Disable the installation of applications from unknown sources on Xiaomi: the full guide

Installing apps from unknown sources on Xiaomi smartphones is a potential security threat. APK-The manufacturer allows the installation of such applications by default, but this feature is easy to disable through settings, data theft, intrusive advertising or even locking the device. MIUI.

In this article, we will discuss how to completely block the installation option. APK from third-party sources on all Xiaomi models, including Redmi and POCO. You will learn where the relevant settings are, how to check current permissions and what to do if the option is not available due to firmware limitations. MIUI β€” 12-to-14.

Why you should disable the installation from unknown sources

The main reason is security. Malware applications are often distributed through the Internet. APK-files disguised as useful utilities or modified versions of popular programs:

  • πŸ“± Stealing bank card details and passwords
  • πŸ‘οΈ Hiddenly turn on the camera or microphone
  • πŸ’Έ Signing you up for a fee SMS-mailing
  • πŸ”‹ Quickly discharge the battery with background processes

Even if you download APKs from trusted sites, the risk remains: In 2023, for example, researchers discovered more than 100 infected versions of apps in popular repositories. Xiaomi regularly updates MIUI protection, but the best protection is to completely disable the installation capability from unverified sources.

πŸ“Š Have you ever installed APK source?
Yeah, often.
Yeah, but rarely.
No, never.
I don't know what it is.

Where to Setup on Xiaomi: The Way to the Security Menu

Depending on the version of MIUI, the path to settings may vary slightly, and the following is a universal route that works on most Xiaomi, Redmi and POCO devices:

  1. Open the settings (cog icon).
  2. Go to the Appendix section.
  3. Select Application Management.
  4. Slip it on special permits.
  5. Find the Installation of Unknown Applications.

On some firmware (e.g. MIUI 14 for the global version), the path may be shorter:

Settings β†’ Privacy β†’ Special permissions β†’ Installation of unknown applications

If you don’t find this section, search by settings (the magnifier icon at the top of the screen) and enter the query with unknown sources.

πŸ’‘

On some models (such as the Xiaomi 13 Pro), access to this menu can be blocked by corporate firmware security policies. In this case, try resetting security settings to factory settings via Settings β†’ About Phone β†’ Reset (select only β€œReset App Settings”).

Step-by-step instructions for disabling the APK installation

When you're in the Install Unknown Apps menu, you'll see a list of all the apps that are allowed to install APKs. You'll need to turn off permissions for each item.

Open Settings β†’ Applications β†’ Application Management

Go to Special Permits β†’ Install Unknown Applications

Disable sliders for all applications in the list

Check that no application has the right to install APK-->

Important: Even if you turn off browser or file manager permission, some system applications (such as MIUI Package Installer) can still access the system, so that you can block the installation completely:

  1. Slip on each app on the list.
  2. Translate the slider Allow installation from this source to the off position.
  3. Confirm action if the system requests a password or fingerprint.

On MIUI firmware 13 and later, after disabling all permissions, the system automatically blocks attempts to install APK from the outside, showing a notification "Installation blocked by the device administrator."

What to do if the setting is not available or gray

Sometimes the option to disable the installation from unknown sources may be blocked, for several reasons:

Reason.Decision
The device is managed through MDM (Corporate Policy)Contact the administrator or delete the MDM profile in Settings β†’ Accounts β†’ Delete the device profile
Child Regime or Parental Controls EnabledTurn off the mode in Settings β†’ Special features β†’ Mode for children
Installed custom firmware with restrictionsReturn to the official firmware via Fastboot or Recovery
Virus protection function in Mi SecurityTemporarily turn off protection in Security β†’ Settings β†’ Protection against viruses

If none of these methods worked, try resetting your security settings:

Settings β†’ System β†’ Resetting settings β†’ Resetting application settings

This won’t delete your data, but it will reset all application permissions to factory settings.

How to check if the installation is blocked?
Download any one. APK-file (for example, from the official website of APKMirror) and try to open it. If you see a message "Installation blocked by the administrator" or "Unknown sources disabled", then the configuration is successfully applied.

Additional security measures on Xiaomi

Disabling the installation from unknown sources is only the first step.

  • πŸ”’ Enable Blocking the Installation of Malware Applications in Security β†’ Settings β†’ Protection against viruses.
  • πŸ›‘οΈ Activate the application scanner in Mi Security (scans new installations in the background).
  • πŸ”„ Update regularly MIUI through settings β†’ The phone. β†’ Updating the system.
  • πŸ“± Set a password or fingerprint to unlock Settings.

On devices with MIUI 14, SandBox has been introduced, which isolates suspicious applications to enable:

Settings β†’ Privacy β†’ Special Permits β†’ Sandstone

This will allow untrusted APKs to run in a secure environment without risking the system.

πŸ’‘

Even with unknown sources disabled, there is a risk of malware being installed through vulnerabilities in your browser or messengers. Always check the permissions of the applications after installation!

Frequent Mistakes and How to Avoid Them

Many users have trouble disabling APK installations, and these are the most common mistakes:

⚠️ Note: If you use Xiaomi with firmware for the Chinese market (China) ROM), Some security settings may be hidden or work differently, in which case we recommend reflashing the device to the global version (Global) ROM).

  • πŸ”„ Incomplete disabling: Users disable the browser-only resolution, forgetting about the file manager (Files or Explorer) and MIUI Package Installer.
  • πŸ”“ Ignoring warnings: The system may display a notification "This application is trying to install" APK", Users click "Allow" without reading the text.
  • πŸ“± Factory Reset: After resetting, all permissions return to their original state and must be turned off again.

To avoid these errors, always check the list of allowed apps after any changes to the system. If you transfer your phone to another person, temporarily turn on Guest Mode:

Settings β†’ System β†’ Guest mode

How to Recover APK Installation Access If Needed

If you temporarily need to install an application from an unknown source (such as a beta or specialized software), you can:

  1. Return to Settings β†’ Special permissions β†’ Install unknown applications.
  2. Enable permission for only one application (e.g. Files by Google).
  3. Install APK and immediately disable the permission back.

Important: Once installed, check the application through Mi Security (Virus Scanner section) and delete it if threats are detected.

⚠️ Note: Some applications (such as Fortnite or Genshin Impact) are distributed only through APK. In this case, download files only from official sites and check the hash amounts before installing.

For advanced users, there is an alternative way to install APKs without including unknown sources: through ADB.

adb install path/to/file.apk

This method requires the developer mode enabled and the connection to the PC.

FAQ: Answers to Frequent Questions

Can I turn off APK installation only for certain applications?
Yes, in the Install Unknown Apps menu, you can selectively disable permissions for each application separately, for example, leave access only for Files by Google, but block for the browser.
Why did the MIUI update change the settings?
For major updates (e.g., from MIUI 12 to MIUI 13), the system resets some security permissions. After the update, always check the settings of unknown sources and disable them again if necessary.
How to check if there is malware on the phone?
Run a full check in Mi Security (Security β†’ Virus Scanner β†’ Full Check). Also note: - Unexpected traffic consumption - Fast battery discharge - Appearance of unfamiliar applications in the menu If something is suspicious, perform a factory reset.
Does this work for POCO and Redmi?
Yes, all MIUI-based devices (including POCO and Redmi) have similar security settings, except for custom firmware models (e.g., POCO Launcher on some devices may hide a portion of the menu).
Can I block APK installation through Group Policy (for Business)?
Yes, if your device is connected to Mi Enterprise Management or other MDM-In this case, the administrator can centrally block the installation from unknown sources for all devices on the network.