Where and how to prohibit installation from unknown sources on Android Xiaomi: full instructions

Installing apps from unknown sources is one of the most common causes of Xiaomi smartphones getting infected with viruses, spyware and advertising software. APK-A file from a “reliable” site, the risk of getting a built-in miner or Trojan remains high. The manufacturer by default allows installation from external sources for some applications (for example, browsers or file manager), but this creates a security breach. In this article, we will analyze where this function is disabled in different versions. MIUI, Why a standard ban on security settings is not enough, and how to block the installation of uncertified security settings APK.

Xiaomi has a feature of duplicating security settings across multiple menus, such as MIUI 14, where you can block installation globally, but individual applications (like Files or Downloads) will still ask for permission, and we'll show you how to turn that off at the system level without having to root-right, and what to do if you reset after updating MIUI, and why some of the "instructions" from the Internet don't work on new versions of the firmware and how to get around the manufacturer's limitations.

Why Xiaomi can’t just turn off “Unknown Sources” in its security settings

Unlike pure Android, where you just need to switch one switch to the Settings → Security menu, Xiaomi has a different system. The manufacturer has implemented application control: each application (browser, messenger, file manager) can request permission to install APK regardless of global settings, which means that even if you turn off the option in the main security menu, Google Chrome or Mi File Manager will still be able to offer to install the downloaded file.

The second problem is that in MIUI 13 and later, settings are reset after major firmware updates. Users often find that after upgrading to a new version of MIUI, previously blocked sources become active again. This is not a bug, but a feature: Xiaomi tries to maintain compatibility with old applications, but actually creates a vulnerability. In addition, in some regional firmware (for example, for India or China), security options may differ or be hidden.

• 🔍 Application control: Each application has its own switch for installation APK, Even if the global setting is disabled.
• 🔄 Reset after updates: Security settings reset when you upgrade to a new version MIUI (Especially relevant for 13.→14→15).
• 🌍 Regional differences: Security menus may look different in different countries.
• 🛡️ Bypassing restrictions: Some applications (such as APKMirror Installer) can bypass the lock through the use of a security device. ADB.

To actually disable installations from unknown sources, it's not enough to disable one switch, you have to go through all the applications that could potentially request permission and lock them manually, and below we'll show you how to do it correctly.

Where is the main menu "Unknown sources" in MIUI 12-15

Starting with the basic path that works on most Xiaomi, Redmi and POCO devices, the menu may vary slightly depending on the MIUI version, but the overall logic is maintained:

1. Open Settings (the gear icon on the main screen).
2. Go to the Appendix section → Application management.
3. In the upper right corner, press three dots (⋮) and select Special Access.
4. Slip on the item Install unknown applications (in some versions – Install from unknown sources).

Here you'll see a list of all the apps that are allowed to install APK, and it's usually the default:

• 🌐 Browser (or Google Chrome)
• 📁 Files (Mi File Manager)
• 📥 Downloads (Downloads)
• 💬 Messengers (Telegram, WhatsApp – if downloaded through them) APK)

Your task is to turn off the permission for each application manually, tap the application name and move the slider to the position of Prohibit (or Disabled). Note that MIUI 14/15 may display a warning after disabling, "This may interfere with some functions." This can be ignored - it is about the ability to install APK, not the basic functionality of the application.

How to prevent APK installation via ADB (for power users)

If you find that settings are reset after the update, or some applications ignore the lock, you can use the ADB commands. This method is suitable for users who have already enabled USB Debugging and have access to a computer. The advantage of the method is that it works at the system level and does not reset after MIUI updates.

You'll need:

• 🖥️ Computer with installed ADB Fastboot (you can download from the official Android website).
• 📱 Xiaomi smartphone with enabled debugging USB (Settings → The phone. → Version. MIUI → 7 times to tap the assembly number → return to → For developers → Debugging by USB).
• 🔌 USB-cable (preferably original).

Next, follow the following steps:

1. Connect the phone to the computer and confirm the debugging permission on the smartphone screen.
2. Open the command line (or Terminal on Mac/Linux) in the platform-tools folder.
3. Enter the command to check the connection: Adb devices must appear serial number of your device.
4. Ban installation from unknown sources globally: adb shell settings put global install_non_market_apps 0
5. For reliability, block the installation through specific applications (example for the browser): adb shell appops set com.android.browser INSTALL_PACKAGES Replace com.android.browser with the batch name of the desired application (you can find out through adb shell pm list packages).

Once you've done the commands, restart your smartphone. Now, even if you accidentally give permission to an application through a GUI, the system will ignore it because of the fact that you're not using it. ADB-Attention: this method does not work on devices with locked bootloader and some regional firmware (e.g, MIUI China).

Hidden security settings: where else can you block APK installation

In addition to the main menu, Install Unknown Apps, there are a few more places in MIUI where you can increase protection, many users overlook them, but they are critical for full lockdown:

1. Developer Settings: Go to Settings → Additionally. → For developers and find the option to Disable the installation through USB (or USB-This will prevent installation. APK When connecting to your computer via adb install.
2. Mi Security: In the Security app, go to Settings → Privileges → Install applications. Here you can see the list of applications that are allowed to install and revoke permissions.
3. Google Play Protect: While it doesn’t block installation, enabling scanning in the Play Store → Play Protect will help detect malicious APKs once installed.This won’t replace full locking, but will add a layer of protection.

The Mi File Manager app, which often ignores global settings, can set APKs even after the permissions in the Special Access menu are turned off, to block them completely:

1. Open Settings → Applications → Application Management.
2. Find the Files and tap it.
3. Select Permissions → Additional → Install unknown applications.
4. Set the switch in the position to Prohibit.

If after this manipulation you still see a request for installation APK, So the app uses workarounds, and in this case, only removing the problem software or using it will help. ADB-teams (described above).

💡

If you frequently install APKs for testing but want to limit the risks, create a separate user on your phone (Settings → System → Multiplayer) and install uncertified apps only there.

What to do if the settings reset after the MIUI update

One of the most common problems is automatic permission resets after a firmware update, which is because Xiaomi resets some of its security settings “pre-fabricated” when it upgrades to majors (e.g., switching from MIUI 13 to MIUI 14) to avoid this:

1. Back up your settings: Use the Settings app → Additional → Backup and Reset → Local Backup. Select System Settings and save the file. Restore it after the update.
2. Use it. ADB-As described above, the adb shell settings put global install_non_market_apps 0 Not reset after updates if the bootloader is unlocked.
3. Turn off automatic updates MIUI: Go to Settings. → The phone. → Updating the system → Settings (⋮) → Auto-update and turn off the option.This will give you time to prepare before the update.

If the update has already occurred and the settings are reset, follow the following steps:

1. Check the Install Unknown Applications menu (the path described above) and turn off all permissions again.
2. Remove the Security app cache (Settings → Applications → Application Management → Security → Storage → Clear the cache).
3. Restart the device – sometimes the settings are applied only after the reboot.

⚠️ Note: If after the update you see unknown applications in the list of allowed installations APK, This could be a sign of malware. Immediately scan the device through Google Play Protect or Malwarebytes.

Table: Where to look for settings on different versions of MIUI

To make it easier to search, we have compiled security menu paths for different versions of MIUI. Please note that item names may vary slightly depending on the regional firmware.

If your version of MIUI is not listed in the table, try searching by settings (the magnifier icon in the upper right corner of Settings) and entering the "Install unknowns" query.

What happens if you leave the installation from unknown sources on

Many users neglect to block, believing that they “neatly download APKs only from trusted sites.” However, even popular resources like APKMirror or APKPure do not guarantee 100% security.

• 🦠 Malware: Trojans, cryptocurrency miners, spies to steal bank card data, for example, in 2023 through fake APK WhatsApp spreads FluBot virus stealing SMS.
• 📱 Advertising viruses: Apps that display ads on top of all windows, even when you're not using them, often only remove them through resetting.
• 🔍 Surveillance: Some APK Collect location history, contacts, photos and send them to the servers of the attackers.
• 💸 Subscriptions and SMS-Fraud: Viruses can be secretly sent SMS to pay numbers or sign you up for services.

According to Kaspersky Lab statistics, in 2023 year 38% Mobile device infections occurred through installation APK And yet, Xiaomi is in the top.-3 The brands whose users are most likely to be victims of such attacks (along with Samsung and Huawei).

Even if you are sure of the APK source, remember:

• 🔗 Download links can be replaced through phishing sites.
• 📦 Legitimum APK They can be modified (for example, malicious code is embedded in them).
• 🔄 Pirate apps updates often contain viruses.

⚠️ Warning: If you have already installed a suspicious app, it is not enough to simply delete it. Some viruses create "sleeping" services that are activated after a reboot. In this case, only a complete reset of the phone to factory settings will help (Settings) → Additionally. → Backup and reset → Resetting settings).

💡

Even just allowing APKs to be installed for your browser or messenger makes your smartphone vulnerable, and locking them completely reduces the risk of infection by 90%.

FAQ: Frequent questions about blocking unknown sources on Xiaomi