How to completely prohibit the installation of applications from unknown sources on Xiaomi: instructions for MIUI

Installing applications from unknown sources (sideloading) is one of the most common causes of infection of Xiaomi smartphones with viruses, spyware and advertising software. APK-This feature opens the door to cyber threats, especially if the device is used by children or inexperienced users. In this article, we will discuss how to completely block the ability to install applications from the outside, as through system settings. MIUI, and with the help of additional security measures.

It’s important to understand that even if you don’t manually install an APK, some applications (such as launchers or file managers) may request this permission automatically, we’ll show you how to turn it off globally, and we’ll also talk about hidden nuances that are often overlooked in standard instructions, such as why locking in security settings may not work on some models (Redmi Note 10 Pro, POCO X3 Pro) and what to do in such cases.

Why you should disable the installation from unknown sources

The main danger of manual APK installation is to bypass the built-in protection of Google Play Protect and MIUI scanning mechanisms. According to Kaspersky data for 2023, more than 60% of mobile viruses are spread through APK files disguised as:

• 🎮 Game cheats (e.g. modified versions of Free Fire or Free Fire) PUBG Mobile)
• 📺 Pirate versions of streaming services (Netflix, Disney)+, Kinopoisk)
• 💰 Fake banking applications (cloned versions of Sberbank Online, Tinkoff)
• 🔓 Hacked apps (Spotify Premium, YouTube Vanced)

Even if you download an APK from a “reliable” site (like APKMirror), there’s no guarantee that the file wasn’t swapped on the server or modified when it was downloaded. MIUI 14 adds APK Integrity Check, but it only works for apps installed through Google Play.

⚠️ Warning: On bootloader devices, malware can gain super-user rights (root) even without your knowledge, allowing viruses to masquerade as system processes (e.g. com.android.systemui) and go undetected for years.

Method 1: Blocking through MIUI security settings

The most obvious method is to disable the installation permit APK The security menu, however, depending on the version. MIUI The path to this adjustment may be different. Below is a universal algorithm for MIUI 12/13/14:

1. Open Settings → Applications → Application Management.
2. Click on the three dots in the top right corner and select Special Access.
3. Slip on the item Install unknown applications.
4. In the list, find all applications with permission to Allow from this source and turn off the slider for each.

Please note: on some models (Xiaomi 12T, Redmi K50), this item may be called Installation from unknown sources and be in Settings → Privacy.

After disabling, try installing any APK-The system must issue an error: "Installation locked. Enable installation permission from this source." If the error does not appear, the lock does not work (see the troubleshooting section).

Method 2: Use of Child Mode (Child Mode)

If you're using a smartphone by a child or an inexperienced user, the best option is to activate the For Kids mode, which not only blocks APK installation, but also limits:

• 🕒 Time of use of the device
• 📱 Access to certain applications
• 🌐 Web sites through a browser
• 💳 Shopping on Google Play

To activate the regime:

1. Go to Settings → Special Opportunities → Mode “For Children”.
2. Click Start and follow the instructions for setting up PIN-code.
3. In the Restrictions section, select Prohibit Application Installation.

⚠️ Note: For Kids mode only works with active parental control through your Mi Account. If you log out or reset your settings, all restrictions will be lifted.

Method 3: Blocking through ADB (for advanced users)

If system settings don’t work (for example, on custom firmware or root devices), you can block APK installation via Android Debug Bridge (ADB), a method that requires a PC connection and basic command line knowledge.

Instructions:

1. Turn on USB Debugging in Settings → About Phone → MIUI version (tap 7 times, then go back to Additional → For Developers).
2. Connect your smartphone to your PC and execute the command: adb shell settings put global install_non_market_apps 0
3. Reset the device.

To return the ability to install APK, use the same command with 1 instead of 0.

Method 4: Remove the APK system installer (root only)

This method irreversibly removes the possibility of installing any APK-Use it only if you are fully confident in your actions and are prepared for the consequences.

Implementation will require:

• 🔓 Unlocked bootloader and root rights (e.g. via Magisk)
• 📱 File Manager with support for root (for example, Root Explorer or Root Explorer) FX File Explorer)
• 🔄 Backup of the system (required!)

Instructions:

1. Open the root explorer and go to /system/priv-app/PackageInstaller.
2. Remove or rename the PackageInstaller folder (e.g., in the PackageInstaller_bak).
3. Reset the device.

⚠️ Note: After that, you will not be able to install any APK-files, including updates MIUI The only way to get back to functionality is to restore a folder from the backup or reflash the device.

💡

Before removing PackageInstaller, check if it is being used by critical system processes. To do this, run pm list packages -f | grep PackageInstaller in ADB.

What to do if the lock is not working

Sometimes even after all permissions are turned off, the system still allows you to install APKs.

If none of these methods worked, check your device for malware that could be a substitute for system settings.

1. Install Malwarebytes or Dr.Web Light from Google Play.
2. Run a deep scan.
3. Pay attention to applications with rights android.permission.INSTALL_PACKAGES.

Additional security measures

In addition to blocking the APK installation, we recommend:

• 🔒 Disable the installation from the browser: in Settings → Annexes → browser → Permits to deny access to storage.
• 📥 Lock down the loading. APK: In Google Chrome, go to Settings → Download and disable the option Request a Save Place for.apk files.
• 🛡️ Enable Google Play Protect: Play Store → Menus. → Play Protect → Scan the device.
• 🔄 Update regularly MIUI: In new versions, vulnerabilities are closed that allow to bypass the locks.

For corporate devices or smartphones issued to employees, consider using MDM-Mobile Device Management (Mi Enterprise Management) or Hexnode UEM. These services allow you to centrally manage permissions on all devices of the company.

💡

Even with the APK installation blocked, malware can penetrate vulnerabilities in the browser or messengers (such as phishing links on WhatsApp).

Troubleshooting and frequent errors

Let’s look at typical situations where the APK installation lock is not working correctly:

Error 1: After disabling permissions in Special Access, some applications (such as File Manager) still offer to install APK.

Solution: These applications may have an integrated installer. Uninstall them or disable them via ADB:

adb shell pm disable-user --user 0 com.android.packageinstaller

Error 2: There is no Install Unknown Apps in Settings on POCO F3 or Redmi Note 11.

Solution: On these models, the path is different: Settings → Privacy → Additional → Installation from unknown sources.

Error 3: After the MIUI update, all settings reset.

Solution: This is a known version problem MIUI 13.0.4–13.0.6. Update to the latest stable firmware or use ADB-method.

Error 4: When you try to install an APK, you will see a message that says “Application not installed” but without asking for permission.

Solution: This means that the lock has worked at the system level. However, some malicious APKs can exploit the Dirty Pipe vulnerability (CVE-2022-0847) to bypass the restrictions.

adb shell su

If the command is executed without errors, you have root and it needs to be removed.

FAQ: Frequent questions