How to enable the installation of applications from unknown sources on Xiaomi: the complete guide

Xiaomi smartphones block third-party application installation by default, a standard Android security measure designed to protect users from malware. However, sometimes the need to install an.apk file outside of Google Play or Mi App Store becomes relevant: this can be be beta versions of programs, regionally blocked services or specialized software for work. In this article, we will discuss how to correctly and safely allow installation from unknown sources on Xiaomi, Redmi, POCO and Black Shark devices with the MIUI shell (versions 12, 13, 14).

It’s important to understand that opening this option carries potential risks, from accidental virus installation to leakage of personal data. So we’ll not only show you how to turn on the feature, but also explain how to minimize threats. The instructions will work for most modern models, including the Xiaomi 13/14, Redmi Note 12/13, POCO F5/X5 and others. If your device runs on “pure” Android (for example, Xiaomi A3), the process may be slightly different – we’ll mention this too.

Before you get to the settings, make sure you have a good reason to install apps from the outside. 90% of the time, alternatives can be found in official stores, and the risks of malware infection when installing.apk from unreliable sources remain high even on Xiaomi with their MIUI Optimization protection system.

Why is Xiaomi blocking the installation from unknown sources?

The ban on installing.apk files outside of official stores is not a whim of the manufacturer, but part of a multi-level security system for Android. On Xiaomi devices, this mechanism is strengthened thanks to the MIUI shell, which includes additional checks:

1. Malware protection: According to Kaspersky, in 2023, more than 30% of mobile viruses spread through fake.apk files, masquerading as popular applications (such as modified versions of WhatsApp or TikTok), blocking by default reduces the risk of accidental installation of such files.

2. System Integrity Control. MIUI uses the Package Installer mechanism with digital signature verification. Installing unsigned applications can disrupt the stability of the shell, especially on devices with HyperOS (the new firmware for Xiaomi 14 flagships).

3.compliant with Google Policy: For Xiaomi devices to receive Google Mobile Services (GMS) certification, the manufacturer must follow Android security rules, including a restriction on installation from unknown sources.

However, Xiaomi gives users the option to manually allow installation, but with important caveats:

⚠️ Attention: On devices with MIUI 14 and later, when you turn on the option, the system automatically scans the installed.apk through the built-in antivirus. If the file is deemed suspicious, the installation will be blocked even if you allow it from unknown sources.

Preparing for the option: what to do in advance

Before you change your security settings, follow a few mandatory steps to avoid installation problems and protect your device:

1. Check the source of the.apk file. Make sure the file is downloaded from the official developer site or a trusted resource (e.g. APKMirror, APKPure). Avoid torrent trackers and little-known forums.

2. Update MIUI to the latest version. In older versions of the shell (e.g. MIUI 11 and below), the process of enabling the option may be different, and the protection against malware is weaker. To check the relevance of the firmware, go to Settings → About Phone → System Update.

3. Back up your data. In rare cases, installing unsigned applications can cause MIUI to malfunction. We recommend saving important files to Mi Cloud or to an external drive.

4. Check for free space. Installing.apk requires temporary space in the /data partition. If the device has less than 1 GB of free storage, clear the cache or remove unnecessary applications.

Download the file from an official source only

Update MIUI to the latest version

Create a backup copy of important data

Check the vacant space (minimum 1 GB)

Shut down. VPN (Can block file verification)-->

Step-by-step: how to enable installation from unknown sources

The activation process depends on the version of MIUI and the device model. Below we will give a universal algorithm that is suitable for most Xiaomi, Redmi and POCO smartphones (including the models of 2022-2026).If your device runs on Android One (for example, Mi A3), go to the special section.

Step 1. Open the security settings

Go to Settings → Applications → Application Management → Application Settings (cog icon in the upper right corner) → Installation from unknown sources.

Step 2: Select a browser or file manager

The system will offer a list of applications through which you can install.apk.

Browser (if you download the file directly from the network)

Files or Explorer (if.apk is already stored in the device’s memory)

Telegram/WhatsApp (if the file came via messenger)

Step 3: Allow installation for the selected application

Click on the desired application from the list and activate the Allow installation switch from that source. Confirm the action in the dialog box.

Step 4: Find and install an.apk file

Open the file manager (like Google Files or standard Explorer), find the downloaded.apk and tap it. The system will prompt you to confirm the installation – click Install.

⚠️ Attention: MIUI 14 Once installed, the system may request additional permissions for the application (e.g. access to contacts or location). Carefully check what rights the program requests - this may be a sign of malware.

1. delete the previous version of this application (if any).

2. Enable the developer mode and activate the USB debugging option (sometimes helps with installation failures).

3.Reset the device and try again.-->

Features for different versions of MIUI

The interface and layout of options may vary slightly depending on the shell version, and in the table below we will show the key differences for MIUI 12, 13 and 14:

On HyperOS devices (such as Xiaomi 14 or Redmi K70) you may need to confirm via Mi Account after you turn on the option, an additional security measure designed to prevent unauthorized changes to your settings.

If you use POCO with POCO Launcher firmware, the path to settings remains the same, but the interface may look different because of the shell customization, in which case, focus on the name of menu items, not on their visual design.

How to disable installation from unknown sources after use

Once you have installed the right application, it is recommended that you return the security settings to their original state, which will reduce the risk of accidental malware installation in the future.

1. Go to Settings → Applications → Application Management → Application Settings → Installation from Unknown Sources.

2. Find the application that installed.apk (for example, Files or Chrome) in the list.

3. disable the switch Allow installation from this source.

If you install.apk files frequently, you can leave the option enabled, but with reservations:

• 🔒 Use only verified file sources (official sites, APKMirror with verification).
• 🛡️ Regularly scan your device for viruses using Google Play Protect or Mi Security.
• 📱 Do not install applications that request excessive permissions (for example, access to the Internet). SMS play-calls).

⚠️ Note: Some Xiaomi models (e.g. Redmi Note 11 with) MIUI 13) after disabling the options, the previously installed.apk files may stop updating, in which case you will have to temporarily re-enable the permission.

Frequent mistakes and their solutions

When installing applications from unknown sources, users often face typical problems, and consider the most common errors and ways to fix them:

Error "Installation locked"

Reason: The MIUI security system has recognized the file as potentially dangerous.

Decision:

• 🔄 Try downloading.apk from another source (e.g. official website).
• 🛠️ Enable Developer Mode (Settings) → The phone. → Version. MIUI — tap 7 times) and activate the debugging option USB.
• 📱 Restart the device and try again.

Error "Not installed"

Cause: Conflict with an already installed version of the program or a corrupted file.

Decision:

• 🗑️ Remove the previous version of the application through Settings → Annexes.
• 🔍 Check the integrity of.apk (file size must match the size of the site).
• 🔧 If you install a modified app (such as YouTube Vanced), make sure it is compatible with your version. MIUI.

3. The "Install" button is inactive.

Reason: The file is not downloaded completely or blocked by antivirus.

Decision:

• 🔽 Re-download.apk and check its size.
• 🛡️ Temporarily disable Mi Security or Google Play Protect in your security settings.
• 📂 Try moving the file to the root folder of internal memory (sometimes helps).

How to minimize risks when installing an APK

Allowing installations from unknown sources opens up potential vulnerabilities for your device, and to mitigate the risks, follow these guidelines:

1. Use verified sources

The only relatively secure sites for APK downloads are official developer sites, APKMirror (signature verification) and F-Droid (open source). Avoid file sharing, torrenting, and little-known forums.

2. Check the hash amounts of files

Compare the MD5 or SHA-1 hash of the downloaded file to the original one (usually listed on the developer's website) before installing it.

3. Limit permits

Once installed, check what permissions the app requests from the Settings menu → Apps → [Application Name] → Permissions. For example, if the messenger requests access to SMS or geolocation without an obvious reason, this is a reason to be wary.

4. scan the device regularly

Enable automatic check in Google Play Protect (Settings) → Google → Security and periodically run scans through Mi Security.

5.Stay tuned for MIUI updates

Newer versions of the shell often close vulnerabilities associated with installing third-party applications. Update the firmware through Settings → About Phone → System Update.

💡

Even if you have authorized installation from unknown sources, MIUI still blocks the launch of suspiciously active applications (such as attempts to root or send SMS to paid numbers), which is at the core level of the system and does not turn off through standard settings.

FAQ: Answers to Frequent Questions