How to flash Xiaomi without unlocking the bootloader: all working ways in 2026

Introduction: Why Unlocking a bootloader Is Not Always Necessary

Xiaomiโ€™s smartphone firmware has traditionally been associated with the need to unlock the bootloader, which requires waiting 7 to 30 days for approval from the company, linking a Mi Account account and risking losing the warranty. However, there are legal and semi-official methods to upgrade or reflash the device without unlocking, which work even on new models with HyperOS.

In this article, weโ€™ll break down 4 proven ways to run Xiaomi firmware without unlocking the bootloader, from standard OTA updates to hidden Fastboot modes and tools like the Mi Flash Tool with workarounds. Importantly, not all methods are suitable for downgrading or installing custom firmware, which weโ€™ll talk about as well.

Before you start, check:

  • ๐Ÿ“ฑ Device model (e.g. Redmi Note 12 Pro)+ 5G or POCO F5) โ€” The methods are different for the Redmi series, POCO Xiaomi.
  • ๐Ÿ”„ Current version MIUI/HyperOS (In Settings โ†’ The phone).
  • ๐Ÿ”‹ Battery charge (minimum 60% - when the process is interrupted, the phone can turn into a brickยป).

Method 1: Official OTA-Update through the Three Pointsยป

The safest method is to use a hidden menu. OTA-Updates that allow you to manually download and install firmware without unlocking.This method works on most Xiaomi devices with a new device. MIUI 12-15 and HyperOS, but not suitable for downgrade or firmware installation from other regions.

Instructions:

  1. Download the full OTA (.zip file) package for your model from the official Xiaomi website or resources like Xiaomi Firmware Updater.
  2. Rename the file to update.zip and move it to the root folder of the phoneโ€™s internal memory (not to folders like Download).
  3. Open the Updater app, click on the three dots in the upper right corner and select Select the firmware file.
  4. Specify the path to update.zip and confirm installation. The phone will reboot and update automatically.

Limitations of the method:

  • โŒ It doesn't work for the transition from MIUI HyperOS (requires full firmware via Fastboot).
  • โŒ You cannot install firmware for another region (for example, from Global to China).
  • โœ… Suitable for correcting bugs after a bad one OTA-update.

๐Ÿ’ก

If the Three Dots menu doesnโ€™t have a file selection option, try renaming it. update.zip into miui_OTA_name.zip, where the name is the code of your model, for example, miui_VIVALDIGlobal_OS1.0.2.0.UMBMIXM_20231212.0000.00_13.0_global.zip).

Method 2: Fastboot firmware without unlocking (EDL method)

Emergency Download Mode (EDL) allows you to flash a Xiaomi phone even with a locked bootloader, but requires a special cable (EDL-cable) or short circuit test contacts on the board, a method often used in service centers and suitable for restoring bricks or forced installation of stock firmware.

Step-by-step:

  1. Download the Fastboot firmware (.tgz or.zip file) from Xiaomi or Xiaomi Firmware Updater. Unpack it into a folder without Cyrillic characters.
  2. Install Qualcomm HS-USB QDLoader 9008 (for Snapdragon processors) or MediaTek Preloader (for Helio/Dimensity chips).
  3. Put the phone in mode. EDL: ๐Ÿ”ง For Snapdragon: Click Loudness+ + Loudnessโˆ’ Connect the cable to the PC (you need EDL-cable or closing test points). ๐Ÿ”ง For MediaTek: use the adb reboot edl command (if you have a ADB included).

Qualcomm HS-USB QDLoader 9008

COM

Mi Flash Tool

Refresh

Flash

Download Fastboot firmware for your model|Install drivers Qualcomm/MediaTek|Prepare. EDL-quid|Disable the antivirus (can block Mi Flash)|Charge your phone at least to 80%-->

โš ๏ธ Attention: Firmware through EDL Without an authorized Mi Authorized Account, you may be blocked. IMEI on new models (e.g. Xiaomi) 13T, Redmi Note 12 Turbo Devices 2023-2026 require official access to the EDL, Which is available only at service centers.

Processor modelRequired driverHow to enter EDLRisk of blocking IMEI
Snapdragon 8 Gen 2/3Qualcomm HS-USB QDLoader 9008Test points or EDL-cableHigh (starting in 2023)
Snapdragon 778G/782GQualcomm HS-USB QDLoader 9008Adb reboot command edlMedium.
MediaTek Dimensity 9000/1200MediaTek PreloaderAdb reboot edl or closing commandLow.

Method 3: Local updates via Recovery (for MIUI)

If your Xiaomi is running MIUI (not HyperOS), you can use a local update via Recovery.This method does not require unlocking the bootloader, but is only suitable for installing official firmware in the same region.

Algorithm of action:

  1. Download the full firmware (not downloaded) OTA!) It's.zip for your model, like the Redmi Note. 11 Pro+ 5G It could be a file. veux_global_images_V13.0.6.0.SKCMIXM_20221010.0000.00_12.0_global.zip.
  2. Rename the file to update.zip and place it in the root of internal memory.
  3. Turn off the phone and press Volume++ Power to enter Recovery.
  4. Select the language (if required), then go to Install update.zip to System.
  5. Confirm the installation and wait until the completion (the process will take 5-10 minutes).

โš ๏ธ Note: HyperOS doesn't use this method, instead of Recovery, it uses a Fastboot with a mandatory unlock. It also doesn't allow installing firmware for other regions (e.g. China). ROM Global, as this will result in the network being blocked.

What if Recovery doesnโ€™t see the update.zip file?

  • ๐Ÿ”„ Check the file name (it should be exactly the same). update.zip, numerically or postfixed).
  • ๐Ÿ“ Put the file in the root of memory, not in the Download folder.
  • ๐Ÿ”ง Try another firmware file (sometimes Recovery doesn't accept it) OTA-packet).

OTA via Three Points |Fastboot with Unlock |Recovery without unlock |EDL (via Test Points) |Never stitched-->

Method 4: Bypassing the unlock through vulnerabilities (older models only)

On Xiaomi devices until 2021 release (for example, Redmi Note 9 Pro, POCO X3 NFC), there are exploits that allow you to temporarily bypass the bootloader lock. One of the most famous is the DirtyCOW vulnerability, which allows you to write data to protected partitions without unlocking.

How it works:

  1. Install DirtyCOW Exploit on your phone (available on 4PDA or XDA Developers).
  2. Download a modified boot.img for your model (for example, with the Magisk patch for root rights).
  3. Run the exploit and specify the path to boot.img. The application will temporarily access the sections and record the image.
  4. Restart your phone to Fastboot and run the full firmware through the Mi Flash Tool.

โš ๏ธ Note: This method does not work on HyperOS devices and newer versions MIUI 14+, The DirtyCOW vulnerability has been closed, and it can lead to data loss or Mi Account blocking if misused.

List of models vulnerable to DirtyCOW
Redmi Note 8/8T (ginkgo/willow), Redmi Note 9/9S/9 Pro (merlin/curtana/joyeuse), POCO X3 NFC (surya), Mi 9T/9T Pro (davinci/raphael), Mi A3 (laurel_sprout). On newer models (e.g. Redmi Note) 10 pro POCO F3) exploit doesn't work.

Risks and consequences of firmware without unlocking

Xiaomi firmware without unlocking the bootloader is always a compromise between convenience and security.

  • ๐Ÿšจ Lockdown IMEI (starting MIUI 13 and HyperOS: when unofficial firmware is EDL Fastboot without authorization.
  • ๐Ÿ”’ Warranty loss: Even if the bootloader remains locked, firmware traces remain in the logs (efuse).
  • ๐Ÿ“ต Network problems: when installing firmware from another region (e.g. China) ROM Global device).
  • ๐Ÿ”„ Cyclical reboot: if the firmware is incompatible with the phoneโ€™s hardware revision.

How do you minimize the risks?

  • ๐Ÿ“Œ Use only official firmware from the Xiaomi site (not custom LineageOS or Pixel Experience).
  • ๐Ÿ“Œ Check compatibility with model code (e.g. veux for Redmi Note 11 Pro)+ 5G).
  • ๐Ÿ“Œ Do backup through Mi Cloud or TWRP (if the loader is already unlocked).

๐Ÿ’ก

Firmware without unlocking the bootloader is possible, but is only suitable for official updates or restore stock software. For custom firmware, root rights or downgrade, unlocking is mandatory.

Frequent mistakes and their solutions

Even when following instructions, users encounter errors.

Mistake.Reason.Decision
Couldn't verify device (in Mi Flash)Model firmware mismatch or blocked bootloaderCheck the model code and download the correct firmware. Use EDL for a locked bootloader.
Anti-rollback check failDowngrade attempt on older version of MIUI/HyperOSUpgrade to the latest version or use the firmware with the same Anti-rollback number.
The phone does not turn on after the firmwareIncorrect firmware file or interrupted processRepeat the firmware through EDL or contact the service center.
Mi Flash does not see the deviceNo Qualcomm/MediaTek drivers or incorrect modeInstall drivers manually through Device Manager, check Fastboot/EDL mode.

If after firmware the phone hangs on the logo or does not load, try:

  1. Reset your settings via Recovery (Wipe Data).
  2. Repeat the firmware using clean all in the Mi Flash Tool.
  3. Check the integrity of the firmware file (compare) MD5-hash).

Can I flash Xiaomi with HyperOS to MIUI without unlocking?
No, switching from HyperOS to MIUI requires full firmware through Fastboot or EDL, And that requires unlocking the bootloader, except if Xiaomi officially releases it. OTA-downgrade pack (unlikely).
Will Google Pay work after EDL firmware?
Yes, if you install an official global firmware (e.g. Global ROM), but if you flash China ROM, Google services (including Google Pay) wonโ€™t work without additional manipulation.
How to check if the bootloader is unlocked on Xiaomi?
Turn off the phone and press the volume.โˆ’ + Power to log into Fastboot. If you have Unlocked on the bottom of the screen, the bootloader is unlocked. If Locked is locked. ADB: Fastboot oem device-info Search for Device unlocked: true/false.
Can I flash POCO F5 without unlocking to install custom firmware?
No, to install LineageOS, Pixel Experience or other custom firmware on POCO F5 (as on any modern Xiaomi), it is mandatory to unlock the bootloader. Without it, you can install only official firmware through OTA or Recovery.
What if, after firmware through EDL, the phone requires authorization of Mi Account?
This means that the device has activated Mi Account lock. Solutions: Enter the data from the associated Mi Account. If the account is not yours, contact the service center with proof of purchase. For older models (until 2020), you can try to bypass the lock through EDL with an authorized account.