Root on Xiaomi Redmi Note 9 Pro: the complete guide from unlock to Magisk

Why rooting on Redmi Note 9 Pro is not only an opportunity, but also a risk

Getting root rights to the Xiaomi Redmi Note 9 Pro opens up access to hidden Android features, from removing system applications to fine-tuning performance. But those features come at a cost β€” the warranty is canceled, and a bug at any stage can turn a smartphone into a brick. In 2026, the process became more complicated: Xiaomi tightened its policy of unlocking the bootloader, and new versions of MIUI block vulnerabilities that previously allowed to bypass official restrictions.

This instruction is valid for all Redmi Note 9 Pro versions (codenamed joyeuse), including global and Chinese versions (MIUI We will examine two proven methods: through official bootloader unlocking. + Magisk (the safest) and an alternative way to exploit temporary vulnerabilities (for power users). ADB, Fastboot or custom firmware, it is better to stop at the first option.

Preparation: What to do before unlocking

Before you start unlocking, make sure your Redmi Note 9 Pro meets the key requirements:

  • πŸ“± Version. MIUI: The firmware should not be lower MIUI 12.5 (for stable operation of Magisk 26)+). Check in Settings β†’ The phone.
  • πŸ”‹ Battery charge: at least 70%. Unlocking can take up to 30 minutes, and a sudden shutdown will interrupt it.
  • πŸ’» Computer: You will need a Windows PC 10/11 Linux (macOS is not recommended due to problems with Fastboot drivers).
  • πŸ”Œ Cable: Xiaomi's original USB-Type-C. Cheap cables can cause data transmission errors.

Also make sure to back up all the data. Unlocking the bootloader will reset the phone to factory settings, and installing TWRP or Magisk can cause file loss. Use Mi Cloud or third-party tools like Swift Backup (requires root, but you can make a copy in advance on another device).

⚠️ Note: If your Redmi Note 9 Pro is purchased on credit or tied to a carrier (such as MegaFon or Beeline), unlocking the bootloader can activate protection. FRP. In this case, you will need to enter Google account data after resetting.

πŸ“Š What is your experience with custom firmware?
No, for the first time.
I installed TWRP, but no root.
Used Magisk on other devices
I'm developing custom firmware.

Official Unlocking of the Booter: Step-by-step

Xiaomi allows you to unlock the bootloader through the Mi Unlock Tool, but the process has become more complicated than in 2020-2022.Now you need to link your Mi Account to the device and wait 72-168 hours (3-7 days) before unlocking.

  1. Link your Mi Account: Go to Settings β†’ Xiaomi account, log in and activate Device Search. Without that, the Mi Unlock Tool won’t see the phone.
  2. Activate Developer Mode: Go to Settings β†’ About Phone and 7 times click on MIUI Version. Then go back to Settings β†’ Additional β†’ For Developers and turn on USB Debugging and OEM Unlock.
  3. Connect your phone to your PC: Install Xiaomi USB Drivers (download from the official website) and check the connection with the command: adb devices If the device is displayed, put it in Fastboot mode: adb reboot bootloader
  4. Run Mi Unlock Tool: Download the latest version of the utility (for example, miflash_unlock-6.5.224.24.zip) and log in to the same Mi Account as the phone. Connect Redmi Note 9 Pro in Fastboot mode and press Unlock.

Once you send a request to Xiaomi servers, the countdown will begin. In 2026, the average wait time is 5 days, but for new accounts it can take up to a week. You can check the unlock status in the Mi Unlock Tool, if the Unlock Now button appears instead of the timer, the process is completed.

Linked to the Mi Account to the device|Debugging is on. USB and unlock OEM|Installed drivers Xiaomi on PC|The phone is determined in Fastboot mode (fastboot devices command)|Data backup created-->

Install TWRP and Magisk: Getting root rights

Once the bootloader is unlocked, you can start installing custom TWRP and Magisk recavators to get root. For Redmi Note 9 Pro (joyeuse), use only official TWRP builds from twrp.me. Unofficial versions may contain malicious code.

Instructions:

  1. Download the files: πŸ“ TWRP for joyeuse (e.g, twrp-3.7.0_9-0-joyeuse.img). πŸ“ Magisk (last version) Magisk-v26.4.zip). πŸ“ Disable Force Encryption (optional if you don't want encryption) /data).

Please TWRP.

Transfer your phone to Fastboot and execute the command:

fastboot flash recovery twrp-3.7.0_9-0-joyeuse.img

Then immediately reboot to the Recovery:

fastboot reboot recovery

Install Magisk.

In TWRP, press Install, select Magisk-v26.4.zip, and swipe for confirmation. Once installed, reboot to the system.

If the phone is stuck on the Redmi logo after the reboot, the forced encryption patch has failed.

  1. Download again to TWRP (clip Power + Volume up).
  2. Install the zip file Disable_Dm-Verity_ForceEncrypt.zip.
  3. Run Format Data (not to be confused with Wipe!) and reboot.

⚠️ Attention: If you are using MIUI China, after installing Magisk, Google services may stop working (GMS). In this case, you will need to run GApps through TWRP.

What if TWRP asks for a password when downloading?
If you have previously encrypted the storage in MIUI, TWRP It's standard behavior. Type in. PIN-If the password doesn't fit, you'll have to reset completely through Format Data (all data will be deleted!).

Alternative method: root without unlocking the bootloader (2026)

For those who don’t want to wait 7 days or risk a warranty, there is a workaround through vulnerabilities in the security system. MIUI. This method doesn't work on all versions and may be closed in future updates. MIUI 14.0.4 (Android 12).

The essence of the method is to use DirtyCOW-exploit to temporarily obtain root and then install Magisk without unlocking the bootloader.

  1. Download the utilities: πŸ“± MT Manager (from Uptodown). πŸ“± Termux with Proot-Distro Package. πŸ“± Magisk Delta (modified version to bypass checks).

Activate the exploit.

In Termux, execute the commands:

pkg install wget


wget https://raw.githubusercontent.com/.../exploit.sh




chmod +x exploit.sh




./exploit.sh

If the exploit works, you will get a temporary root for 5-10 minutes.

Install Magisk.

Open MT Manager, find boot.img file in /dev/block/bootdevice/by-name/boot and patch it through Magisk. Then swipe the patch boot.img back.

This method is unstable: once the root is restarted, some system applications (such as Mi Pay) will stop working, and Xiaomi can block an account for exploits.

πŸ’‘

If after installing Magisk, banking applications (Sberbank, Tinkoff) stopped working, install the MagiskHide Props Config module and activate root hiding for these applications.

Problems After Getting Root and How to Solve Them

Even if you did everything right, you might have problems after rooting on the Redmi Note 9 Pro, and we've collected some of the most common ways to address them:

Problem.Reason.Decision
The phone is not loaded (bootloop)Incompatible version of Magisk or TWRPSweep the original boot.img through Fastboot:
No network (IMEI goes missing)The modem partition is damaged when firmwareRestore modem via Mi Flash Tool (download from xiaomiflashtool.com)
Google Pay and banking apps are not workingRoot detected (SafetyNet does not pass)Install Universal SafetyNet Fix in Magisk
Fast battery dischargeMagisk background processes or modulesTurn off auto-update modules in Magisk settings

If the gestures or sensor stopped working after installing Magisk, the problem is most likely in the incorrect patch boot.img.

  1. Download the original firmware for your model with Xiaomi Firmware Updater.
  2. Remove boot.img from the archive and patch it again through Magisk.
  3. Sweep the patch boot.img through Fastboot:
fastboot flash boot magisk_patched.img

How to get it back: root removal and bootloader lock

If you need to return your phone to its original state (for example, for warranty repairs), follow this instruction:

  1. Delete Magisk: Open the Magisk app, go to Settings β†’ Delete and click Full Delete. Phone will reboot.
  2. Download the stock firmware for your model and execute: fastboot flash boot.img fastboot flash recovery.img
  3. Block the bootloader: In Fastboot mode, execute: fastboot oem lock ⚠️ Warning: This command will reset all data and return the phone to factory settings!

The only more or less working way without a PC is to use Termux+ exploits (described in the section on the alternative method), but this requires technical knowledge.

Will it work? OTA-Update after rooting?
No, the standard air updates will stop being installed. If you try to upgrade, the phone will either give you an error or it will freeze on the logo. To update MIUI from root: Download the full service pack (.zip) from xiaomifirmwareupdater.com. Run it through TWRP (select Install β†’ Update.zip). After the update, re-sweep Magisk (root flies when boot.img is updated).
How do I check if I have received root?
There are several ways: Install the Root Checker app from Google Play. Open Termux and type in the su command. If a superuser rights request appears, root works. Try uninstalling the system app (like Mi Browser) via Titanium Backup. If none of the methods worked, then root is either not installed or inactive (like because of MagiskHide).
Can I get root on Redmi Note 9 Pro with a locked bootloader?
Yes, but only through temporary exploits (as described in the alternative method).However: This does not work on all versions of MIUI (since MIUI 14 many vulnerabilities are closed). Root will be incomplete: some system partitions will remain protected. There is a high risk of soft-brick (the phone will boot but with errors). If you need a full root, unlocking the bootloader remains the only reliable way.
How to update Magisk after getting root?
Update Magisk directly from the app: Open Magisk and go to the Settings tab. Click Update and select Direct Update (if available) or Install in an Inactive Slot (for devices with a Settings tab). A/B-After downloading the file, click Set and restart the phone. ⚠️ Important: If the phone doesn’t boot after the upgrade, manually swipe the old version of Magisk through the phone. TWRP.