How to get root rights on Xiaomi Redmi: from unlock to Magisk

Getting root rights on Xiaomi Redmi smartphones opens up access to hidden Android features, but requires care: one wrong step can turn the device into a “brick.” In 2026, the process is complicated due to the tightening of Xiaomi’s policy, now unlocking the bootloader takes up to 720 waiting hours, and some models (for example, Redmi Note 12 Pro+) require additional manipulation with EDL- Mode. This article covers all the stages: from preparation to installation of Magisk, taking into account the latest changes to HyperOS.

It’s important to understand that root rights void warranties, block banking apps (due to SafetyNet), and increase the risk of malware infection. We’ll look at not only the standard fastboot route, but also alternatives for devices with a locked bootloader, such as exploit methods for older models (Redmi 4X, Redmi Note 5). If your goal is simply to remove embedded apps or change fonts, consider less risky ways like ADB.

1.Preparation: What to do before unlocking

Before you start unlocking, check out three critical points:

• 📱 Device model: The methods for Redmi 9A and Redmi K60 Ultra are radically different. Learn the exact modification in Settings → About Phone → Model.
• 🔒 bootloader status: run the command fastboot oem device-info – if the answer Device unlocked: false, you need to officially unlock through the Mi Unlock Tool.
• 📦 Firmware version: On HyperOS (replaced MIUI in 2026), some exploit methods don't work. Check Settings → About Phone → MIUI version.

Gather a mandatory set of tools:

A critical detail from 2026: Xiaomi has linked the bootloader unlock to a Mi Account that was registered at least 30 days ago, and if your account is newer, the process will be blocked at the verification stage.

⚠️ Warning: On Redmi Note 11 Pro+ 5G and later, unlocking via Mi Unlock Tool may require confirmation via SMS to a Chinese number, the solution is to use proxy servers or purchase an account with a Chinese number tied.

2 Unlocking the bootloader: the official method

Xiaomi’s official method includes 5 key steps:

1. Linking your device to your Mi Account: go to Settings → Xiaomi Account → Mi Cloud and enable sync. The device must be tied to your account for at least 7 days (up to 30 days for new models).
2. Enable USB debugging: activate Settings → About Phone → MIUI version (click 7 times), then in Settings → Additional → For developers, enable USB debugging and OEM unlocking.
3. PC Connection: Install Xiaomi USB Drivers and connect your phone in fastboot mode (clip Power + Volume Down).
4. Start Mi Unlock Tool: Sign in with the same account you have on your phone. If a Couldn't unlock error occurs, check the device's association and try again in 24 hours.
5. Expectation of unlocking: on new models (Redmi 12, Redmi Note 13) the timer can reach 720 hours (30 days).

Once successfully unlocked, the device will reset to factory settings, and all data will be deleted, including photos and messages.

⚠️ Warning: On HyperOS 1.0+ firmware, unlocking through the Mi Unlock Tool may end in an error 0x80004005. The solution is to roll back to the old version MIUI via fastboot, followed by an upgrade to HyperOS already with the bootloader unlocked.

3. Alternative Unlocking Methods (without waiting)

If the official method is not available (for example, due to a new account or server errors Xiaomi), consider these options:

• 🔓 EDL- Mode: Suitable for Qualcomm devices (most Redmis). Requires an authorized Xiaomi account and a EDL cable (or a board jumper). Risk: if you do wrong, hard brick.
• 🐱 Exploit Methods: Vulnerabilities in Older Versions MIUI (e.g. DirtyCOW for Redmi) 5/5ARelevant only for firmware 2018–2020 years.
• 💰 Paid services: some workshops offer unlocking for 1-3 thousand rubles. Check reviews - scammers often give unlocked devices for new ones.

For the EDL- method, you will need:

1. MiFlash program (version 2020.3.14 or later)


2. firmware for your model in.tgz format




3. Authorized file auth.ini (can be obtained on the forums for donat)




4. USB cable with EDL support (or soldering iron for closing contacts)

Step-by-step instructions for EDL:

1. Transfer the phone to EDL- Mode (close contacts TEST POINT or use the command adb reboot edl).
2. Connect the device to the PC – Qualcomm HS-USB QDLoader 9008 should appear in the Device Manager.
3. Start MiFlash, select firmware and press Refresh. The device should be defined as COM-port.
4. Press Flash and wait for completion (10-15 minutes). After the restart, the bootloader will be unlocked.

4 Custom Recovery Installation (TWRP/OrangeFox)

Once the bootloader is unlocked, custom recovery is required to continue working with Magisk. TWRP is the most popular solution, but for new models (Redmi Note 12, Redmi K60) OrangeFox is recommended due to better HyperOS support.

Instructions for TWRP:

1. Download the recovery image for your model from twrp.me (e.g. twrp-3.7.0_9-0-redmi_note_10_pro.img).
2. Restart your phone to fastboot and execute the command: fastboot flash recovery twrp.img fastboot reboot recovery
3. If recovery is reset to stock after the reboot, run: fastboot flash recovery twrp.img fastboot boot twrp.img and in the TWRP itself disable signature verification in Mount → Disable DM-Verity.

For OrangeFox, the process is similar, but the image is downloaded from orangefox.download, the main difference is the built-in support for Magisk and MIUI OTA.

⚠️ Warning: On Redmi K50 Gaming and similar A/B- partition devices, the recovery installation requires an additional step, which is to run both slots (recovery_a and recovery_b).

5. Install Magisk and obtain root rights

Magisk is not just a root tool, but also a cloaking system from SafetyNet, which allows you to use banking applications. The last stable version as of 2026 is Magisk 26.4.

Step-by-step process:

1. Download Magisk APK from GitHub and install it on your phone as a regular app.
2. Download the same Magisk file, but in.zip format (like Magisk-v26.4.zip) and transfer it to your device.
3. Reboot to TWRP/OrangeFox (clip Power + Volume up).
4. In recovery, select Install → Select Magisk.zip → Swipe to confirm.
5. Once installed, reboot to the system. Open the Magisk app and check SafetyNet in the Settings → MagiskHide section.

If SafetyNet fails (CTS profile mismatch error), install the modules:

• 🔄 Universal SafetyNet Fix (to bypass CTS)
• 🛡️ MagiskHide Props Config (to change the print of the device).

Modules are installed via Magisk: Modules → Install from storage.

💡

If after installing Magisk, the phone is stuck on the logo, reboot to recovery and swipe the disable_dm-verity_forceencrypt.zip file. This will disable the forced encryption that often conflicts with root.

6. Solving common errors

Even with the right instructions, there can be problems, and here are the most common solutions.

If Google Pay or Sberbank Online stopped working after receiving root, do:

1. In Magisk, enable MagiskHide and add banking apps to the hidden list.
2. Install the Universal SafetyNet Fix module.
3. Clear the data of the Google Play Services and Google Play Store apps.
4. Restart the device and check the SafetyNet status in Magisk.

💡

If no method has helped bypass SafetyNet, consider root alternatives: using Shizuku + ADB to access system features without unlocking the bootloader.

7. Root alternatives: what can be done without unlocking

If the risks of getting root discourage you, consider these methods:

• 🔧 ADB- commands: allow you to remove system applications, modify DPI screens, and customize animations without root. Example: adb shell pm uninstall --user 0 com.miui.analytics (removes MIUI Analytics).
• 📱 Shizuku: an application to run ADB- commands without a PC. Requires a one-time connection to a computer to log in.
• 🎨 Themes and modules MIUI: in Settings → Themes can be changed icons, fonts and animations without any system interference.
• 🔄 Backtrack to old firmware: Some features (e.g., ViPER4Android) run on MIUI 12 but are locked in HyperOS.

For ADB, you will need:

1. Enable USB debugging in the developer settings.
2. Connect your phone to your PC and confirm your trust in your computer.
3. Adb shell settings put global transition_animation_scale 0.5 (accelerates system animations).

Advantage of ADB: changes do not affect the system partition, so the warranty is preserved, and the risk of “bricking” is minimal.

8 Safety after obtaining root

A root-righted device becomes more vulnerable to attack.

• 🔒 Turn off root for unnecessary applications: In Magisk, limit superuser access to trusted programs only.
• 🛡️ Install MagiskHide: This hides root from most applications.
• 🔄 Update Magisk regularly: New versions close vulnerabilities and improve compatibility with HyperOS.
• 📱 Use alternative stores: F-Droid or Aurora Store instead of Google Play to install apps – they are less susceptible to malware.

Check the security of your device:

1. Run the command in Terminal Emulator: su -c "echo 'root access test'" If you see the message "root access test", the permissions work correctly.
2. Install Root Checker from Google Play for additional diagnostics.
3. Check the SafetyNet status in Magisk – if it doesn’t pass, banking applications can be blocked.

⚠️ Warning: On HyperOS devices, some Magisk modules (such as the Xposed Framework) may trigger bootloop. Check compatibility on XDA-Developers forums before installing.

FAQ: Frequent questions