How to completely ban the installation of applications from unknown sources on Xiaomi Redmi

Xiaomi Redmi smartphones based on firmware MIUI allow you to install applications not only from the official Google Play store, but also from third-party sources - so-called unknown sources (APK-This feature is useful for power users, but at the same time opens the door to viruses, spyware and fraudulent programs. If you want to protect your Redmi from inadvertently installing malicious applications – especially for children, elderly relatives or corporate devices – you need to properly configure the system limitations.

In this article, you will find detailed instructions for all versions of MIUI (including MIUI 14 and HyperOS), and learn how to avoid typical errors when blocking the APK installation. We will analyze not only standard security settings, but also hidden features that will help make protection as reliable as possible.

Why it is important to ban installations from unknown sources

According to Kaspersky data for 2023, more than 30% of mobile viruses spread through the Internet. APK-In 85% of cases, users install malware voluntarily without knowing the threat, for example, because of fake versions of popular applications (WhatsApp, TikTok, games:

• 🔓 Open architecture. MIUI, which by default allows installation APK minimally alert.
• 📱 Brand popularity among users looking for free versions of paid programs.
• 🔄 Frequent firmware updates that can reset security settings.

Even if you're confident in your skills, one random click on an ad or a file from a messenger can be enough to infect you. APK-Installator, in 2022, stole credit card data from thousands of Xiaomi users in Europe:

• 🛡️ Eliminate the risk of “pushing” suspicious links (relevant to children).
• 📵 Prevent the installation of spyware modules that monitor geolocation or SMS.
• 💰 Avoid losing money due to Trojans that substitute payment data.

⚠️ Note: Some Redmi models (e.g. Redmi) 9A or Redmi A1) Even after blocking unknown sources, there is a loophole through the ADB-If the device is used in a corporate environment, further configure the kiosk mode (for this, see the section on hidden functions).

Method 1: Standard lock through MIUI settings

This is the basic method that works on all Xiaomi Redmi smartphones regardless of the firmware version. MIUI 12/13/14 HyperOS:

1. Open Settings (the gear icon on the main screen).
2. Go to the Appendix section → Application management.
3. In the upper right corner, press three dots (⋮) and select Special Access.
4. Slip on the item Install unknown applications.

You will see a list of all the apps that are allowed to install APK. By default, here may be:

• 📁 File Manager (Files by Google) MI File Manager).
• 🌐 Browser (Chrome, Mi Browser).
• 💬 Messengers (Telegram, WhatsApp).

To completely disable installation, disable the switches opposite each application in the list, and then the system will block all attempts to install APK, even if the file is already downloaded to the device.

Open Settings → Applications → Application Management

Selected item "Special access" → "Installation of unknown applications"

All switches in the list of applications are disabled

It is verified that after the reboot the settings were maintained.-->

⚠️ Note: On Redmi with HyperOS, the path may be different: → Security → Install unknown applications. If you can't find a section, search by settings (loop icon at the top).

Method 2: Blocking through Parent Control

If a child or an inexperienced user is using a smartphone, standard locking may not be enough, in which case the built-in MIUI parental controls, which not only prohibit APK installation, but also restrict access to dangerous parts of the system, will help.

Algorithm of settings:

1. Go to Settings → Xiaomi Accounts → Parental Controls.
2. Create a profile of your child (you will need to link your Mi Account).
3. In the Restrictions section, activate the option to Disable Application Installation.
4. Install. PIN-Code for exiting the mode (remember it!).

Advantages of this method:

• 🔒 System-level locking – even if an attacker gains physical access to the phone, they won’t be able to undo the restrictions without it. PIN-code.
• 📊 Activity log – you can see attempts to install prohibited applications.
• ⏰ Flexible settings – you can set time limits (for example, locking overnight).

The downside of parental controls is that it requires a binding link to your Xiaomi account, so if you don’t want to create a Mi Account, use the kiosk mode (described in the next section).

Standard MIUI setting

Parental control

Kiosk mode

Another option-->

Method 3: Kiosk mode for complete system isolation

Kiosk Mode is a sandbox for Android that allows you to run only pre-approved apps, blocking access to all other features, including APK installation. On Xiaomi Redmi, it can be enabled without root rights, but you will need to activate through ADB.

Instructions:

1. Connect your smartphone to your PC and enable USB Debugging (Settings → About Phone → MIUI Version → 7 times tap the version number, then go back to Additional Settings → For Developers).
2. Download Google’s Platform Tools and unpack it on PC.
3. Open the command line in the adb folder and type:

adb shell pm install-create -r -t -S 1000000


adb shell am set-device-owner com.miui.kiosk/.admin.DeviceAdminReceiver

After that, the phone will be notified that the kiosk mode is activated.

• 📱 Go to Settings. → Special facilities → Kiosk mode.
• 🔧 Select the applications that you can run (e.g., Phone and Messages only).
• 🔒 Install. PIN-exit-code.

⚠️ Attention: If you forget PIN-The code is from the kiosk mode, you can unlock the phone only through a full reset!

The kiosk mode is ideal for:

• 🏫 School tablets based on Redmi Pad.
• 🏢 Corporate devices (couriers, sellers).
• 👵 Senior users who only need calls and SMS.

Method 4: Blocking with Google Play Protect

Google Play Protect is an Android built-in antivirus that can automatically block the installation of dangerous APKs. On Xiaomi Redmi, it works in parallel with MIUI Security, but its settings are often ignored.

1. Open the Google Play Store.
2. Slip on the profile avatar in the upper right corner.
3. Select Play Protect → Settings (cog icon).
4. Activate options: 🔍 Scan the device for threats 🛡️ Improved security (sends suspicious file data to Google)

Play Protect will then be:

• 🚫 Lock down the installation APK from unverified sources (even if they are already downloaded).
• ⚠️ Show warnings when trying to open a dangerous file.
• 🗑️ Remove malicious applications automatically.

Important: Play Protect does not replace the standard MIUI lock, but complements it. Use both methods for maximum protection.

1. Internet connection (required to download virus databases).

2. version of Google Play Services (update to Play Store).

3.Date and time settings - if they are knocked down, the protection won't work.-->

What to do if settings are reset after the MIUI update

One of the common problems with Xiaomi Redmi is that it automatically resets security settings after a firmware update, which happens because MIUI sometimes returns settings to factory values.

1. Turn off automatic update: Go to Settings → The phone. → Update the system (⋮) and select Update Settings. Turn off Autoboot via Wi-Fi.

Create a backup of your settings

• Use Settings → Additional → Backup and Reset → Local Backup.
• Save the file to your PC or cloud.
• Check your settings after each update – especially the Install Unknown Apps section.

If the reset has already occurred and you find that the lock is disabled:

• 🔄 Restart your phone – sometimes settings are applied after a reboot.
• 🔧 Reconfigure the lock according to the instructions above.
• 📧 Check your email (if you have used parental controls) — MIUI You can send notifications of changes.

1. Section "Installation of unknown applications" - whether the permissions have been reset.

2. Google Play Protect settings – has automatic scanning turned off?

Kiosk mode (if used) - whether re-activation is required through ADB.-->

Additional Protection Measures: What More Can Be Done

Even after the unknown sources are blocked, there are risks, such as the following:

• 🔗 Phishing links (fake Google Play pages).
• 📧 Malicious investments in letters or messengers.
• 🔌 USB-devices (e.g. infected flash drives).

To close these loopholes:

1. Set up MIUI Security: Open the Security app (shield icon). Activate Virus Protection → Deep Scan. Enable Blocking malicious sites in your browser.

Turn off the installation via USB:

adb shell settings put global install_non_market_apps 0

This command will completely ban the installation of APKs from external media.

Dr.Web

ESET

For corporate users or parents who want total control, Kids Place or AppLock can be used to:

• 🔐 Block access to the Play Store by password.

FAQ: Frequent questions about blocking unknown sources