Installing apps from unknown sources on Xiaomi smartphones opens the door to potential threats, from malware to phishing to data theft. APK-Bypassing Google Play, a feature that is often used by attackers to spread viruses, and in this article we will discuss how to completely block this ability on devices with a computer. MIUI — From Old Versions to the Latest 2026 Updates.
It's important to understand that the security setting on Xiaomi is different from standard Android because of the proprietary shell. There's no universal switch here, you'll have to dig deeper into the settings menu. We'll show you all the possible ways, from global shutdown to locking for individual browsers, and also tell you what hidden MIUI settings can reset your settings after the system update.
Why it is important to disable the installation from unknown sources
Even if you are confident in the sources APK-Files, risks remain:
- 🦠 Malware: 63% of mobile viruses spread through third-party APK (Kaspersky data for 2023).
- 🕵️ Spyware: Some “pirate” versions of apps contain keyloggers to steal passwords.
- 💸 Financial losses: Trojans can replace payment details in banking applications.
- 📱 Unstable work: unoptimized APK Often cause overheating and rapid discharge of the battery.
MIUI devices are particularly vulnerable because of the brand’s popularity among users who prefer alternative app stores, and malicious users deliberately create fake APKs for popular services (such as Mi Fit or Xiaomi Community) by masking them as official updates.
⚠️ Warning: On bootloader devices, malware can gain superuser rights even without your knowledge, allowing viruses to enter system partitions where they cannot be removed by standard methods.
Global disable APK installation on all MIUI versions
The standard path for most Xiaomi models (including Redmi, POCO, Black Shark) is:
- Open Settings → Applications → Application Management.
- Slip on the three dots in the upper right corner and select Special Access.
- Find Install Unknown Applications (Older versions – Unknown Sources).
- Open each application from the list (browsers, file managers) and move the slider to the position Prohibit.
On MIUI 14 and newer, the interface has changed a bit:
Settings → Applications → Application permissions → Package InstallationCritical detail: Once the system is updated, Xiaomi sometimes resets these settings for standard applications (like Browser or Files).
Browser permissions (Chrome, Mi Browser) are disabled
File Managers (Files, Mi File Explorer)
Settings checked after last MIUI update
Removed saved APK-files from the Download folder-->
Hidden MIUI settings: what prevents a full lock
Even after disabling all visible resolutions, some applications can bypass the restrictions by:
| Source of threat | How to block it. | Examples of applications |
|---|---|---|
| System APKs with Developer Rights | Requires the withdrawal of certificates through ADB | Mi Drop, GetApps |
| Pre-installed shops | Remove via Settings → Applications → Remove | App Store (for Chinese firmware) |
| Updates through OTA | Disconnection in Settings → About the phone → System update | Updater, System Update |
| ADB-team | Blocking debugging in Settings → For developers | Any applications with rights android.permission.INSTALL_PACKAGES |
On devices with Chinese firmware (China ROM), the built-in GetApps store is often found, which ignores standard restrictions.
adb shell pm uninstall --user 0 com.xiaomi.mipicks⚠️ Attention: Removing system applications can cause the phone to function unstable before executing commands via ADB Backup your data via Mi Cloud or Google Drive.
MIUI Global
MIUI China
MIUI Europe (Xiaomi.eu)
Custom firmware (LineageOS, Pixel Experience, etc.)
I don't know/don't remember/-->
Cases: POCO, Black Shark and old models
The devices of Xiaomi sub-brands have their own nuances:
- 📱 POCO F1/F2/F3: Use "clean" Android with minimal improvements. Path to settings: Settings → Annexes and notifications → Additionally. → Special access → Installation of unknown applications.
- 🎮 Black Shark: Gaming smartphones have a separate Shark Space menu that can ignore system limitations. → Special facilities → Shark Space.
- 📅 Old models (Redmi) 4X, Mi A1): Android. 7-8 The path looks like this: Settings → Additionally. → Confidentiality → Unknown sources (one global switch).
For the POCO X3 Pro and later with MIUI for POCO, the rule is: if you see the words "This application is trying to install an unknown application," then there is a resolution somewhere. Use a search by settings (the magnifier icon at the top) with the request "Install unknowns."
How to Check Hidden Permits Through ADB
What to do if settings are reset after the update
Xiaomi is known for resetting some security options after major updates (MIUI 12 → MIUI 13) to avoid this:
- Before updating, take screenshots of the current permission settings (Install Unknown Applications section).
- Use the MacroDroid app to automatically disable permissions after rebooting (root or ADB required).
- Turn off automatic updates of system applications in Settings → The phone. → Updating the system → Settings (⚙) → Auto-update of applications.
If you find that permissions have been reset after the update, check:
- 🔄 Version MIUI: certain assemblies (e.g, MIUI 14.0.4) contain bugs with access rights.
- 📦 New system applications: after the update, new items may appear in the list Install packages.
- 🔒 Developer Mode: If it was enabled, some restrictions can be zeroed out.
1. Hold an empty space on the home screen
2. Select "Widgets" → "Settings"
3. Drag the label "Install unknown applications" on the desktop-->
Additional security measures for Xiaomi
Full locking of APK installation is only part of the protection.
| Mera. | How to set up | Efficiency |
|---|---|---|
| Blocking through Google Play Protect | Play Store → Menu → Play Protect → Security scanner | Identify 92% of known threats |
| Limitation of rights for file managers | Settings → Applications → Files → Permissions | Prevents access to system folders |
| Use of alternative browsers | Install Firefox Focus with Download Blocking | Eliminates Accidental APK Download |
| Encryption of the device | Settings → About the phone → Encrypt the phone | Protects data when stolen |
For corporate users or parents who want to completely block the ability to install third-party applications, Xiaomi’s solution is suitable:
Settings → Special Opportunities → Mode for ChildrenIn this mode, all installations are locked at the system level, and only pre-approved applications are available.
💡
Even with the APK installation disabled, attackers can exploit vulnerabilities in the browser to download malicious scripts. Update Chrome and WebView regularly through the Play Store.
Frequent Mistakes and How to Avoid Them
Users often face the following problems:
- 🔄 "Settings reset after rebooting: The culprit is optimization MIUI. Turn it off in Settings. → Battery → Optimizing the battery → Menus (⋮) → Optimization of the system.
- 📱 "I can't find 'Install Unknown Apps': On some models (Redmi Note 8 Pro) it's hidden.
- 🔓 "APK Installation despite blocking: Check the rights ADB Adb shell pm list packages -i.
- 🛠 "After removing system applications, the phone is lagging: Restore them via Settings → Annexes → Show all applications → Menus (⋮) → Reset the settings.
If you use custom firmware (Xiaomi.eu, LineageOS), the process may be different. For example, in LineageOS, the path will be:
Settings → Applications and notifications → Additional → Special Access → Installation of Unknown Applications⚠️ Warning: On devices with an unlocked bootloader, even a complete installation lock is available. APK does not protect against the firmware of malicious recovery or boot.img Use official unlock methods and avoid suspicious tools like Mi Flash Unlock from third parties.