Disabling the installation from unknown sources on Xiaomi: the complete guide

Why it is important to control the installation from unknown sources

Installation of applications from unknown sources in MIUI — It's a two-way sword, and on the one hand, it allows you to install.apk files outside of Google Play, which is useful for beta testers or users of regional services, and on the other, it opens the door to malware, phishing, and unstable builds. The manufacturer by default blocks this option, but many users of Xiaomi, Redmi or other devices. POCO include it to install modified applications or games, forgetting to return the settings to a safe state.

Kaspersky statistics for 2023 show that 38% of infections of mobile devices on Android occur through manual installation APK And 70 percent of the time, people don't even know their smartphone is infected until banner ads or unauthorized debits start appearing. Disabling this option is a basic step in cyber hygiene that takes less than a minute but significantly improves data protection.

In this article, we will examine:

• 🔍 Where exactly is this setting hidden in different versions? MIUI (12-to-14)
• 🛡️ Why simply turning off the security menu isn’t enough to protect you
• 📱 Features for models with global and Chinese firmware
• ⚙️ How to block installation APK System level (for advanced users)

Warning: If you actively use apps outside of Google Play (such as the Aurora Store or APKMirror), completely disabling the feature may limit your options, in which case we recommend setting exceptions for trusted sources, as we will also discuss below.

Where is the setting in MIUI: step-by-step

Interface. MIUI It is known for frequent menu changes, so the path to customization may vary depending on the version of the shell. MIUI 12).

First, check out your version of the shell:

1. Open the Settings.
2. Go to About the Phone.
3. Find the line MIUI version (e.g. MIUI Global 14.0.5)

Now, choose your own option:

If your version is not in the table, use the universal method:

1. Open Settings and enter in the search bar (magnifying glass at the top) the query: unknown sources
2. The system will automatically show all the relevant menu items

How to completely disable the installation APK: step-by-step

Simply disabling permission in settings does not guarantee 100% protection. MIUI There are some nuances that many people don't know about:

Open the settings of special permits|Disable permission for all applications|Check the browser settings|Disable "Downloads" as a source APK|Reset the device-->

Let's take each step in detail:

1. Disconnection for all applications

In the Installation of Unknown Applications menu you will see a list of programs that are allowed to install APK (Most often, it's File Manager, Browser, Google Chrome. Switch sliders to "Off." for each item. Note: some system applications (e.g., com.android.packageinstaller) may not be listed -- that's okay.

2. Checking browser settings

Even if you have disabled Chrome or Mi Browser resolution, some web pages may automatically offer downloads. APK. To prevent it from happening:

• 🌐 In Chrome: Settings → Site settings → Downloads. → Turn off "Ask where to save files"
• 🌐 In Mi Browser: Settings → Additionally. → Downloads. → Turn off "Suppress files"

Lockdown of "Downloads"

Download folder – the main source APK-In files. MIUI 14 can be blocked:

1. Open the File Manager → Go to Downloads.
2. Press the three dots at the top. → Folder settings
3. Activate the option to Prohibit installation APK (Not available on all models)

4.Reboot

After making changes, be sure to restart the device. Some system processes (such as Package Installer) cache permissions, and without restarting the settings may not apply.

💡

If you need to install it after you have switched off. APK, Temporarily allow installation for only one application (such as a file manager) and once installed, turn off the permission again.

Features for Chinese firmware (CN ROM)

Users of devices with Chinese firmware (CN ROM) They face additional restrictions. APK It's blocked at the system level because of local legislation, but there are workarounds.

How to check the type of firmware:

1. Open the Settings. → The phone.
2. Repeatedly tap on the line version MIUI, Until the developer menu comes out.
3. Return to the main settings menu → Additionally. → Developer version
4. If the region is China, you have CN ROM

In Chinese firmware menu Install unknown applications can:

• 🔒 Be completely hidden (requires unlocking the bootloader)
• 🛑 Ask for a password from your Mi Account when you try to change your account
• ⚠️ Reset automatically after system update

For owners. CN ROM There are two options:

1. Installation of global firmware (requires unlocking the bootloader and risk of loss of warranty)
2. Use of the ADB-Adb shell settings put global install_non_market_apps 0 This team will block the installation. APK System-wide, to recapture the opportunity, replace it. 0 on 1.

Additional security measures after disconnection

Disabling the installation from unknown sources is only the first step.

⚠️ Attention: Malignant APK They can penetrate the device not only through a direct installation, but also through vulnerabilities in other applications (for example, instant messengers). MIUI and established programmes.

1.Setting up Google Play Protect

Activate the built-in protection from Google:

1. Open the Google Play Store → tap on the profile avatar
2. Choose Play Protect → Settings
3. Enable Threat Scanning and Improved Threat Search

2. Locking the installation through Mi Security

Security (Mi Security) in the MIUI has hidden functions:

• 🔐 Open Security. → Settings (cogs)
• 🔐 Activate the installation lock from unknown sources (if any)
• 🔐 Enable Check of Installed Applications

3. Limitation of rights for file manager

Even with permissions disabled, some files can be run through the File Manager.

1. Go to Settings → Applications → Application Management
2. Find the File Manager → Permits
3. Turn off System Settings Change and Display on top of other windows

4. Use of third-party antiviruses

For additional protection, install one of the verified applications:

• 🛡️ Bitdefender Mobile Security (free version scans) APK before installation)
• 🛡️ Malwarebytes (specializes in spyware detection)
• 🛡️ Kaspersky Mobile Antivirus (has a malicious base) APK for MIUI)

💡

Even with unknown sources disabled, check the list of installed applications in Settings regularly. → Applications: Malware may be disguised as system services (e.g., Android System WebView").

What to do if the setting is not saved

Sometimes users are faced with a situation where, after disabling the installation permission, APK It turns on itself again. It can happen for a number of reasons:

1. Automatic update of applications

Some applications (such as File Manager or Mi Browser) reset permissions after the update.

• 🔄 Turn off automatic updates for these apps on Google Play
• 🔄 Remove updates (in the application settings) → three-point → Remove updates)

2. Conflict with the optimizer

Function Optimization of the system in MIUI Sometimes it resets the security settings to fix it:

1. Go to Settings. → Battery and productivity → Optimization
2. Turn off Auto-Optimization or add application managers to exceptions

3. Malware

If the settings are reset without your involvement, it could be a sign of infection.

Install Malwarebytes and perform a full scan|Check the list of device administrators in Settings → Passwords and security|Disable suspicious apps in Settings → Annexes → All applications|Remove unused items APK from the download folder-->

4.Dumping through ADB

If the software methods do not help, use the command to force reset:

adb shell cmd appops set --uid com.android.packageinstaller INSTALL_PACKAGES ignore

This command will block the installation of packages at the system level. To return to the standard settings, replace ignore with default.

⚠️ Note: If the problem persists after all manipulations, this may indicate modification of system files (for example, after rooting), in this case, we recommend resetting to factory settings or reflashing the device.

Alternative methods of protection without disabling the installation APK

If you need to maintain the installation capability APK (For example, for work or testing, but you want to minimize the risks, use these methods:

1. Sandbox for APK (Sandboxie or Island)

Island-type apps (from Xiaomi developers) let you run suspicious apps APK isolated:

• 📱 Install Island from Google Play
• 📱 Transfer the file manager to the island (isolated profile)
• 📱 Set up. APK Only through an isolated environment

Verification APK before installation

Use online services to analyze files:

• 🔍 VirusTotal (downloading) APK, You get a report from 70.+ antivirus)
• 🔍 APKCombo Analyzer (verifies permits and certificates)
• 🔍 AndroTotal (specializes in Android threats)

3. DNS-blocking

Some harmful APK They're loaded from known domains. Block them at the network level:

1. Install. DNS66 Or Blokada from F-Droid.
2. Add to the blacklist domains: apkpure.net apkmirror.com uptodown.com blackmartalpha.com
3. Activate the lockdown.

4.Use of alternative vetted stores

If you need apps outside of Google Play, use proven sources with moderation:

• 🏪 Aurora Store (an anonymous client for Google Play)
• 🏪 F-Droid (open source only with verified code)
• 🏪 APKMirror (publishes only originals) APK modificationless)

FAQ: Frequent questions about disabling unknown sources