Installing applications from unknown sources on Xiaomi Redmi smartphones is a feature that simultaneously gives freedom and creates risks. APK-files outside of Google Play, which is useful for testing beta versions or using specialized software, on the other hand, opens the door to viruses, spyware and unstable builds that can compromise the security of the device.
Xiaomi has implemented a flexible system to manage these permissions in MIUI firmware: they can be enabled globally for all applications or selectively for browsers, file managers and other utilities. However, many users face the problem that once a questionable APK is installed, the resolution remains active, creating a vulnerability. In this article, we will discuss how to completely disable the installation from unknown sources, what nuances are in different versions of MIUI, and what to do if the option is inactive or hidden.
Why it is important to disable permission for unknown sources
Even if you are sure of the source. APK-A file, a stored installation permission from unknown sources, could be used by attackers:
- 🦠 Viruses and Trojans: Fake APK often contain malicious code that steals data, displays ads, or blocks a device.
- 🕵️ Spyware: Some applications collect message history, geolocation, or bank card data.
- 🔄 Malware Auto Update: If permission is active, attackers can update malware without your knowledge.
- 📱 Unstable System Performance: Unoptimized APK may conflict with MIUI, lag-provoking.
According to Kaspersky, in 2023, more than 30% of mobile threats were spread through fake ones. APK-files that disguise themselves as popular games (such as Free Fire or Free Fire) PUBG Mobile, or utilities (like WhatsApp Mod) disabling permissions for unknown sources reduces the likelihood of infection by 85%.
⚠️ Note: If you have previously installed applications from third-party sources (such as APKMirror or Aptoide), check the list of allowed applications in the settings. Even one missed resolution can become a loophole for viruses.
Where is the configuration in MIUI: ways for different versions
The MIUI interface is updated regularly, and the location of the option may vary depending on the firmware version.
| MIUI version | The path to adjustment | Notes |
|---|---|---|
| MIUI 14 (Android 13/14) | Settings → Applications → Application Management → Special Permissions → Installation of Unknown Applications | Permissions are tied to specific applications (such as Files or Chrome). |
| MIUI 12/13 (Android 11/12) | Settings → Privacy → Special permissions → Installation of unknown applications | In some builds, the option is called “Installation Permits”. |
| MIUI 11 and older | Settings → Additional → Privacy → Installation of unknown applications | On older versions, it may be necessary to activate the developer mode. |
| Redmi with Global ROM | Settings → Apps → Manage apps → Special app access → Install unknown apps | Name of menu items in English. |
If you do not find the option on these paths, try searching in the settings (the magnifying glass icon in the upper right corner). Enter the request "Install unknown" or "unknown sources" (for English firmware).
Step-by-step: how to disable permission
The process of disabling permissions to install APKs from unknown sources takes no more than 2-3 minutes.
- Open Settings on your Xiaomi Redmi (the gear icon on the home screen or in the app menu).
- Go to the Applications section (or Apps in global firmware).
- Select Application Management (or Manage Apps).
- Click on the three dots in the top right corner and select Special permissions (or Special app access).
- Install Unknown Apps (or Install Unknown Apps)
- In the list of applications, disable sliders for all programs that were previously allowed to install APK. Pay attention to this: 🌐 Browser (Chrome, Mi Browser) 📁 File Managers (Files, File Manager) 📥 Downloaders (for example, Download Manager)
☑️ Verification of disabling permits
After disabling, try to install a test. APK-file (for example, download a secure application from APKMirror) The system must block the installation with the message "Installation blocked».
⚠️ Note: Some Redmi models (e.g. Redmi Note 10 Pro or Redmi) K50) After disabling permissions, it may be necessary to restart the device to make the changes take effect.
What to do if the option is inactive or not available
In rare cases, users are faced with the fact that the option to disable permissions for unknown sources:
- 🔒 Blocked (the slider is gray and does not move),
- 👻 Not in the settings,
- 🔄 Resets after rebooting.
Causes and solutions:
| Problem. | Possible cause | Decision |
|---|---|---|
| No option. | An outdated version of MIUI or custom firmware. | Update the firmware through Settings → About the phone → System update. |
| Slideer inactive | Device policy is active (for example, in corporate phones). | Check in Settings → Accounts → Work accounts. |
| Settings reset | Conflict with a cache cleaner application (e.g., Security). | Turn off autocleaning in Settings → Privacy → Cleaning. |
If the problem persists, try resetting the security settings:
- Go to Settings → About the phone → Reset settings.
- Select Reset App Settings (not a full reset!).
- Confirm the action and restart the device.
How to check if the antivirus is blocking the changes?
Alternative ways to protect against unwanted APKs
Disabling permissions for unknown sources is only part of the protection, and for complete security, we recommend:
- 🛡️ Install a reliable antivirus: For example, Bitdefender or Kaspersky Mobile (they scan). APK before installation).
- 🔍 Use Google Play Protect: Enable it in Settings → Google → Security.
- 📥 Lock down the loading. APK: In Chrome browser, turn off the download APK site-setting (chrome://settings/content).
- 🔄 Update regularly MIUI: New firmware versions close vulnerabilities used to bypass protection.
MIUI 14 has introduced a feature called Phishing Protection, which automatically blocks APK installation from suspicious sources (such as sites that mimic Google Play). To activate it, go to Settings → Privacy → Phishing Protection and turn on the option.
💡
If you frequently install APKs from trusted sources (e.g., for testing), create a separate user on your phone via Settings → System → Multiplayer. Mainly keep permissions disabled in your profile, and additionally, turn them on as needed.
Frequent Mistakes and How to Avoid Them
When working with security settings, users often make mistakes that negate all security efforts.
- 🔓 Browser-only Disconnection: Many forget to check permissions for file managers (such as Xiaomi Files) through which you can install too APK.
- 🔄 Ignoring Updates: After Updating MIUI Some settings are reset. Always check them after the update.
- 📲 Use of third-party launchers: Some launchers (such as Nova Launcher) may mask system notifications about blocking the installation.
- 🔧 Rooted Redmi devices: Attackers can bypass restrictions even when permissions are disabled.
To avoid problems:
- Once permissions are disabled, restart the device – this ensures that changes are applied at the system level.
- Periodically check the list of allowed applications (every 1-2 months).
- Do not install APKs from sources that ask you to disable Google Play Protect.
⚠️ Note: Some Redmi models (e.g. Redmi) 9A Redmi 8) after disabling permissions for unknown sources, a notification may appear, "Device not certified." This is normal - the certification will be restored after the restart.
💡
Disabling permissions for unknown sources is not a one-time procedure. After each APK installation (even from a trusted source), check the settings, as some applications may automatically request permissions again.