Previous articleUnknown sources on Xiaomi: how to turn on MIUI and HyperOS in 3 minutes

Why Xiaomi is blocking APK installation and how to get around it legally

Every Xiaomi, Redmi, or POCO smartphone owner will eventually be confronted with the message “Installation locked” when trying to install an app from a.apk file. This protection is part of MIUI’s security policy and the new HyperOS, designed to keep users from malware. But what if you need to install an app that is not available in Google Play or GetApps? For example, a beta version of a program, a modified client for games or corporate software.

Enabling the Unknown Sources option is not a rule violation, but a legal way to expand the functionality of the device. However, on Xiaomi this process is different from standard Android: there is no single global switch, and permissions are issued separately for each browser or file manager. In this article, we will analyze all the current methods for different versions of firmware, including MIUI 14 and HyperOS, and also explain how to avoid typical errors when installing APK.

Let’s warn you right away: activation of this option requires caution. Unlike Samsung or Google Pixel, where one confirmation is enough, Xiaomi’s algorithm may differ even depending on the smartphone model. For example, on POCO F5 with HyperOS, the path to settings will be different than on the Redmi Note 12 with MIUI 13.

How to Enable Unknown Sources through MIUI Settings

The most reliable method is to use the built-in system settings. It works on all Xiaomi devices, regardless of the firmware version (except for some regional builds).

  1. Download the.apk file via a browser (such as Chrome or Mi Browser) or file manager (Files by Google, Mi File Manager).
  2. Try to open the downloaded file. The system will give a warning: "Installation is blocked." Click "Settings" in this window.
  3. You will be in the section “Special permissions” → “Install unknown applications” and select the application that downloaded APK (such as Chrome or Files).
  4. Activate the “Allow installation from this source” switch.
  5. Return to the.apk file and try again.

Importantly, the permission is only valid for a specific application, and if you download APK from another browser, you'll have to repeat the procedure.

Downloaded from an official source (developer’s website) |

Is the file verified by an antivirus (e.g. VirusTotal) |

Is there enough free space on the device (minimum 200 MB)|

Is it off? VPN (some APK block the installation when active VPN)-->

Alternative methods: if the standard method does not work

On some devices (especially HyperOS or custom firmware) the standard path may be changed.

Method 1: Through "Security Settings"

This method is suitable for MIUI 12-14:

  1. Open “Settings” → “Applications” → “Application Management”.
  2. In the upper right corner, click on three dots and select "Special Access".
  3. Go to “Install Unknown Applications”.
  4. Select the desired application (such as Chrome) and enable permission.

Method 2: For HyperOS (new models 2023–2026)

In HyperOS, the path has changed:

  1. Go to Settings → Applications → Application Permissions.
  2. Select "Install Packages".
  3. Find the application you want to install APK through and activate the permission.

If none of the methods worked, you may have regional firmware installed on your device (for example, for China or India), where the function is disabled at the system level, in which case only unlocking the bootloader or changing the firmware to a global one will help.

MIUI Global|MIUI China|MIUI Europe (Xiaomi.eu)|HyperOS|other-->

Table: Method compatibility with MIUI and HyperOS versions

Firmware versionStandard way.Through "Special Access"Through Application Permissions (HyperOS)Notes
MIUI 12✅ Yes.✅ Yes.❌ No.You may need to restart after activation
MIUI 13/14✅ Yes.✅ Yes.❌ No.Some models (e.g. Redmi Note 11) require SMS confirmation.
HyperOS 1.0⚠️ Partially.❌ No.✅ Yes.Xiaomi 14 and POCO F6 may need to disable MIUI protection
Brush firmware (LineageOS, Pixel Experience)✅ Yes.❌ No.❌ No.It uses the standard Android mechanism

Common Mistakes and How to Avoid Them

Even after you turn on Unknown Sources, users are having problems, and we're going to look at the most common ones.

  • 🔴 Packet Parsing Error: File APK Solution: Reload or check check the checksum (MD5).
  • 🔴 «App not installed": the device already has a version of this app. Solution: delete the old version or use the adb install command -r name file.apk.
  • 🔴 «Security Policy Blocking: The Protection function is activated MIUI». Solution: Turn it off in Settings» → «Memory» → «Protection MIUI».
  • 🔴 «Not enough memory": even if there is space on the device, the system can block the installation.Solution: clear the cache in "Settings» → «Warehouse».

⚠️ Note: If you are installing APK For banking applications (e.g., SberBank or Tinkoff) downloaded from third-party sources, there is a high risk of losing access to the account. Banks block such installations as potentially dangerous.

What if the APK is not installed even after all the manipulations?
If you’ve tried all the methods but the file still doesn’t install, check: 1. Processor architecture: APK can only be assembled for arm64, and your device can only be assembled for armv7 (you can find out in the CPU-Z app). 2. Android version: some APKs require Android 12+ and your device runs on Android 11. 3. App signature: if the APK is modified (for example, a hacked game), the system can block it due to a signature mismatch. 4. Regional restrictions: some applications (for example, Google Pay in Russia) are not installed on uncertified devices.

Security: How to protect yourself from malicious APKs

Turning on Unknown Sources opens the door not only to useful but also to dangerous software. According to Kaspersky, in 2023, 1 in 5 APKs downloaded from third-party sites contained malicious code.

  • 🛡️ Check the source: download APK Only from official developer sites or verified repositories (APKMirror, APKPure) Avoid torrent trackers and file sharing sites.
  • 🛡️ Use antivirus: Before installing, check the file via VirusTotal or the built-in Mi Security scanner.
  • 🛡️ See permissions: if the flashlight application requests access to SMS or geolocation is suspicious. Check the permissions in Settings» → «Annexes» → «Permits».
  • 🛡️ Update the firmware: in new versions MIUI HyperOS has improved protection against exploits. Check the updates in Settings regularly» → «The phone» → «Updating the system».

If, after installing the APK, the device begins to brake, overheat or show unusual advertising, immediately:

  1. Remove the suspicious app.
  2. Run a virus check (Mi Security or Malwarebytes).
  3. Reset to factory settings ("Settings" → "About Phone" → "Resettings") if the problem persists.

💡

Before installing an APK, back up your data via Settings → Additional → Backup and Reset. This will help you quickly restore your system in the event of a crash.

Frequent Questions About “Unknown Sources” on Xiaomi

Can I turn on Unknown Sources for all applications at once?
No, Xiaomi has a permission for each application (browser or file manager) for security: if malware penetrates one source, others will remain protected.
Why did the “Unknown Sources” option drop after the MIUI update?
This is standard system behavior. After major updates (like MIUI 13 to MIUI 14), some permissions are reset. You have to turn them on again. The same happens after you reset.
Can I install APK without turning on Unknown Sources?
Yes, there are two workarounds: Use ADB (Android Debug Bridge) and connect your phone to your PC and execute the command: adb install path to file.apk Install APK via Google Play App Signer (requires root rights), but these methods are only suitable for advanced users.
Does Xiaomi block APK installation on children’s accounts?
If the device has a child profile set up or parental controls enabled, the Unknown Sources option will not be available. To activate it, you need to: Delete the child account in Settings» → «Accounts» → «Family. or temporarily disable parental control (required) PIN-administrator).
How do I know which application is asking for permission to install an APK?
If you downloaded an APK but don't remember which app you used, check: Open Settings → Apps → Application Management. Sort the list by installation date — the last updated app, most likely the one you downloaded from APK.

💡

Enabling Unknown Sources does not cancel the Mi Security antivirus. It will still scan the APKs installed for threats, but the final decision on installation is yours.

Conclusion: When to take risks and when to refrain

The inclusion of Unknown Sources on Xiaomi is not a security verdict, but a tool for power users.

  • ✅ Test beta versions of apps (such as WhatsApp Beta or Google Maps Preview).
  • ✅ Install specialized software (e.g., Termux for developers or FPV-drone-app).
  • ✅ Use alternative stores (Aurora Store, F-Droid).

There are some situations where it is better to give up this option:

  • ❌ Install pirated versions of paid applications (virus and account lock risk).
  • ❌ APK from unknown forums or Telegram channels (high chance of catching Trojan or Spyware).
  • ❌ Apps to hack games or social networks (99% of these files contain malicious code).

If you are not sure about APK security, but you need to install it, use a sandbox (like the Shelter or Island app) that creates an isolated environment where you can safely test suspicious programs without risking the main system.

⚠️ Note: On HyperOS devices (e.g. Xiaomi 14 or X-ray) POCO X6 Pro) when installed APK from unknown sources may require additional confirmation through SMS It's a new security measure, introduced in 2026.