Root on Xiaomi Redmi 9C: the complete guide from unlock to Magisk

Getting root rights to Xiaomi Redmi 9C (angelica model) opens up access to hidden Android features, but requires care. This smartphone based on the MediaTek Helio G35 processor has its own peculiarities: the official firmware blocks many system changes, and improper actions can lead to the loss of IMEI or “brick” of the device. Unlike the models on Snapdragon, it does not work standard fastboot oem unlock – you need workarounds.

Many users want a superuser to remove embedded applications (bloatver), overclock the processor or install custom firmware. However, the Redmi 9C with MIUI 12/13 has enhanced protection: even after unlocking the bootloader, the system can automatically roll back changes. In this article, current methods for 2026, tested on the latest versions of the software.

Before you start, consider that Xiaomi warranty is cancelled after unlocking the bootloader. Also, some banking applications (such as Sberbank Online or Tinkoff) may stop working due to the SafetyNet trigger. If you are prepared for risks, start preparing.

Preparation of the device: what to do before unlocking

The first step is to back up all the data. Unlocking the bootloader on the Redmi 9C results in a full reset, so save:

• 📱 Contacts (export to.vcf via Contacts) → Settings → Imports/Exports)
• 📷 Photos and videos (copy to PC or cloud)
• 🔑 Google Smart Lock passwords (they will be deleted)
• 🎮 Game savers (use Helium or root managers if you already have root)

Then check the MIUI version: go to Settings → About Phone → MIUI version. Redmi 9C is only suitable for firmware based on Android 10 or 11 (MIUI 12.0.8 and later). If you have an older version, upgrade through Settings → Software Update.

⚠️ Attention: On Android firmware 12+ (MIUI 13.0.4 and above, method c SP Flash Tool may not work due to a changed structure boot.img. In this case, you will need to roll back on Android. 11.

Make sure that the phone is debugging via USB:

1. Go to Settings → About the phone and 7 times click on the MIUI version (the notification will appear "You became a developer").
2. Back to Settings → Additionally. → For developers.
3. Activate USB Debugging and OEM Unlock (the latter may not be available on new firmware).

Unlock the bootloader: bypass the limitations of Xiaomi

Xiaomi’s Mi Unlock Tool doesn’t support Redmi 9C Because of the MediaTek processor, we're using an alternative method to SP Flash Tool and Authorization File (auth_file). Here's the step-by-step instruction:

1. Download the archive with the necessary files:

• 📥 SP Flash Tool v6.2136 (This version only works with Helio. G35)
• 📥 Auth_file for Redmi 9C (updated in May 2026)
• 📥 Stock firmware for your version MIUI

2. Unpack the archives and install drivers:

Connect your phone to your PC in Fastboot mode (clip Power + Volume down).

- Device Manager should have MediaTek Preloader, and if it's not, install drivers from the folder. MTK_Drivers.

3. Launch it. SP_Flash_Tool.exe and follow the steps:

(a) Press "Choose" in the "Scatter-loading File" field and select the file "MT6765_Android_scatter.txt" from the stock firmware.


(b) In the "Option" → "Connection" menu, select "USB".




(c) Go to the "Authentication File" tab and download the downloaded auth_file.




(d) Press “Format” → “Manual Format Flash” and type:




- Begin Address: 0x1f000000




- Format Length: 0x100000




(e) Press “Start” and connect the phone turned off to the PC (no buttons pressed!).

⚠️ Warning: If the phone doesn't turn on after formatting (black screen), don't panic - that's OK. Move on to the next step (stock firmware).

💡

If SP Flash Tool is an error "SLA Auth Fail (0xC0030004)", Try using the version of the tool. 5.2128 or substitute auth_file For a newer (see Telegram channels like this) @mtk_firmware).

Installation of custom TWRP Recovery

Once the bootloader is unlocked, you need to install TWRP, a customized Recovery that will allow you to flash Magisk to get root. Redmi 9C is suitable for a special build from the developer wrzd7 (updated in April 2026).

Download:

• 🔗 TWRP 3.7.0 for Redmi 9C (file recovery.img)
• 🔗 Disable_Dm-Verity_ForceEncrypt (to avoid hanging after the firmware)

Installation instructions:

1. Rename recovery.img to twrp.img and place it in the folder with fastboot (from Platform Tools).
2. Connect your phone in Fastboot mode and execute the command: fastboot flash recovery twrp.img fastboot boot twrp.img
3. The phone will reboot to TWRP. Don't reboot it to the system! Disable_Dm-Verity_ForceEncrypt.zip via Install TWRP.

💡

If the phone doesn't boot after installing TWRP, go back to the recavator and run the stock boot.img from the original firmware, which will temporarily restore its functionality, but you'll have to get root again.

Getting root rights through Magisk

Now that you have TWRP installed, you can flash Magisk, a root rights management tool, and download the latest version (v26.4+) from the official website:

• 🔗 Magisk v26.4 (stable)

Installation process:

1. Copy the Magisk-v26.4.zip file to your phone or flash drive.
2. Download to TWRP (Nutrition + Volume Up).
3. Click Install → select Magisk-v26.4.zip → swipe for confirmation.
4. After installation, reboot to the system.

Check for root:

1. Install Magisk Manager (download only from the official repository).
2. Open the app and check the status at the top of the screen (should read "Installed: 26.4").
3. Install Root Checker from Google Play and run the test.

⚠️ Warning: If after installing Magisk, the phone stops connecting to the mobile network, check your settings APN Or run the MagiskHide Props Config module to mask root from the operator.

Solving Typical Problems After Getting Root

Even if you successfully install root on the Redmi 9C, you may have problems, and here are some of the most common ways to fix them:

1.The phone does not pass SafetyNet

• 🔹 Install Universal SafetyNet Fix via Magisk.
• 🔹 Enable MagiskHide in Magisk Settings and add bank apps to the Hidden List.
• 🔹 Check SafetyNet status through the app YASNAC.

2.Missing mobile network or IMEI

• 🔹 Stitch the stock. modem.img and nvram.img from the original firmware through SP Flash Tool.
• 🔹 Restore. IMEI assisted MTK Engineering Mode (code #3646633## → Connectivity → CDS Information → Radio Information).

3. Fast battery discharge

• 🔹 Disable unnecessary Magisk modules in the Modules section.
• 🔹 Check the activity of processes through BetterBatteryStats (requires root).
• 🔹 Install a custom core with optimizations (e.g. HellCat Kernel for the MT6765).

Redmi 9C Castom Firmware: What You Can Install

With root rights, you can flash custom firmware to improve performance or remove the bloatwer. The following options are available for the Redmi 9C:

Before the custom software firmware:

1. Make a full backup in TWRP (Backup section).
2. Format the System and Data section in TWRP.
3. Sweep through the firmware, then GApps (if you need Google services) and Magisk.

Important: Android 12+ firmware may not support Redmi 9C due to MediaTek limitations. Check compatibility on the XDA Developers or 4PDA forums before installing.

How to get it all back: a rollback to stock firmware

If you need to return the phone to its original state (for example, for sale or warranty repair), follow the following steps:

1. Download stock firmware for your model:

• 🔗 Xiaomi's official firmware (choose the version for Angelica)

2. Run it through the SP Flash Tool:

1. Select Download Only in the SP Flash Tool.
2. Download the scatter-file from the firmware archive.
3. Check all sections (preloader is not necessary!).
4. Connect the phone turned off and wait for the end (green circle).

After the firmware:

• 🔄 The phone will automatically reset.
• 🔧 The bootloader will remain unlocked (this cannot be fixed without an authorized service center).
• 📱 To re-get root, repeat all the steps from the beginning.

⚠️ Note: If the phone does not turn on after firmware is stocked (red screen or freeze), try flashing only boot and system sections, leaving the userdata unchanged.

💡

To hide the fact of unlocking the bootloader from diagnostic tools (for example, when selling), install the LockBootloader module in Magisk. This will not physically block the bootloader, but will hide its status in the fastboot oem device-info.

FAQ: Answers to Frequent Questions