Downloading apps from unknown sources is one of the most common causes of Xiaomi smartphones getting infected with viruses, spyware, and adware. APK-manual files, some programs (such as launchers or file managers) can automatically allow installation from unreliable sources, opening loopholes for malicious code. MIUI — from the old versions to the last MIUI 14.
Compounding the problem, the manufacturer often changes the location of security settings in new firmware.What worked on the Redmi Note 8 may not work on the Xiaomi 13 Ultra.We have compiled the current ways for all modern models, including devices under the brands. POCO Black Shark and also considered the nuances for corporate phones with preinstalled MDM-If legitimate applications (such as F-Droid or Aurora Store) have stopped working after blocking, there is a section at the end of the article on how to add exceptions without risking security.
Why you should disable the installation from unknown sources
The main danger is not in themselves. APK-The files, and the distribution mechanism, are often masked by malicious software as malware:
- 🎮 Mods for games (endless lives, cheats in) PUBG Mobile or Genshin Impact)
- 📺 Pirate versions of streaming services (hacked by Netflix, Disney)+)
- 💰 Financial applications (fake cryptocurrency wallets, clones of banking applications)
- 🔓 Hacked versions of paid programs (for example, Adobe Photoshop or AutoCAD for Android)
In 2023, Kaspersky’s lab recorded that 38% of infections of mobile devices on Android occurred through the installation of APK from third-party sources, and 12% of cases occurred on Xiaomi smartphones with MIUI firmware. At the same time, the standard Google Play Protect does not scan files downloaded manually – their verification lies on antivirus solutions from the manufacturer, which are often disabled by default in MIUI.
Another trap: some legitimate applications (such as APKMirror Installer or SAI) request permission to install from unknown sources, but are not malicious in themselves, creating an illusion of security for users who agree to permission without understanding the risks.
Where is the configuration on different versions of MIUI
The location of the option has changed in almost every major firmware version, and the following are the current paths for popular versions:
| MIUI version | The path to adjustment | Notes |
|---|---|---|
| MIUI 12 / 12.5 | Settings → Applications → Application Management → Application settings → Installation of unknown applications | All applications that have ever requested this permission are displayed |
| MIUI 13 | Settings → Privacy → Special Permits → Installation of Unknown Applications | Category grouping (e.g., File Managers) |
| MIUI 14 (Global/EU) | Settings → Applications → Permissions → Special Access → Installation of Unknown Applications | In some regions, the option is hidden – you need to enable Show system applications |
| POCO Launcher | Settings → System and device → Additional → Privacy → Installation of unknown applications | The path may differ on custom firmware |
On devices with corporate profiles (e.g., those released for companies), this section may be blocked by the administrator, in which case when you try to change the notification will appear: This setting is managed by your organization. IT-company department or complete device reset (but this will delete all data!).
💡
If you do not find the option in the settings, try to enter the phrase “unknown sources” in the search menu – the system will tell you the current path.
Step-by-step instruction for disconnection
The locking process consists of two steps: global disabling of permission and checking individual applications that may have received it before.
- Open security settings Go to Settings → Privacy → Special permissions (for MIUI 13/14) or Settings → Applications → Application management (for MIUI 12).
- In some versions, it may be called Installation from Unknown Sources or Unknown Sources.
- Disable permission for all applications Before you will appear a list of programs that are allowed to install APK. Turn off the sliders opposite each point, including system utilities like Files or Browser.
- Check hidden permissions Click on the three dots in the top right corner and select Show System to see all applications, including service ones.
☑️ Checking the blocking of unknown sources
After completing the steps, try downloading any APK-file (e.g. from APKMirror) and Attempt to install it. The system must show a notification: To protect your device, the installation is blocked.
⚠️ Note: Some apps (e.g. Xiaomi Community or Mi Video) may automatically enable this resolution after an update.
What to do if the setting is not saved
Sometimes, after shutdown, the sliders themselves return to the "On" position after a few hours.
- 🔄 Automatic resetting of settings (for example, after rebooting or updating) MIUI)
- 📱 Background Services (some Xiaomi system applications force permissions to be enabled)
- 🛠️ Firmware errors (especially relevant for beta versions) MIUI)
Decisions:
- Reset permissions Go to Settings → Applications → Application Management → Three points → Reset application permissions. This will return all permissions to factory settings.
- Turn off Auto Optimization In Settings → Battery & Performance → Battery Optimization Find applications that can change settings (like Security or Cleaner) and turn off optimization for them.
- Manual lock through ADB (Connect your phone to your PC and execute the command: adb shell settings put global install_non_market_apps 0 This will force the installation from unknown sources at the system level to be blocked.
List of Xiaomi system applications that may include resolution
How to Add Exceptions to Trusted Applications
If you use alternative stores like F-Droid or Aurora Store, it is inconvenient to block APK installation completely, in which case you can create a whitelist of trusted sources:
- Enable permission only for a specific application (such as F-Droid) in the Install Unknown Applications menu.
- Install an APK-checked antivirus (such as Malwarebytes or Bitdefender) that will scan files before installing.
- Use a sandbox (like the Shelter or Island app) to isolate the installation of unreliable APKs in a separate profile.
An example of a secure setting for F-Droid:
- Open Settings → Privacy → Special Permits → Install Unknown Applications.
- Find the F-Droid list and turn on the slider.
- In the F-Droid app itself, go to Settings → Expert Mode and turn on the option to Check App Signatures.
⚠️ Warning: Even trusted stores have fake apps. Always check: 🔍 Number of downloads and rating 👤 Developer data (official website, contacts) 📋 Hash amount of the file (can be compared on the VirusTotal website)
Additional security measures
Disabling the installation from unknown sources is only the first step.
| Mera. | How to turn it on | The effect |
|---|---|---|
| Blocking installation via USB (ADB) | Settings → Additional → For developers → Debugging by USB (disable) | Protection against installation of software through a computer |
| Scanner of malicious files | Security → Viral scanner → Autoscanning (include) | Checking downloaded APKs before installation |
| Prohibition of changing system settings | Settings → Accounts and synchronization → Delete unnecessary accounts | Preventing Remote Settings Management |
Pay special attention to the setting of Google Play Protect:
- Open the Google Play Store.
- Click on the profile icon → Play Protect.
- Enable the options to Scan your device for threats and improve malware detection.
💡
Even with the installation disabled from unknown sources, malware can penetrate vulnerabilities in the browser or messengers. Regularly update firmware and applications!
Frequent mistakes and their solutions
When setting up a lock, users often face the following problems:
- 🔧 "Setup unavailable" (blocked in gray) Reason: Enterprise profile or parental controls are active.Solution: Delete profile in Settings → Accounts or contact the administrator.
- 🔄 The resolution is activated after the reboot Reason: Failure of the service com.miui.securitycenter.Solution: Clear the cache of the Security application in the settings.
- 📱 Reason: Unofficial builds (like LineageOS or Pixel Experience) may lack a source verification module. Solution: Install a third-party firewall like NetGuard.
If you can’t install a critical application after blocking (such as the Mi Unlock Tool to unlock the bootloader), temporarily turn on the permission, install the program, and then turn it off again. Don’t leave the setting active for longer than 5-10 minutes!