Getting root rights on Xiaomi smartphones is a challenge that scares newcomers, but opens up endless possibilities for power users, from removing system applications to fine-tuning performance. In 2026, the process was complicated by the tightening of MIUI security policies and the introduction of the new HyperOS firmware, but the workarounds remained. This article will not just list the steps, but explain why each step is important, how to avoid common mistakes and what to do if something goes wrong.
It's important to understand that unlocking the bootloader and installing root is an irreversible system change that takes away warranties, increases the risk of a device being hacked, and can lead to a "brick" when you make mistakes. However, for risk-averse enthusiasts, root gives you control of the hardware at the kernel level: overclocking the processor, blocking ads at the system level, backing up data applications, and even installing custom firmware like LineageOS or Pixel Experience.
Why Xiaomi is blocking root rights and how to get around it
Xiaomi is actively fighting against unauthorized access to system files, and for this reason:
- 🔒 Data security: Root access allows you to bypass protection MIUI, What makes it easier to steal personal information when you lose your device.
- 📱 Stability: Incorrect changes in system files often lead to “lagging”, overheating or complete inoperability of the smartphone.
- 🛡️ Warranty obligations: Any manipulation of the bootloader will automatically void the warranty (even if the problem is not root related).
However, the security circumvention is possible due to two key vulnerabilities in Xiaomi’s architecture:
- Unlock the bootloader through the official Mi Unlock Tool (requires Mi Account binding and waits 7-168 hours).
- Exploitation of temporary loopholes in firmware (e.g., the DirtyCOW vulnerability in older versions of MIUI, but it is closed in new builds).
Since 2023, Xiaomi has tightened the rules: now, SMS confirmation is required to unlock, and on some models (for example, Xiaomi 13 Ultra or Redmi Note 12 Pro+), the process takes up to 7 days of waiting instead of the previous 72 hours.
Preparation of the smartphone: what to do before unlocking
Before you start unlocking, follow the mandatory steps, and omitting any of them may result in data loss or inability to complete the process:
Make a backup copy of all data (photos, contacts, messages)
Charge your phone to at least 60%
Make sure that the MIUI/HyperOS version supports unlocking
Disable Find My Device and sync with Mi Cloud
Download the latest version of the Mi Unlock Tool from the official website-->
Pay special attention to backup. Even if you're confident in your actions, unlocking the bootloader resets the device to factory settings.
- 📁 Local copying on PC through MTP Xiaomi PC Suite.
- ☁️ Cloud services (Google Drive, Mi Cloud), but remember: once unlocked, access to Mi Cloud will be limited.
- 🔄 Third-party utilities like Swift Backup (require root, but you can make a copy before unlocking on another device).
⚠️ Note: If your smartphone is purchased in China (the domestic version), unlocking the bootloader may not be possible without additional manipulation. → The phone. → Version. MIUI. Chinese firmware usually has the letter C at the end (for example, the letter C, V14.0.3.0.TMBCNXM).
Also make sure that your PC has:
- 🖥️ Xiaomi drivers (download automatically when connecting your phone or manually from the official website).
- 🔌 ADB Fastboot (part of Google’s Platform Tools).
Unlocking the bootloader: step-by-step instruction 2026
This is the most critical stage. Errors here can lead to a complete loss of the device's performance ("hard brick"), so follow the instructions carefully.
Step 1: Linking your Mi Account to your device
- Go to Settings → Xiaomi Account → Mi Cloud.
- Turn on sync and make sure the device is linked to your account.
- In the Settings → About phone tap 7 times on the MIUI version to activate the Developer Mode.
- Return to Settings → More → For Developers and Enable: Debugging over USB OEM Unlock (may be absent on some models)
Step 2: Request Unlocking via Mi Unlock Tool
- Download the latest version of the Mi Unlock Tool from the official website.
- Launch the utility on behalf of the administrator.
- Sign in with the same Mi Account as you do on your phone.
- Connect your phone in Fastboot mode (turn off the device, then press Volume Down + Power).
- In the utility, press Unlock and confirm the action.
Step 2 Patching boot.img via Magisk
- Copy boot.img from firmware to your phone.
- Install Magisk APK and open it.
- Click Install → Select and Patch a File and select boot.img.
- After patching the file magisk_patched.img It will appear in the Download folder.
Step 3: Firmware patch boot via fastboot
- Connect your phone in Fastboot mode.
- Move it. magisk_patched.img to the Platform Tools folder.
- Command: Fastboot Flash boot magisk_patched.img
- Reboot the device: fastboot reboot
If Magisk does not appear in the list of applications after the reboot, install Magisk APK manually. To check root access, use the command in the terminal:
suIf you have a request for rights, everything went well!
💡
If after installing Magisk, banking applications (Sberbank, Tinkoff) stopped working, turn on the Magisk option in the Magisk settings and add the applications to the hide list.
Common Mistakes and How to Fix Them
Even with the correct following of the instructions, problems can arise, and here are the most common ways to solve them:
| Mistake. | Reason. | Decision |
|---|---|---|
| Couldn't unlock the Mi Unlock Tool | Waiting time is not completed or the account is not tied | Wait for the specified time, check the binding account in Mi Cloud |
| The phone is stuck on the MI logo | Improperly stitched boot.img module conflict | Sweep the original boot.img through fastboot flash boot.img |
| SafetyNet failed in Magisk | Changes to system files detected | Enable MagiskHide and Enforce DenyList, upgrade certificates |
| No network after unlocking | IMEI reset or damage to the modem part | Restore your IMEI via QCN or reflash modem.img |
Error: This device is locked after restart
If the phone is locked again after all the manipulations, then boot.img's firmware has failed.
- 🔹 Correctness of the chosen boot.img (Must be consistent with the current version MIUI/HyperOS).
- 🔹 File integrity (download the firmware if the file is corrupted).
- 🔹 Magisk Version (HyperOS requires version 26.4)+).
Error: Banking applications are not working
Since 2023, banks have tightened root screening.
- 🏦 Use Magisk with Universal SafetyNet Fix.
- 🔄 Rename Magisk via Configure DenyList → Rename Magisk.
- 📱 Install alternative clients (e.g. Sberbank Online via Island or Shelter).
What to do if your phone turns into a brick?
Alternative ways to get root without unlocking the bootloader
If unlocking the bootloader seems too risky, there are workarounds, but they don’t work on all MIUI/HyperOS models and versions:
1. Exploitation of vulnerabilities in the kernel (only for old devices)
- 🐞 DirtyCOW (CVE-2016-5195) — worked MIUI 8–10, now closed.
- 🔓 CVE-2019-2215 — Vulnerability in Binder, fixed in 2020 year.
- 📱 MTK-su – for devices running MediaTek processors (e.g., Redmi) 9A), But it requires manual patching.
2. Temporary root via ADB (without unlocking)
On some firmware, you can get a temporary root through adb:
adb shell
su -c "your_command_here"But this method only works until the first reboot and does not give full access to the system.
3.Using Custom Recovery (TWRP)
If the bootloader is unlocked, but Magisk is not suitable, you can flash TWRP:
- Download TWRP for your model from the official website.
- Quickboot: fastboot flash recovery twrp.img
- Boot to TWRP (Loudness Up + Power) and install Magisk.zip.
⚠️ Attention: HyperOS (new firmware Xiaomi 2026) TWRP It may not work because of a modified recovery partition. Check compatibility on forums before you run the firmware. XDA Developers or 4PDA.
What to do after getting root: helpful tweaks and warnings
Now that you have root, you can optimize your smartphone for your needs, but remember, not all changes are safe.
Useful modules for Magisk
Dangerous actions that can kill your phone
- ⚠️ Removing system applications without backup (may result in bootloop).
- ⚠️ Modifying files in /system or /vendor without knowing the consequences.
- ⚠️ Firmware of incompatible cores or modems (risk of network loss).
- ⚠️ Use of utilities for overclocking the processor without cooling (overheating and trottling).
How to get it back (root rollback)
If you need to return your phone to stock (for example, for sale or warranty repairs):
- Uninstall the Magisk menu (Uninstall → Complete Uninstall).
- Sweep the original boot.img through fastboot.
- Perform reset via Settings → Reset → Delete all data.
- To remove traces completely, use the Mi Flash Tool with the clean all option.
💡
Even after root rollbacks, some banking apps can “remember” the modifications, in which case only a complete flashing through EDL (requires an authorized Xiaomi account) will help.