Where in the phone Xiaomi stored password from Google account: search, recovery and protection

Why you can’t find Google password in Xiaomi settings

Many Xiaomi users (especially after resetting or buying a used phone) try to find the saved password from a Google account right in the device’s menu, but this is fundamentally impossible – and here’s why.

Modern versions of Android (including MIUI 12-14) don’t store passwords in plain form. Instead, tokenization is used: the system stores only encrypted OAuth tokens that are automatically updated when you connect to Google servers. Even if you get root access, the password is not found in its pure form β€” it simply does not exist in the phone’s memory.

However, there are ways to restore access to your account or remove the link if your phone requires an old password after reset, and then we will go through all the working methods, from standard to technical.

πŸ“Š Have you ever forgotten your Google account password?
Yeah, I had to rebuild.
No, I always remember.
I forgot, but I was able to get around the lock.
I don't know, the phone's new.

Where Xiaomi Stores Google Account Data (and Why It Can't Be Retrieved)

The files associated with the Google account are distributed across several protected MIUI sections.

  • πŸ“ /data/system/users/0/accounts.db β€” Account database (requires root)
  • πŸ”‘ /data/data/com.google.android.gms/shared_prefs/ β€” authorization tokens
  • πŸ›‘οΈ /data/misc/keystore/ β€” Encryption keys (only available to the system)

Even if you access these files (for example, through ADB or TWRP), you can't extract the password.

File/FolderWhat does it contain?Can I get the password out?
accounts.dbAccount names (email) and synchronization tags❌ No.
com.google.android.gmsAccess Tokens (JWT) Linked to a Device❌ No (encrypted)
keystoreKeys to decrypting tokens❌ No (linked to hardware) ID)
settings_global.xmlSynchronization settings❌ No.

An important nuance: Starting with Android 10, Google has introduced hardware-based account binding to the Titan M chip (or its Qualcomm counterparts), which means that even when you transfer files to another phone, authorization won’t work.

⚠️ Note: Attempts to modify files into /data/data/com.google.android.gms/ without root rights, result in a complete loss of access to Google services, the system recognizes the substitution and blocks the account on suspicion of hacking.

How to Restore Your Google Account on Xiaomi (3 Working Ways)

If your phone requests a password after reset (FRP-blocking), use these methods:

1. Standard Recovery via Google

The most reliable way is to use the official procedure:

  1. On the lock screen, tap "Forgot your password?" (or "No access?" on some models).
  2. Enter the last email that was used on the phone.
  3. Google will send a letter with a link to reset your password to a backup address or number.

If the letter doesn't come in:

  • πŸ“§ Check the spam folder in the mail.
  • πŸ”„ Try to send the request again in 10-15 minutes.
  • πŸ“± Make sure your phone is connected to Wi-Fi or mobile network.

FRP bypass through settings (for MIUI 12–13)

On some models (Redmi Note 10/11, POCO X3/X4), the bypass works:

β˜‘οΈ Bypass FRP Xiaomi

Done: 0 / 5

If this method does not work, try an alternative way:

1. On the greeting screen, select the language.


2. Connect to Wi-Fi from the keyboard (hold @ on the keyboard β†’ β€œGoogle Keyboard Settings”).




3. Go to Help β†’ Video β†’ YouTube β†’ Settings β†’ Restore Account.

⚠️ Attention: After the roundabout FRP All the data on the phone will be erased. This method only works on firmware older than the one on the phone. MIUI 14 (Google has closed the vulnerability on new versions).

3. Reset via Fastboot (for advanced users)

If the phone is locked and password recovery is not possible, a full reset via Fastboot remains:

fastboot erase frp


fastboot erase userdata




fastboot reboot

This command deletes all data, including FRP-to lock it. to execute it:

  • πŸ–₯️ Install the Mi Flash Tool and drivers ADB/Fastboot.
  • πŸ”Œ Connect your phone in Fastboot mode (press the Power). + Volβˆ’ switch off).
  • βš™οΈ Enter commands above in Command Prompt.

πŸ’‘

Before resetting via Fastboot, check if the bootloader is unlocked on your Xiaomi. If not, unlock through the official Xiaomi tool, otherwise the phone will turn into a brick.

How to Protect Your Google Account on Xiaomi from Leakage

To avoid future blockage issues, follow these rules:

  • πŸ” Use a password manager (such as Bitwarden or Google Password Manager) to store backups.
  • πŸ“± Set up two-factor authentication (2FA) Google-settings.
  • πŸ”„ Regularly (every 3 months) update your backup email and phone number in your account.
  • 🚫 Never save passwords in Notes or SMS phone-on.

MIUI has a built-in Backup feature (Settings β†’ Xiaomi Account β†’ Backup), but it doesn’t save passwords β€” just app settings and contacts. Use dedicated services for passwords.

Protection methodLevel of securityCons
Password manager⭐⭐⭐⭐⭐It takes getting used to.
2FA (SMS)⭐⭐⭐⭐Vulnerable to SIM-swap attacks
Backup email⭐⭐⭐Could be hacked.
Writing on paper⭐⭐Risk of loss/theft
What to do if your phone is stolen?
If your Xiaomi is stolen, immediately: 1. Go to Google’s security page and remove the device from the trusted list. 2. Change your account password. 3. Use the Find Device feature to lock your phone remotely. 4. If Mi Account was enabled, lock your phone through Xiaomi’s website (Find Device feature).

Frequent mistakes when working with a Google account on Xiaomi

Many users make critical errors that lead to loss of access or data leakage, and the most common ones are:

  1. Ignoring backup email/phone – without them, it is almost impossible to restore an account.
  2. Using one password for Google and Mi Account – if you hack one account, a hacker will have access to everything.
  3. Disabling synchronization – without it, password backups are not created.
  4. Buying used phones without resetting – the previous owner can remotely lock the device.

Another common problem is the post-reset conflict of accounts, for example, if you add a new Google account, but the phone keeps requesting the old one.

1. Go to Settings β†’ Accounts β†’ Google.


2 Delete all accounts except the main one.




3. Reboot the phone.

⚠️ Note: If you sell or transfer your Xiaomi, be sure to complete a full reset via Settings β†’ The phone. β†’ Resetting settings. Simply deleting an account is not enough - data can remain in the app cache.

Alternative methods of authorization (if the password is lost)

If you can’t restore your password, consider these options:

  • πŸ”‘ Hardware security keys (e.g. YubiKey) – Google supports and works without a password.
  • πŸ“± Fingerprint Login (if previously configured in Google Account).
  • πŸ–₯️ Computer-based authorization – sometimes the phone allows you to log in via a browser if your account has already been added to your PC.

For corporate accounts (e.g., through Google Workspace), the domain administrator can help. Contact support with the following:

  • IMEI phone (*#06#)
  • The last known password (even if it is incorrect)
  • Date of last successful entry.

πŸ’‘

If you use your phone at work, check with IT-Is it not related to corporate policy? MDM (In this case, resetting the password can block access to work data.

FAQ: Answers to Frequent Questions

Can I extract Google password from MIUI backup?
No. MIUI backups (even encrypted ones) do not contain passwords from Google accounts, they only store: List of installed applications, System Settings, Contacts and SMS (if enabled) Passwords are stored only on Google servers in encrypted form.
Why does Xiaomi ask for an old Google password after a reset?
This is FRP (Factory Reset Protection) protection, which is activated if a Google account has been added to your phone, and it prevents you from using your device after you've been stolen, and you can only get around it by: Knowing your account password, By officially restoring (see section above), By resetting FRP via Fastboot (deleting all data).
Can I find out the Google password through the Xiaomi Engineering Menu?
No. The engineering menu (#4636### or #36446337##) only provides access to: Network Information, Equipment Tests, System Logs. Passwords are not displayed there. Moreover, attempts to change the settings in the engineering menu without understanding can disrupt the communication module.
How to check if your phone is linked to a Google account?
Open Settings β†’ Google β†’ Manage Google Account. If your device is displayed in the Security section, it is tied. To untie: Go to the Google Device Page. Find your Xiaomi on the list. Click Log Out (or Delete) and then the phone will stop asking for a password when resetting.
What if Google requires a confirmation through an old phone number that I no longer have?
In this case: On the recovery page, select "Other Way." Specify that you do not have access to the number. Google will offer alternative options (such as answers to check questions or backup email). If nothing helps, create a new account and reset your phone via Fastboot (see instructions above).