Root on Xiaomi: from unlocking the bootloader to Magisk in 2026

Getting root rights on Xiaomi smartphones opens up access to hidden Android features, but requires care: one wrong step can turn the device into a “brick.” In 2026, the process changed – the manufacturer tightened protection, and old methods (for example, through Mi Unlock without waiting) ceased to work. This article will help to understand the current ways to unlock the bootloader, install a custom TWRP recap and obtain super-user rights through Magisk, taking into account the features of new models (Redmi Note 13 Pro+, POCO F6, Xiaomi 14 Ultra).

Important: the procedure is different for devices on MIUI Global, MIUI China and HyperOS (new firmware from Xiaomi).We will look at all three cases, and explain why on some models from 2023 to 2026 unlocking a bootloader now requires linking a Mi Account to a device at the first setup stage - and how to get around it. If you're a beginner, start by reading the section on risks: loss of warranty, problems with banking applications and possible "brick" - these are not empty words.

What is rooting on Xiaomi and why is it necessary?

Root rights on Xiaomi allow:

• 🔧 Remove embedded applications (com.miui.analytics, com.xiaomi.midrop and other junk services).
• ⚡ Increase performance through nuclear tweaks (e.g. changing the schedutil scheduler to performance).
• 📱 Install custom firmware (LineageOS, Pixel Experience) or modified versions MIUI publicity.
• 🔋 Optimize battery consumption by disabling background processes via Greenify or BBS.
• 🎮 Use console emulators (Dolphin, PPSSPP) fully compatible.

However, there is a downside: many banking applications (Sberbank, Tinkoff) and services (Google Pay, Netflix) stop working due to the SafetyNet trigger. The solution is to mask root through MagiskHide or modules like Universal SafetyNet Fix, but this requires additional actions. Also note that after unlocking the bootloader, the smartphone automatically resets to the factory settings - make a backup of the data in advance.

Preparing for Unlocking: What to Do Before Starting

Before you start unlocking the bootloader, follow the mandatory steps:

Create a backup copy of data (photos, contacts, SMS)

Charge your smartphone to at least 60%

Make sure the device is running the latest version of MIUI/HyperOS

Unplug your Google account (if you use Factory Reset Protection)

Download Mi Unlock Tool (Last Release, 26)-->

Beginning in 2023, Xiaomi has required that the device be linked to the Mi Account at the first setup stage (i.e. immediately after purchase). If you drop the phone or buy it untethered, unlocking the bootloader will become impossible.

1. Reflash the device through Fastboot to the official firmware.
2. When you first download, connect to Wi-Fi and log in to Mi Account.
3. Wait for the synchronization (it can take up to 10 minutes).

Also check if your model is officially supported. For example, for the POCO F5 and Redmi Note 12 Pro+ unlock is available, and for some regional versions (for example, Xiaomi 13T for Europe) you may need to bypass through EDL (Emergency Mode).

Unlocking the bootloader on Xiaomi in 2026

The unlocking process has changed: instead of waiting 72 hours, it takes 168 hours (7 days) to link an account to a device.

1. Activate Developer Mode: Go to Settings → About Phone → MIUI Version and tap 7 times on the build number. Go back to Settings → Additional → For Developers and turn on OEM Unlock and USB Debugging.
2. Link the device to your Mi Account: in the same developer menu, select Mi Unlock Status → Add account and device. Wait 168 hours (check status daily - sometimes the meter is reset!).
3. Install Mi Unlock Tool: Download the latest version from the official website (do not use third-party sources!).
4. Connect your phone in Fastboot mode: Turn off the device, then press Volume Down + Power until a bunny with the word Fastboot appears. Connect to a PC.
5. Start unlocking: In the Mi Unlock Tool, log into your Mi Account, wait for the device to be checked, and press Unlock. The process will take 5-10 minutes.

If the phone doesn't turn on after unlocking or if it's stuck on the MI logo, don't panic, that's okay.

fastboot erase userdata


fastboot reboot

1. Change the USB cable (use the original one from Xiaomi).

2. disable the antivirus on the PC.

3. Run the utility in compatibility mode with Windows 8.

4. Repeat account binding by pre-deleting the device from the list in i.mi.com.-->

Install TWRP and get root through Magisk

Once you unlock the bootloader, you can start installing the custom TWRP recavator and obtaining root rights. Importantly, for each Xiaomi model, there is a different version of TWRP! Universal builds do not work.

• 🔗 Official website TWRP (popular).
• 🔗 XDA Developers (for new devices, for example, Xiaomi 14).
• 🔗 Developer Telegram channels (e.g, @twrp_xiaomi).

Installation instructions:

1. Download TWRP.img for your model and rename it recovery.img.
2. Place the file in a folder with fastboot (usually C:\platform-tools).
3. Connect your phone in Fastboot mode and execute the command: fastboot flash recovery.img
4. Immediately afterward, reboot to TWRP (not in the system!): fastboot boot recovery.img
5. In TWRP, swipe to allow modifications (if you request a password, enter a pattern lock or PIN from the lock screen).

Now install Magisk to get root:

1. Download the latest version of Magisk (e.g. Magisk-v26.4.zip) from GitHub.
2. Transfer the file to your phone (you can use ADB Sideload to TWRP).
3. In TWRP, select Install → specify the path to Magisk.zip → swipe for confirmation.
4. Once installed, reboot to the system. The Magisk app will appear on the menu.

💡

Never install Magisk via fastboot or as an APK without TWRP, which will result in a looped bootloop.

Problem Solving: bootloop, SafetyNet, banking applications

After rooting, you may have problems. Here's how to fix them:

To mask root from banking applications:

1. Open Magisk → Settings → turn on MagiskHide.
2. Add apps (e.g. Sberbank, Google Pay) to the MagiskHide list.
3. Install Universal SafetyNet Fix via Magisk → Modules.
4. Restart your device and check the SafetyNet status in the YASNAC app.

💡

If MagiskHide doesn’t work on newer versions of Android (13+), try the alternative, Shamiko (a module for Magisk).

Alternative methods: root without unlocking the bootloader

Some Xiaomi models (e.g. Redmi 9A, POCO M3) can get a temporary root without unlocking the bootloader through vulnerabilities in the kernel.

• ⚠️ It only works on older versions of Android (up to 11).
• ⚠️ Gives temporary root (disappears after rebooting).
• ⚠️ It can lead to data loss.

Instructions for experienced users:

1. Download DirtyCow Exploit or CVE-2021-0316 (search on XDA).
2. Connect your phone to a PC with USB debugging enabled.
3. Launch the exploit using ADB: adb push exploit /data/local/tmp/ adb shell chmod 777 /data/local/tmp/exploit /data/local/tmp/exploit
4. Once root is obtained, install Magisk in the system: su mount -o rw, remount /system cp /sdcard/Magisk-v26.4.zip /system/reboot

⚠️ Note: Using exploits may result in data loss or device lock via Google Play Protect.This method is not recommended for the main phone.

How to get everything back: root removal and bootloader lock

If you need to return the phone to its original state (for example, for sale or warranty repair), follow the following steps:

1. Remove Magisk: In the Magisk app, select Delete → Complete Delete. Reboot the device.
2. Recreational Recavator: Fastboot Flash Recovery stock_recovery.img
3. Return stock firmware: download the official firmware for your model from the Xiaomi Firmware Updater website and run through Fastboot: fastboot flash boot.img fastboot flash system.img fastboot flash vendor.img fastboot erase userdata fastboot reboot
4. Block the bootloader: use the command: fastboot oem lock ⚠️ Attention: Locking the bootloader erases all data and can lead to a blink if the firmware is damaged.Make sure the phone has official firmware without modifications!

Once the bootloader is locked, the device will return to factory status, but note that some models (Xiaomi 12T, Redmi Note 11 Pro+) may store an unlock tag in anti-rollback partitions, which means that even after locking the service center will be able to determine that the bootloader has been unlocked, in which case the warranty is canceled.

FAQ: Answers to Frequent Questions