How to get root rights on Xiaomi smartphones: unlock, firmware and Magisk

Getting root rights on Xiaomi smartphones is a process that opens up access to hidden Android features, but requires caution. Unlike other brands, Xiaomi devices (including Redmi, POCO and Mi series have a secure bootloader that must be unlocked before installing custom firmware or Magisk. Without this step, any attempts to get a root will end in error or a brick".

In 2026, the procedure became more complicated: Xiaomi tightened its security policy, and now it requires the binding of the Mi Account account to the device, waiting 7-15 days (on new models), and using the official Mi Unlock Tool. In addition, after unlocking, all data is reset, and the warranty is canceled. But if you are ready for risks, this guide will help you go through all the stages without errors.

Why Xiaomi is blocking the bootloader unlock?

Xiaomi has imposed strict restrictions on unlocking the bootloader for a reason.

  • ๐Ÿ”’ Data security: Open bootloader allows attackers to access the device through vulnerabilities in custom firmware.
  • ๐Ÿ“ฑ Stability: Unofficial modifications often cause failures, overheating, or rapid battery discharge.
  • ๐Ÿ›ก๏ธ Fraud protection: Unlocked devices are easier to fake (e.g., change) IMEI serial number).
  • ๐Ÿ“‰ Reducing the burden on support: users with root rights more often turn to service centers with โ€œself-madeโ€ problems.

Starting with MIUI 12, Xiaomi also introduced the Anti-Rollback mechanism (ARB), It blocks rollbacks to older versions of firmware, which means that if you upgraded your device to a new version, MIUI, It's not going to be possible to go back without the risk of bricking. ARB=4 You cannot run the firmware version with ARB=3.

โš ๏ธ Attention: On Xiaomi models 12T, 13 Series and later unlocking bootloader can lead to locking the camera (the main module does not work) due to hardware binding to certificates MIUI. Before the procedure, check if your model supports custom firmware on forums. XDA Developers or 4PDA.

Preparation of the device: what to do before unlocking

Before you start unlocking, follow the mandatory steps:

Create a backup copy of data (photos, contacts, messages)

Link Mi Account to your device (Settings โ†’ Xiaomi Account)

Enable debugging via USB (Settings โ†’ About Phone โ†’ MIUI Version โ†’ 7 Taps โ†’ For Developers โ†’ Debugging by USB)

Turn on OEM-unlocking (Settings) โ†’ For developers โ†’ Unlocking OEM)

Charge your phone at least 60%

Download the latest Mi Unlock Tool from the official website-->

Pay special attention to the Mi Account binding. The account must have been created at least 72 hours ago, and the device is synced. POCO or Redmi with global firmware, check the account region โ€“ it must match the region of the device (for example, Russia for Redmi Note 11 Pro).+ 5G firmware EEA).

Also make sure that your PC has:

  • ๐Ÿ–ฅ๏ธ ADB Fastboot (part of Googleโ€™s Platform Tools).
  • ๐Ÿ”Œ Xiaomi Drivers (can be downloaded via Mi) PC Suite).
  • ๐Ÿ”’ Antivirus is disabled (it can block Mi Unlock Tool).

Redmi Note 10/11/12

POCO F3/F4/F5

Mi 11/12/13 Series

Another model-->

Step-by-step: unlock bootloader on Xiaomi

The unlocking process consists of three steps: getting permission from Xiaomi, waiting, and unlocking itself.

Step 1: Requesting permission to unlock

1.Put the phone into Fastboot mode: Turn off the device, then press Volume down + Food before the appearance of the Mi Bunny logo.

2. connect the smartphone to the PC through USB-cable (preferably original).

3. Launch the Mi Unlock Tool (requires login to the same Mi Account as the phone).

4. Press Unlock Now and the program will send a request to the Xiaomi server. If all is correct, the message Success. Reboot your device and the waiting timer (from 7 to 15 days) will appear.

Step 2: Waiting and checking status

On new models (Xiaomi) 13T, Redmi Note 12 Pro+) Waiting times can be as high as 360 hours (15 days) and can be checked:

  • ๐Ÿ“ฑ On the phone: Settings โ†’ Additionally. โ†’ Status of release.
  • ๐Ÿ–ฅ๏ธ In Mi Unlock Tool: Connect your device in Fastboot mode.

Step 3: Final Unlocking

After the timer has expired:

  1. Transfer your phone to Fastboot again.
  2. Open the Mi Unlock Tool and press Unlock.
  3. Confirm the action - the device will restart with the unlocked bootloader.

โš ๏ธ Note: On some models (e.g, POCO F5) After unlocking, you may need to firmware custom Recovery (TWRP) before installing Magisk, using standard recaveri MIUI This will result in data resetting at each reboot.

Install Magisk: obtaining root rights without custom firmware

Once you unlock the bootloader, you can install Magisk, a root-rights tool without replacing system files, which is the safest way to do so, since Magisk hides the root from applications (such as banking) and supports the root-rights system. OTA-update.

1. Download the stock firmware for your model from the Xiaomi Firmware Updater website (choose the Fastboot version).

2. Remove the file from the archive boot.img (It is in the image folder).

3. Move it. boot.img Open it via Magisk App (click Install) โ†’ Select and Patch a File).

4. After patching, copy the file magisk_patched.img PC-only.

5. Sweat the patch boot through Fastboot:

fastboot flash boot magisk_patched.img


fastboot reboot

Method 2: Through Custom Recavery (TWRP)

This method is suitable if the patch boot.img It doesnโ€™t work (for example, on Xiaomi). 12S Ultra).

  • ๐Ÿ”ง Install. TWRP For your model (download only from verified sources, for example, XDA).
  • ๐Ÿ“ฑ Fastboot: Fastboot Flash Recovery twrp.img.
  • ๐Ÿ”„ Boot in. TWRP (Hold the volume up + Power on-set).
  • ๐Ÿ“ฆ Install Magisk via Install โ†’ Choose. ZIP.
Xiaomi modelDoes TWRP support theRecommended Root MethodFeatures
Redmi Note 11 Pro+ 5Gโœ… Yes.Patch boot.imgARB=4, You can't roll back down. MIUI 13
POCO F4 GTโœ… Yes (informal)TWRP + MagiskDeactivation required AVB vbmeta
Xiaomi 13 LiteโŒ No (encryption issues)Just a patch. boot.imgRuth can break the camera
Redmi K50 Gamingโœ… Yes.Any methodSupports GSI (Generic System Image) projects

๐Ÿ’ก

If after installing Magisk phone is fixated on the download, try flashing the original boot.img You can do this again, and then you can patch it again, and often you can do this by turning off Magisk modules (like Riru or LSposed).

Problem Solving: What to Do When Something Goes Wrong

Even if you follow the instructions accurately, you can get errors, and here are the most common ways to correct them:

Error: "Couldn't unlock" in Mi Unlock Tool

Causes and solutions:

  • ๐Ÿ”Œ Non-Original Cable: Use a Cable or a Certified USB Type C.
  • ๐Ÿ•’ Waiting Timer Has Not Expired: Check Status in Settings โ†’ Status of release.
  • ๐Ÿ“ฑ Unbound Mi Account: log out of your phone account, reboot and log in again.
  • ๐Ÿ–ฅ๏ธ Mi Unlock Tool: Download the latest version from the official website.

Error: "This device is locked" after restart

If, after unlocking, the phone again shows a blocked status:

  1. Check that the Fastboot displays the inscription UNLOCKED (red-colored).
  2. If the status RELOCKED, Repeat the unlocking with the Mi Unlock Tool.
  3. In some models (POCO X5 Pro) vbmeta must be flashed with the check turned off:
fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img

The phone does not turn on after firmware (brick)

Symptoms of soft brick:

  • ๐Ÿ”„ Hanging on the logo MI or Fastboot.
  • ๐Ÿ“ต Black screen after download animation.
  • โšก Fast battery discharge in the off state.

Decision:

  1. Sweep through the full stock firmware via the Mi Flash Tool (select the Clean All option).
  2. If the device is not determined by the PC, try clamping Volume up. + Loudness down + Food for the forced transition to EDL-mode (requires an authorized firmware account through Qualcomm Tools).
What if Xiaomi is not defined in Fastboot?
If you connect to a PC, Device Manager displays "Unknown Device" or "Qualcomm" HS-USB QDLoader 9008, which means the phone has gone into emergency mode. EDL. Recovery requires: 1. Download the firmware in.mbn format for your model. 2. Use the Mi Flash Pro or QFil tool (for Qualcomm processors). 3. In some cases, you need an authorized Xiaomi account (for new models with Anti-Rollback 5 protection).+). Please note: the firmware through EDL drop off IMEI Serial number, unless you use special scripts to restore them.

Root Rights Alternatives: What You Can Do Without Unblocking

If unlocking the bootloader seems too risky, consider alternative ways to expand Xiaomiโ€™s capabilities:

  • ๐Ÿ”ง ADB-commands: some system settings (for example, disabling advertising in the MIUI) can be changed without rue:
adb shell pm uninstall --user 0 com.miui.analytics


adb shell pm uninstall --user 0 com.xiaomi.joyose

  • ๐Ÿ“ฑ Applications with advanced rights: Shizuku โ€“ allows you to manage Android through the Internet ADB Tasker is an action automation (requires permissions for special features). MacroDroid is a macro without root.
  • ๐Ÿ”„ Castom launchers: Nova Launcher or Hyperion will replace the standard interface MIUI systemless.
  • ๐Ÿ”’ Xposed Framework: LSposed works on some firmware without Magisk (requires unlocked bootloader, but not necessarily root).

For owners. POCO Redmi with global firmware has another option - the transition to EU-firmware (e.g. xiaomi.eu). It offers:

  • โœ… Lack of advertising and unnecessary applications.
  • โœ… Weekly updates.
  • โœ… Advanced settings (for example, icon style selection).

The bootloader must be unlocked, but the root is not required.

๐Ÿ’ก

If your goal is simply to remove ads or change the look and feel of the MIUI, Try alternative methods first without unlocking. Root rights are only needed for deep modifications (e.g. changes) CPU/GPU, Removing system applications or installing a custom core).

Safety and Risks: What to Fear After Getting a Root

Root rights give you complete control of the system, but with them come new vulnerabilities.

Security vulnerabilities

With root rights, any application can:

  • ๐Ÿ•ต๏ธ Access passwords, authorization tokens and personal data.
  • ๐Ÿ“ Track your location bypassing Android permissions.
  • ๐Ÿ’ณ Intercept. SMS (including bank codes).

Solution: Use MagiskHide (built into Magisk) to hide the root from apps and check the rights regularly with Root Checker.

2. Problems with banking applications

Apps SberBank Online, Tinkoff, Google Pay and others block work on devices with root rights.

  • ๐Ÿ”’ Enable MagiskHide and add banking apps to the Hiding List.
  • ๐Ÿ“ฑ Use Universal SafetyNet Fix to complete Google Certification.
  • ๐Ÿ”„ If nothing helps, temporarily remove Magisk via Full Uninstall in the settings.

3. Loss of warranty and problems with the service center

Xiaomi officially declares that unlocking the bootloader will void the warranty.

  • ๐Ÿ”ง If the problem is not related to the software part (for example, a broken screen), service centers may turn a blind eye to it.
  • ๐Ÿ“ฑ Before visiting the SC, you can block the bootloader back (but this will reset all data!).
  • ๐Ÿ”’ On some models (for example, Xiaomi 12 Pro) lock bootloader after unlocking is impossible.

System instability

Frequent problems after getting a root:

  • ๐Ÿ”‹ Fast battery discharge (due to background root-right processes).
  • ๐Ÿ“ฑ Spontaneous reboots (especially when using Magisk modules).
  • ๐ŸŽฎ Lags in games (due to a change in scheduler) CPU/GPU).

Solution: Disable unnecessary Magisk modules and keep track of logs through Logcat.

FAQ: Answers to Frequent Questions

โ“ Can I get root on Xiaomi without unlocking the bootloader?
All modern Xiaomi devices (starting with the Redmi Note 7) require an unlocked bootloader to install Magisk or SuperSU. MIUI (For example, DirtyCOW, but they are long closed.
โ“ How long does it take to unlock the bootloader?
On new models (Xiaomi 13, Redmi Note 12) 15 days (360 hours); on old models (up to Redmi Note 10) 7 days (168 hours); the timer starts after the first request to Mi Unlock Tool and does not reset when flashing.
โ“ Can I return the warranty after receiving the root?
Technically, no, because the bootloader unlocks on the hardware chip (eFuse), but if you lock the bootloader back (fastboot oem lock command), the service center may not notice the change unless the problem is related to the software part.
โ“ Why Banking Apps Donโ€™t Work After Magisk Installation?
Banking applications verify system integrity through SafetyNet and Play Integrity API. Solutions: Enable MagiskHide in Magisk settings. Install Universal SafetyNet Fix. Add the app to the hide list in MagiskHide Props Config. If nothing helps, use a second user space (Island or Shelter) for banking applications.
โ“ What Xiaomi models can not be unlocked?
At the moment (2026) unlocking is officially supported for all models, but there are limitations: Xiaomi 13 Ultra and newer: unlock is possible, but breaks the camera (requires a patch for libarcore). POCO C-Series (e.g., C-Series, POCO C50): Budget models often lack custom firmware support (CN-Firmware: may require Chinese Mi Account to unlock. Check model support before buying XDA Developers.