Users of Xiaomi, Redmi and Poco smartphones often use the “Second Space” feature to separate personal and work data, creating virtually two independent devices in the same enclosure. However, active use of this feature sometimes leads to situations where the owner forgets the password or pattern lock set, blocking access to important information, which creates not just an inconvenience, but a real security problem that requires immediate solution.
Unlike standard screen locking, logging into the second profile has its own recovery nuances that are not always obvious. MIUI and the new HyperOS are built on the principles of data isolation, so standard methods of resetting through a Google account often do not work here or require specific conditions, you need to clearly understand what data is lost and whether there is access to the main profile.
In this guide, we will go into all possible scenarios, from simple recovery through the main account to complete removal of the hidden partition with loss of data. We will look at the technical features of the shell spaces from Xiaomi and offer proven algorithms for actions for different versions of the software.
Principles of data isolation in MIUI and HyperOS
The split feature is based on Android user profile virtualization technology. When you create a second space, the system allocates a separate partition of memory that is encrypted independently of the main one, which means that passwords, fingerprints and graphics keys for each space can be different and stored in different encrypted containers.
It's because of this architecture that direct access to the second profile files through the main file manager is impossible without special rights. MIUI treats the second space as a separate user of the system. So if you forget the access code, the security system blocks the entry, considering the attempt unauthorized, even if you are in the main profile.
It is important to understand that resetting the smartphone itself will affect both spaces, but it does not always guarantee the removal of the second profile if it was protected by additional encryption. In some cases, after reset, the system may request confirmation of the owner of the second account, which makes the situation even more confusing.
⚠️ Warning: Attempts to repeatedly enter an incorrect password in the second space may result in a temporary lock of the device or automatic deletion of data if the appropriate security function has been enabled.
Technically, the login process is regulated by the system service com.android.settings, which checks the hash amount of entered data with stored in a protected memory area. If there is no match, access is prohibited at the system kernel level.
Recovery methods through the main profile
The easiest and safest way to get inside if you forget your password is to use a space-to-space binding. When you first set up, Xiaomi often suggests setting up a shortcut or setting up a different fingerprint input.
If the biometrics are not set up or you forget which finger is assigned, go to the main profile settings. Find Settings → Second Space. This is where the system may suggest switching without entering a password if you are on a trusted network or using facial recognition of the main account holder.
In some versions of the shell, there is a "Forgot Password?" feature right on the lock screen of the second space. Pressing this button can send a confirmation request to the main profile or to the associated Mi Account. This requires an active Internet connection.
Why isn't the print entry working?
It's also worth checking the notification settings. Sometimes the system allows you to configure the content of the notifications from the second space to the first, which will not give you full access, but will help you remember which applications are installed there, and possibly through them (if there are vulnerabilities or specific settings) to access data.
Using Mi Accounts to Reset Access
If you can't switch directly, you can use the Mi Account, which is a central part of the Xiaomi ecosystem, and if you've had the Internet and sync enabled in the second space, you can reset your password remotely through the Device Search service.
Go to the official Mi Cloud website from a computer or other device, log in to the same account you used in the second space (or mostly if they are connected), and find the option to lock or clean data from the device management menu.
The Delete feature will remove all the contents of the second profile, including the forgotten password.This is a radical method, but it is the only one that allows you to get back to a clean, working second space without losing access to the main profile of the phone.
| Method | Data security | Conditions required | Difficulty |
|---|---|---|---|
| Biometry | 100% | Finger/face adjusted | Low. |
| Mi Cloud (Reset) | 0 per cent (removal) | Internet, account | Medium |
| Deletion of profile | 0 per cent (removal) | Password of the main profile | Low. |
| Hard Reset | 0 per cent (full discharge) | Physical access | Tall. |
Radical Solution: Removing Second Space
If the data in the second profile is not critical, or if you just want to get rid of the lock, the most effective way is to completely remove the second space, which will return the phone to the factory configuration of one user.
To do this, go to Settings → Second Space in the main profile. Click on the menu (three dots or gear) and select “Delete Second Space.” The system will request confirmation and password from the main profile or unlock the screen.
☑️ Checklist before deleting profile
Once confirmed, the process of cleaning the dedicated memory partition will begin, which can take anywhere from 10 seconds to several minutes depending on the amount of data accumulated, and once completed, the phone will restart, and the second space function will be deactivated.
⚠️ Warning: Deleting the second space permanently deletes all the apps, contacts, messages and files inside it.
If the system requires a password to be deleted and you don’t remember it, only a complete reset of the phone settings remains, since access to profile management is protected at the system level.
Hard Reset as a last resort
When none of the milder techniques help, and you can't even delete a profile because of forgotten passwords everywhere, there's Hard Reset.This procedure brings the smartphone back to factory status, erasing all user data, including both spaces.
To perform the reset, turn off the device completely. Then press the key combination. For most Xiaomi and Redmi models, it's Volume Up + Power. Hold the buttons until the Mi logo appears, then release power, continuing to hold the volume until the Recovery menu appears.
Wipe Data → Wipe All Data → Confirm → RebootUse the volume buttons for navigation and the power button to confirm the selection. Once you run the Wipe All Data command, the phone will clear the userdata and cache partitions.
💡
If after a reset, the phone requires a Google or Mi Account that you don't remember, it's FRP protection. Make sure to remember the data from the account used on the phone before locking.
Once you reboot, the phone will be like new, you can reconfigure it, but the second space with the forgotten password will disappear with all the contents, and that's the only guaranteed way to regain control of the device.
Preventing blocking in the future
To prevent the situation from happening again, set up a reliable but memorable security system, and use biometric data (print or face) to enter the second space, as it is physically impossible to forget.
It is also recommended to enable synchronization of important data with Mi Cloud or Google Photos, in which case, even if you forget your password and have to delete your profile, your photos and contacts will remain in the cloud.
Write a complex password or pattern lock to a secure location (notebook, password manager) and storing passwords only in the brain is an unreliable method, especially for rarely used functions like the second profile.
💡
The best protection against forgotten passwords is a backup of data and biometric binding, which allows you to bypass text code entry.
Check the relevance of recovery data regularly: the phone number and email associated with the account must be valid so that you can restore access through text or email.