Owning a modern smartphone Xiaomi with a shell MIUI HyperOS often implies a user's desire to go beyond the standard capabilities of the system, obtaining root rights (superuser rights) opens up access to hidden functions, allows you to remove system debris, change the kernel and deeply customize the interface. However, the classical method requires a computer, USB-cable and complex manipulations with ADB and Fastboot.
Fortunately, in 2026, there are proven ways to unlock and modify the system using only the resources of the mobile device itself, a process that requires increased care, because interfering with system partitions carries risks.
The main challenge is not to set the access rights, but to pre-unlock the bootloader. Without this step, any attempts to modify the /system partition will be blocked by Xiaomi’s security mechanisms. In this article, we will look at a method that minimizes dependence on external devices using cloud services and special download applications that work in conjunction with TWRP or Magisk.
It is worth noting that the term “without a PC” is conditional, since to initially link the account to the device you still need an Internet connection and, possibly, a second phone to receive the device. SMS-If the main smartphone is rebooted in recovery mode, the main one will not be involved in the chain of action, but it will make the process more mobile and accessible to a wide range of users.
Before taking action, you need to understand the responsibility. Getting root access is an irreversible action in the context of a warranty. Xiaomi service centers can refuse free repairs if they find traces of unauthorized interference with the software. In addition, some banking applications and contactless payment services can stop working without further manipulation to hide the administrator’s rights.
The first and most critical step is to save your personal data. The process of unlocking the bootloader, which is a prerequisite for obtaining root rights, initiates a complete reset of the device to factory settings. This means that all photos, contacts, correspondence and installed applications will be irrevocably deleted. Ignoring this step will lead to the loss of important information. It is recommended to use the built-in MIUI tools to create a full backup. Go to the Settings → About Phone → Reservation and Recovery. Here you can choose the types of data to save. It is important to copy the internal storage, so that the backup is successfully stored, the internal storage will be stored. ⚠️ Attention: The process of unlocking the bootloader erases all data from the internal drive. Do not proceed with the procedure if you do not have an up-to-date backup of important information on an external medium. 60-70%. Interrupting the firmware or unlock process due to a dead battery can cause the phone to turn into a brick and stop loading. Also check the stability of the Internet connection, as the device will need to communicate with Xiaomi servers to verify the account status. ☑️ Checklist Preparation Completed data backup Battery charge higher 60%Password from Mi-account Connected stable Wi-Fi Remembered passwords from important applications: 0 / 5 Another important preparatory step is to activate the developer mode. Without this, you will not be able to enable debugging over USB and access the necessary settings. Go to Settings → About phone and quickly click 7 times on the MIUI version or OS version. After the notification “You became a developer”, you can go to configure the system settings.
The official method of unlocking Bootloader from Xiaomi traditionally requires the use of the Mi Unlock Tool utility on the computer. However, there are workarounds that allow you to initiate this process or use the services of third-party services that unlock remotely through special agent applications installed directly on the smartphone. SIM-The essence of the method is that you are accessing a proven service (often a paid service) that provides a special service. APK-file or access to the web interface. After installing the application and logging into your Mi Account through its interface, the server part of the service sends a command to unlock the application. You'll just have to wait. SMS-Notification from Xiaomi of permission to unlock, which can come within 360 hours (15 days) for new accounts. For users who prefer free but more sophisticated methods, there is the possibility of using terminal emulators on Android, such as Termux, in conjunction with vulnerabilities in specific versions of Android. But this is very unstable, and it depends on the processor model (Snapdragon or MediaTek). MCT Bypass, which allows you to bypass the bootloader check directly from the phone using Preloader mode and a special adapter cable or contact closure, which is technically a method without a PC but requires physical manipulation. 📊 Yes, waited 168 hours Yes, waited 360 hours No, the phone was already unlocked Use global firmware without locks It is important to understand the difference between “unlocking the bootloader” and “getting root”. Unlocking the bootloader is permission to write to system partitions. Root is an already installed file manager of access rights. Without the first step, the second step is impossible. If you use the method of remote unlocking through the services, make sure that you trust the artist with your credentials, as to work he will need access to your account.
Installation of custom recaveri TWRP After successfully unlocking the bootloader, the standard Recovery menu becomes unavailable for modifications. In its place, you need to install custom Recovery, the most popular and functional of which is the Recovery menu. TWRP (Team Win Recovery Project, and that's where we're going to implement superuser rights. TWRP App that allows you to install recovers directly from the Android operating system. First download the official application TWRP From a trusted source (like Google Play or the official twrp.me website) and install it. When you first run it will ask permission to access root rights (which you don't have yet) and access the file system. In the main menu of the application, select the item Install TWRP (Install TWRP). In the list that opens, find the exact model of your device. This is a critical point: the recovery firmware designed for the Xiaomi Redmi Note 10 can permanently disable the Xiaomi Redmi Note 11. If your model is not listed, use the search function by codename (e.g. mojito, vayu). After selecting the model, click Download to download the image img. Xiaomi Model Codename Processor Type Status TWRP Redmi Note 10 Pro sweet / sweetin Snapdragon Stable version of Xiaomi Mi 11 venus Snapdragon Stable version of Redmi Note 9 Pro curtana / joyeuse Snapdragon Stable version of Poco X3 NFC Surya Snapdragon Stable version ⚠️ Attention: Installation of the wrong image TWRP This can cause the device to "brickle" and always check the code name of your model in the Settings section. → About the phone before downloading the file. Once the image is uploaded, the app will suggest you install it. Press Flash. It will take a few seconds. Once it's done, press the Recovery button in the app to reboot to the installed recovery menu. If the phone screen has changed to a menu with blue or orange buttons and touch-enabled support, you've done it right. Now your device is ready to modify the system.
The modern standard for obtaining root rights is the use of the Magisk manager. Unlike the old methods (SuperSU), Magisk works on the principle of Systemless, that is, it does not make changes to the system partition directly, which allows you to bypass many security checks (SafetyNet/Play Integrity. We'll need to install it. APK-Magisk file and access to the newly installed TWRP. Download the latest version of Magisk APK from the official repository on GitHub. Do not rename the file unless the instructions say otherwise, but for convenience in the file. TWRP It can be renamed into magisk.zip, although modern versions TWRP can install and APK-Copy the downloaded file into the phone's internal memory. Then reboot to Recovery mode (pressing the power and volume button, or through the app). TWRP). On the menu. TWRP Select the Install option (Installation). Find the file. magisk.apk (or.zip) in the file list and click on it. A confirmation screen will appear where you need to slide the slider to start the installation. Magisk will make the necessary changes to the boot image. Once the process is complete, press Reboot System. What to do if you do it? TWRP Can't see the Magisk file?If the file manager TWRP It doesn't display your files, it's possible that the internal memory is encrypted. TWRP Choose the Wipe → Format Data, type in "yes" and confirm. This will delete all data, but decrypt the memory, then TWRP And you can write and read files. And when you reboot, you'll see the new Magisk app in the app menu. Open it. If you have a green "Normal" sign in the center of the screen and the Magisk version is displayed correctly, congratulations, you've got root rights. To verify, you can download the Root Checker app from the Play Market, which will confirm the presence of superuser rights.
Getting root rights is only half the battle. Many applications, especially banking (Sber, Tinkoff, Alpha) and services like Google Pay or Mir Pay, will refuse to work if they detect interference. Magisk provides powerful tools to hide root rights, making your device virtually indistinguishable from stock for most applications. First of all, open the Magisk settings (cog in the upper right corner). Engisk option (formerly called MagiskHide), this feature introduces Magisk root code into the application, you need to re-enable it into the application, for example, re-enable it into the Digysk layer, and then re-enable it into the application. In the DenyList menu, find all banking apps and Google Play Services by ticking them, which will prevent Magisk from providing root access to these programs and hide the modified bootloader from them. 💡Use the Universal SafetyNet Fix module in Magisk if, after setting up Zygisk, applications still fail to pass the device integrity check. NFC-It's worth noting that anti-detection is an arms race, and app developers are constantly updating their methods of root rights search. So it’s important to keep an eye on Magisk updates and use additional modules like Shamiko (for more effective concealment) or Play Integrity Fix.Be prepared that after updating the banking app, you may need to recheck your DenyList list settings.
Despite careful preparation, the process of modifying Xiaomi can be unforeseen difficulties. Understanding the nature of these problems will help to avoid panic and quickly restore the health of the smartphone. Most often, users experience a cyclic bootloop or inability to boot after installing modules. MIUI Or Android and endlessly reboots, try recovery mode (TWRP). If you are successful, go to the Advanced section. → File Manager and delete the folder /data/adb/modules. This will disable all the Magisk modules that may have caused the conflict, and then reboot. TWRP stopped opening or the phone does not respond to buttons, you will have to use the Fastboot mode. Even without a PC, you can try to restore stock recavers if you have a second phone with support. OTG And you can use a Fastboot app like Bugjaeger to connect the problem phone to the second one. OTG-Try sending a fastboot flash recovery command recovery.img (stock-like). ⚠️ Note: If you are not sure about your actions when working with Fastboot commands, you should contact the service center. Incorrect firmware of the persist or modem partition can lead to loss of network signal or sensors inoperability. Another common problem is that Wi-Fi or Bluetooth is broken after flashing, and this often happens when you install custom firmware or recovery that is incompatible with your version of Android. For Xiaomi, this can be done via Recovery mode by selecting Connect with MIAssistant and connecting to your computer (the PC is already mandatory for using the Mi Flash Tool), or via the Wipe All Data menu if the cache is a problem. 💡The main rule of modification: always have stock firmware on hand for your model. This is the only guarantee that you can restore the phone in the event of a critical failure.
Frequently Asked Questions (FAQ)
Will Xiaomi get a guarantee after getting root rights?
Yes, formally rooting and unlocking the bootloader are grounds for denial of warranty service, but if you return the device to its original state (lock the bootloader and install the stock firmware), visually determining the presence of superuser rights in the service center will be extremely difficult, unless they conduct a deep diagnostics of the software.
Can I update the OTA system after I get root?
The standard over-the-air update (OTA) is likely to fail or break root rights, as it attempts to replace the modified boot image. To upgrade, download the full firmware package, not installing it immediately, but extracting the boot.img file, patching it through Magisk, and then stitching it through Recovery or Fastboot.
Is it safe to use banking apps with root?
With the right Magisk setup (Zygisk enabled, DenyList and concealment modules) most banking applications work correctly. However, the security of your data in this case depends only on you. Root rights theoretically give access to any data in memory, so install only proven modules and applications from reliable sources.
What to do if I forgot the password from the Mi-account after unlocking?
If you unlocked the bootloader, but did not log out of the Mi Account before reset, FRP (Factory Reset Protection) protection can work. Access can only be restored through the standard procedure for restoring an account on the mi.com site. Without access to the account, it will be impossible to unlock the device.
Do you need the Internet to work with root rights?
No, root rights themselves are autonomous. The Internet is only required to initially install Magisk, check for updates, and run modules that download data from the network. Local functions like deleting system applications or changing files work without a connection.