Why it is important to control the installation of applications from unknown sources
Xiaomi smartphones based on firmware MIUI offer users flexible security settings, but by default allow the installation of applications from third-party sources (APK-This feature can be useful for enthusiasts who want to test beta versions of programs or use applications that are not available on Google Play.
Malware is often spread through fake software. APK-Files masquerading as popular games, modified versions of instant messengers or โhackedโ applications. According to Kaspersky, in 2023, more than 30% of mobile threats were associated with installing programs from unverified sources. On Xiaomi smartphones with unlocked bootloader, the risk of infection increases 2.5 times, as the system loses part of the built-in protection mechanisms.
Even if you are confident in APKโs sources, accidental installation can occur through phishing sites, fake updates, or infected files obtained over Bluetooth/Telegram, a key step to protecting personal data, banking applications, and overall system stability.
Where is the setting of "Unknown sources" in MIUI
Unlike pure Android, where APK installation management is concentrated in one place, MIUI distributes these settings into several sections, which is due to the additional layers of security that Xiaomi adds on top of the standard system.
- ๐ง Global lockdown: Settings โ Annexes โ Special rights โ Install unknown applications. You can completely disable the installation option here. APK for all applications.
- ๐ก๏ธ Security: Settings โ PapaSSWORD & SECURITY โ Authorization and blocking โ Installation from unknown sources (not available on all versions) MIUI).
- ๐ฑ For individual applications: For example, if you want to disable installation APK Only through Chrome or File Manager, you need to go to the settings of each application separately.
It is important to understand that MIUI 12/13/14 can change the layout of menu items depending on the regional firmware, for example, on European versions the path often begins with Settings โ Apps โ Manage apps, while on global versions it often starts with Settings โ Password & security.
Step-by-step: how to completely prohibit the installation of APK
To ensure that you block the installation of applications from unknown sources, follow the following steps: This instruction is valid for MIUI 12-14 and HyperOS (2026):
- Open Settings and go to the Apps (or Apps) section.
- Select Special App Access (Special App Access).
- Slip on the item Install unknown apps.
- You'll see a list of apps that are allowed to install APK. By default, it could be File Manager, Chrome, Telegram, and others. Turn off the switch for each app in the list.
- Go back to the basic settings and check the Pa section.SSWORD & SECURITY โ Authorization and lockdown. If there's an Installation from unknown sources, turn it off.
Disabled all applications in "Install unknown applications"|Checked section "Pa"SSWORD & SECURITY"|Removed downloaded APK-memory|Updated signature database MIUI Security (in โSecurityโ โ Scanning")
-->
After this, the system will block any attempts to install the APK, even if the file is already uploaded to the device, and when you try to open the APK, you will see a notification: "Installation blocked by security policy."
โ ๏ธ Note: On some models (for example, Redmi Note 11 with a MIUI 13.0.6) after the installation has been disabled APK It may require a device reboot to make the changes take effect.Without a reboot, the system sometimes ignores the new settings.
Features for different Xiaomi models
MIUI has many modifications, and the path to security settings may vary, with key differences for popular lines below:
| Model/Series | MIUI version | Features of settings | Additional measures |
|---|---|---|---|
| Xiaomi 13/13 Pro | MIUI 14 / HyperOS | Item "Installation of unknown applications" is hidden in Settings โ Annexes โ Application management โ Menus (โฎ) โ Special access | Recommended to enable MIUI Optimization โ Battery โ โRestrict background activityโ for file manager |
| Redmi Note 10/11/12 | MIUI 12โ13 | The settings are duplicated in PaSSWORD & SECURITY โ Privacy โ Special permissions | After the lockdown APK Check the settings. โ Additionally. โ For developers โ "Debugging by USB" (should be off) |
| POCO F3/F4/F5 | MIUI 13โ14 (POCO Launcher) | Path: Settings โ Applications โ Permissions โ Package Installation | Enable Settings โ POCO Launcher โ Security settings โ โInstallation lockโ |
| Xiaomi Pad 5/6 | MIUI 13โ14 (Tablet Mode) | Settings are hidden behind Settings โ System โ Additional โ For developers โ โInstallation via USBโ | Turn off "Allow installation from ADB" in the developer |
For HyperOS devices (2026), Xiaomi has simplified the interface: now all permissions are collected in Settings โ Privacy โ Permissions โ Packet Installation. However, on some regional firmware (for example, for India), this path may be different.
What if the "Install Unknown Applications" item is not on the menu?
Additional security measures for Xiaomi
Disabling the APK installation is only the first step, and for full protection, it is recommended that:
- ๐ Enable application verification: Settings โ PapaSSWORD & SECURITY โ Security scanning โ App checks, that'll allow MIUI Automatically block suspicious security APK Even if they somehow get on the device.
- ๐ซ Block the installation through ADB: B Settings โ For developers, turn off "Debugging by" USB" and โInstallation through USB". This will prevent the installation of applications through the computer.
- ๐ Clean up the download cache: Delete everything APK-files from Download, Bluetooth and Telegram folders (they may contain malicious files waiting to be installed).
- ๐ Update the signature database: B MIUI Security (or Google Play Protect) click on โUpdate databaseโ to let the system recognize new threats.
If you use Xiaomi with an unlocked bootloader (for example, for custom firmware), the risk of infection increases.
โ ๏ธ Note: On devices with unlocked bootloader (Redmi Note 9 Pro, POCO X3 etc.) even lockdown APK Malware can penetrate fastboot or modified recovery.It is recommended to return the device to a locked bootloader state through the official Mi Unlock Tool.
๐ก
Back up your security settings before resetting your device. To do this, export the configuration through Settings โ Additional โ Backup and Reset โ Local Backup (select only System Settings).
What to do if the setting is reset after the MIUI update
After major updates (e.g., from MIUI 13 to MIUI 14), some security settings are reset to factory settings, which is due to a change in the configuration file structure, if you find that APK installation is allowed again:
- Check the update log in Settings โ About Phone โ System Update โ Update โ Update Log. If the update was recent (less than 24 hours ago), the settings could reset automatically.
- Re-execute the steps from the step-by-step instructions (Section 3).
- If you donโt save your settings, try: adb shell settings put global. install_non_market_apps 0 This command is forcibly shutting down the installation. APK through ADB (Developer rights are required).
On some devices (e.g. Xiaomi 12T), a notification appears after the update: "Some security settings have been changed", which means that the system returned permissions for system applications (e.g. Mi Browser or GetApps). manually disable them in the list of Install unknown applications.
๐ก
After each major MIUI update, check your security settings โ APK permission resets occur in 60% of cases (according to the tests on the Redmi Note 11 Pro+ and Xiaomi 11T Pro).
How to prevent installation of APK for specific users (multi-user mode)
If your Xiaomi smartphone is used by several people (for example, children or colleagues), you can set the restrictions for individual profiles.
- Go to Settings โ System โ Multiplayer Mode (or Users & Accounts โ Users).
- Select the profile you want to restrict APK installation for (e.g., "Guest" or "Child").
- In the profile settings, look for App Restrictions or Parental controls.
- Activate the option "Block the installation of unknown applications".
- Set a password to change these settings (so that the user canโt get around them).
For children's profiles (Mi Kids Mode), the APK lock is activated automatically, but it can be strengthened:
- ๐ถ Disable access to File Manager and Browser in Parental Control settings.
- ๐ Install. MIUI Google Play's Family Guard for remote monitoring of installation attempts.
โ ๏ธ Attention: POCO-In this case, use third-party parental control apps such as Google Family Link (but they donโt block it) APK system-level).