, try using the search in settings. Type "certificate" or "credentials" into the search bar. The system itself will highlight the desired section. This is especially true for shells with confusing menu structures, such as older versions. MIUI.
If there is no delete button in the settings, the certificate may be installed with device administrator rights. Check the list of administrators in the security settings and disable the suspicious application before deleting the certificate.
Features of interfaces from different manufacturers
Android shell developers often change the menu layout, which can confuse even an experienced user. Understanding these differences will save you time when searching for the treasured delete button.
On devices Samsung with the OneUI shell, the path often lies through Settings → Biometrics and security → Other security settings → Install from memory card (paradoxically, managing old certificates is often located next to installing new ones) or directly in Trusted credentials.
Device owners Xiaomi and Redmi should look for the section Passwords and securityand then Privacy. In some versions MIUI certificate management is moved to a separate "Security" application, which is pre-installed in the system.
Clean Android on smartphones Pixel or Moto has the most logical structure: Settings → Security and privacy → Device security → Encryption and credentials. Everything here is intuitive and divided into user and system tabs.
| Manufacturer | Path to settings | Nuance interface |
|---|---|---|
| Samsung (OneUI) | Biometrics and security → Other parameters | Often hidden in a submenu |
| Xiaomi (MIUI) | Passwords and security → Confidentiality | May require logging into Mi Account |
| Google Pixel | Security → Encryption and credentials | The most direct and clear way |
| Huawei (EMUI) | Security → Advanced | The interface may differ on older models |
⚠️ Attention: Settings interfaces change with every firmware update. If the described path does not match your screen, use the built-in search in settings - this is the most reliable way to find the desired section on any version of Android.
Forced cleaning through the developer menu
Sometimes the standard menu does not display all installed certificates, or the delete button is inactive. In such cases, developer settings come to the rescue. This method allows you to perform a global reset of all user credentials with one click.
First, you need to activate developer mode. Go to Settings → About phone and find the item Build number. Quickly click on it 7 times in a row until the notification “You are now a developer” appears.
After activation, a new section will appear in the main settings menu For Developers. Scroll down to the Network or Debugging section. Find item Delete Credentials (or Clear credentials). Clicking on it will completely clear the user certificate store.
Settings → For Developers → Network → Delete CredentialsThis method is "kernel" option. It removes absolutely all user certificates, including those that may be needed for corporate mail or specific applications. Use it with caution.
☑️ Prepare to reset certificates
Removal via ADB and command line
For advanced users who were not helped by graphical interfaces, there is a method of removal via USB debugging. Using Android Debug Bridge (ADB) gives direct access to the file system and key storage.
You will need a computer with ADB drivers installed and USB debugging enabled on your smartphone (in the developer menu). Connect your phone to your PC with a cable and open a terminal or command prompt on your computer.
The command to clear user certificates is as follows. It forcibly removes all files from the user keys directory.
adb shell pm clear com.android.certinstallerYou can also try removing specific files if you know their names, but clearing the certificate installer package is usually more effective. After running the command, reboot your device for the changes to take effect.
⚠️ Attention: Using ADB requires caution. Entering commands incorrectly may result in the deletion of important system data. Make sure that you enter the commands exactly as they are indicated in the instructions.
What to do if ADB does not see the device?
Make sure that permission to debug from this computer appears on the phone screen. Try replacing the USB cable or using a different USB 2.0 port instead of 3.0. Also check if ADB drivers are installed in Windows Device Manager.
Resetting network settings as an alternative
If you do not want to go into the jungle of developer settings or use your computer, you can try a softer method - resetting network settings. This action will delete not only certificates, but also saved Wi-Fi networks, Bluetooth pairs and mobile network settings.
This method often helps when a problem with a certificate manifests itself in the form of Internet connection errors. The system recreates network profiles from scratch, ignoring old, possibly corrupted credentials.
Find the System or General settingssection in the settings, then select Reset. There will be an item Reset Wi-Fi, mobile data and Bluetooth settings. Confirm the action and the phone will reboot the network modules.
- 📶 All saved Wi-Fi passwords are deleted
- 🎧 All pairings with Bluetooth headsets are broken
- 🔒 User CA certificates are cleared
- 📱 Mobile operator APN settings are reset
This a good compromise between completely resetting the phone to factory settings and selectively deleting a single file. You lose the convenience of connectivity, but keep all applications and personal data.
Resetting network settings is a safe way to remove problematic certificates without affecting personal photos, contacts and installed applications.
Frequently asked questions and problems (FAQ)
Can I delete system certificates?
No, you cannot delete system (factory) certificates using standard means. This requires obtaining root access and modifying the system partition, which is highly not recommended for ordinary users, as this can disrupt the operation of banking applications and HTTPS connections.
Why is the delete certificate button inactive (gray)?
Most often, this means that the certificate is assigned to an application with device administrator rights. Go to Settings → Security → Device administrators, uncheck the suspicious application, and only then try to remove the certificate again.
Will deleting a certificate affect the operation of banking applications?
On the contrary, it can correct errors. Banking applications require a "clean" environment. The presence of extra user root certificates is often regarded by bank security systems as a sign of hacking or traffic interception, which leads to login blocking.
Where are certificates physically stored in the phone memory?
User certificates are stored in a protected area of the file system, usually along the path /data/misc/user/0/cacerts-added/. Access to this folder without root access is prohibited even for most file managers, so deletion is only possible through system settings or ADB.
What to do if the certificate returns after deletion?
If the certificate appears again after a reboot, it means that a malicious application or a device management (MDM) profile is installed on the phone, which forcibly restores its settings. Scan your phone with an antivirus and check the list of installed applications for unknown apps.