Why you need root rights to Xiaomi and what they give
Getting root rights on Xiaomi smartphones opens up access to hidden system capabilities that the manufacturer limits by default, which allows you to remove embedded applications (bloatware), change system files, install custom firmware and even overclock the processor. However, the process of obtaining root rights without a computer has its nuances β especially on modern models with a locked bootloader.
In this article, we will discuss 5 current ways to get root on Xiaomi, Redmi or POCO without using a PC, including bypassing the restrictions of MIUI, unlocking the bootloader through official and informal methods, and installing Magisk via TWRP. It is important to understand that the procedure involves risks - from loss of warranty to "brick" device, so each step requires care.
Before you start, check:
- π± Model of your device (settings β About phone β Model) Not all methods run on the newer Snapdragon 8 Gen 2/3 or Dimensity 9000+ chips.
- π bootloader status: If it is locked, most ways without a PC won't work.
- π¦ Version MIUI: global-firm (MIUI Global unlocking is more difficult than in Chinese (MIUI China).
1. Device Preparation: What to Do Before Getting Root
Before you start unlocking, you need to follow a few critical steps, neglecting them can lead to data loss or inability to restore the health of the smartphone.
First, back up all important data. Root rights erase encryption, and some methods require factory resets. Use Settings β Additional β Backup and Reset or third-party applications like Swift Backup (if you already have a root).
Second, check the battery status. The process can take anywhere from 30 minutes to several hours β if the phone runs out at the critical moment, it can cause permanent damage to the /system partition. Charge the device to at least 70%.
The third step is to disable MIUI protection:
- π Turn off Device Protection in Settings β Passwords and Security.
- π΅ Delete all Mi Accounts (if you plan to sell the phone later).
- π Enable Developer Mode: Go to Settings β About Phone and 7 times click on MIUI Version.
β οΈ Warning: On HyperOS devices (new 2026 models), disabling Mi Account may block access to certain features. If the phone is tied to an account, unlocking the bootloader through it is mandatory.
Method 2: Unlock the bootloader via Mi Unlock (official method)
The most legal, but also the longest, way is to use the official Mi Unlock Tool, which, although it usually requires a PC, there is a workaround through the web version for some regions.
Instructions:
- Go to en.miui.com/unlock from your smartphone.
- Sign in with the same Mi Account as you do on your phone.
- Follow the device binding instructions. You will need to enter the SMS- code.
- After the binding, wait for the confirmation SMS (can take up to 72 hours).
- In Settings β Additional β For developers, the option Unlock OEM will appear β turn it on.
Limitations of the method:
- β³ Works only for devices released before 2022 (newer models require PCs).
- π Not available in some regions (e.g., in Russia, VPN may be required).
- π Once unlocked, the phone will automatically reset (factory reset).
| Xiaomi model | Support for web unlocking | Waiting time |
|---|---|---|
| Redmi Note 10/11 | Yes. | 24-72 hours |
| POCO X3/X4 | Yeah (with VPN) | 48 hours. |
| Xiaomi 12/13 | No. | β |
| Redmi 9A/9C | Yes. | 12-24 hours |
β οΈ Warning: If you see an error "This device is locked" after waiting, your model does not support web unlocking. Try alternative methods in the following sections.
π‘
If the web version doesn't work, try using a PC emulator on your phone (like Termux with proot-distro) to run the Mi Unlock Tool over Linux.
3 Method 2: Install Magisk via APK patch (without TWRP)
If the bootloader is already unlocked, you can get root without a PC using the boot image patch through the Magisk app, a method that works on most Xiaomi devices with MIUI 12-14 and HyperOS.
Step-by-step:
- Download the latest version of Magisk APK from GitHub.
- Install APK on your phone (allow installation from unknown sources in your security settings).
- Download the original boot.img for your firmware: For global firmware: Xiaomi Firmware Updater. For Chinese: XiaomiROM.
Magisk
Install β Select and Patch a File
boot.img
magisk_patched.img
Fastboot
Power + Volβ
fastboot flash boot magisk_patched.img
fastboot rebootChallenges and solutions:
- π« If you've had your phone hang on your logo after you restart, then boot.img doesn't fit your firmware. Download another.
- π If Magisk doesn't define root, try reinstalling APK over the existing version.
- π± HyperOS may require a patch init_boot.img instead of boot.img.
βοΈ Preparation for patching boot.img
Method 3: Using applications to unlock (KingRoot, iRoot, etc.)
For older Xiaomi models (until 2019), there are single-tape apps like KingRoot or iRoot that promise to root without a computer, but this method has critical drawbacks:
First, these apps often install malware or display ads. Second, they don't update to newer versions of Android and MIUI, so the chance of success on modern devices tends to zero. Third, even if root succeeds, it will be unstable, many system functions will stop working.
If you still want to try it,
- π² Download KingRoot APK from the official website (not from third-party sources!).
- π Enable Installation from Unknown Sources in Security Settings.
- π― Launch the app and press Try to Root. It takes 5-10 minutes.
- π After the reboot, check root through Root Checker.
β οΈ Warning: On devices with MIUI 13+ or HyperOS KingRoot, it is guaranteed not to work, and it can block the bootloader if it has been unblocked informally.
What to do if KingRoot is stuck on "Rooting..."
5. Method 4: Install TWRP via Termux (advanced method)
For users ready for experimentation, there is a way to install custom recovery (TWRP) directly from their phone via Termux, allowing them to flash ZIP- files with Magisk or custom firmware without a PC.
Requirements:
- π± Unlocked bootloader (see Method 1).
- π§ Installed Termux with fastboot and adb packages.
- π Downloaded image TWRP for your model (e.g., from twrp.me).
Instructions:
- Install Termux from F-Droid (the version from Google Play is not suitable).
- Update packages and install the necessary tools: pkg update & & pkg upgrade pkg install wget proot-distro proot-distro install ubuntu proot-distro login ubuntu apt install adb fastboot
- Download TWRP to Termux: wget https://eu.dl.twrp.me/{device code}/twrp.img (replace {device code} with your model code, for example, vili for Xiaomi Mi 11).
- Reboot to fastboot and stream TWRP: fastboot flash recovery twrp.img fastboot reboot recovery
- In TWRP, run Magisk.zip through Install.
Warnings:
- π§ This method requires knowledge of Linux commands. A mistake in the command can lead to a blink.
- π± On some models (Xiaomi 13 Ultra, POCO F5 Pro) TWRP may not work due to anti-rollback.
- π After installation TWRP Don't update through OTA - that'll lead to a loss of root.
π‘
Installing TWRP via Termux is the only way to flash custom recovery without a PC, but it requires an unlocked bootloader and technical skills.
Method 5: Exploits for New Models (2023β2026)
For devices running HyperOS or MIUI 14 with a locked bootloader, there are exploits that exploit vulnerabilities in the system, such as DirtyPipe or CVE-2023-21085, which allow you to get a temporary root without unlocking.
The most famous tool is Shizuku + LSposed, but it doesn't work on all models. The alternative is the PixelFlasher (requires ADB, but it can be run via Termux).
The example from Shizuku:
- π± Install Shizuku from the official website.
- π Connect to ADB via Termux: adb pair {ip address}:{port} (IP and the port can be found in Shizuku settings).
- π― Run LSposed and activate modules to get root.
Limitations:
- β³ Root is temporary β disappears after the reboot.
- π‘οΈ Does not work on firmware with patched vulnerabilities (e.g. HyperOS 1.0.5+).
- π§ Requires manual tuning ADB.
7 Risks and how to minimize them
Getting root rights always comes with risks, but they can be reduced by following proven instructions.
| Risk | Effects of consequences | How to avoid |
|---|---|---|
| Brick of the device | Phone's off. | Use only verified boot.img and TWRP |
| Loss of guarantee | Xiaomi will refuse to repair | Return the stock firmware before contacting the service |
| Security vulnerabilities | Viruses gain access to the system | Install Magisk with official GitHub |
| Functions inoperative | Banking applications are not working, NFC | Use MagiskHide or SafetyNet Fix |
To return the guarantee:
- Back up the data.
- Download stock firmware for your model with Xiaomi Firmware Updater.
- Fastboot: fastboot flash boot.img fastboot flash system.img fastboot flash vendor vendor.img fastboot erase userdata fastboot reboot
- In Settings β About Phone, check the bootloader status (Lock State: Locked).
β οΈ Warning: On newer models (Xiaomi 14, Redmi Note 13 Pro+), it is impossible to return bootloader status to Locked without a PC, in which case the warranty is lost forever.