How to get a root rights on Xiaomi Redmi Note 9: safe ways 2026

Xiaomi Redmi Note 9 remains one of the most popular budget smartphones even years after its release. However, standard MIUI restrictions do not allow users to fully control the device: you can not remove system applications, change the processor frequency or install custom firmware. The solution is root rights, but the process requires caution: a mistake can turn the phone into a brick.

In this guide, we will discuss three current ways to unlock the root rights on Redmi Note 9 (codenamed merlin), including the official Mi Unlock Tool and alternative ways for power users. We will focus on the risks of loss of warranty and recovery methods after failures. All instructions are validated on MIUI 14/15 firmware and are valid for 2026.

1.Preparation of the device: what to do before unlocking

Before you start getting a root license, you need to prepare your smartphone and computer, and skipping any of the steps can lead to locking the bootloader or loss of data.

The Redmi Note 9 has a bootloader locked by default, so youโ€™ll have to unlock it through the official Mi Unlock Tool.

  • ๐Ÿ”Œ Charge your phone to at least 60% โ€“ the unlocking process can take up to 30 minutes.
  • ๐Ÿ“ฑ Enable Developer Mode: Go to Settings โ†’ The phone. โ†’ Version. MIUI and press 7 times.
  • ๐Ÿ”“ Activate OEM-unlocking and debugging USB on the Developer Menu.
  • ๐Ÿ’ป Install on PC Mi Unlock Tool (version not lower than 5.5.224.30).
  • ๐Ÿ“ก Connect to a stable Internet โ€“ Xiaomi checks your account during unlocking.

Important: If you previously linked your device to another Mi Account, you will have to delete it through Settings โ†’ Accounts โ†’ Mi Account โ†’ Delete your account. Otherwise, unlocking will not be possible.

๐Ÿ’ก

If the Mi Unlock Tool gives you a "Couldn't unlock" error, try connecting the phone to another one. USB-port (preferably) USB 2.0) or use the original Xiaomi cable.

2.Official method: unlock the bootloader through Mi Unlock

This is the safest method, but it requires a Mi Account and 72 to 168 hours of waiting (depending on the region).

  1. Sign in to Mi Account on your phone and PC (required to have the same account!).
  2. Connect the Redmi Note 9 to your computer in Fastboot mode (turn off your phone, then press Volume Down + Power).
  3. Launch the Mi Unlock Tool, log in to your account and follow the program instructions.
  4. After successful unlocking, the phone will automatically restart (the data will be saved).

From now on, you can install custom recovery (TWRP) and firmware.

Whether the data is saved (photos, contacts)

Does the sensor and buttons work?

Is it connected to the mobile network?

Did artifacts appear on the screen?-->

Method of unlockingWaiting timeRisks.Data retention
Official (Mi Unlock)3-7 daysMinimum (the guarantee is lost)Yes.
Through EDL-regime10.30 minutesHigh (brick risk)No.
Exploit (vulnerability)5-15 minutesMedium (may not work on new firmware)Yes.
๐Ÿ“Š Which Unblocking Method Do You Prefer?
Official (Mi Unlock)
Through EDL-regime
Exploitation (quick but risky)
I haven't decided yet.

3. Install TWRP and obtain root rights through Magisk

Once the bootloader is unlocked, you can start installing custom recovery. 9 recommended TWRP version 3.7.0_12-0 or newer.

Instructions:

  1. Download TWRP for Merlin (check out the version!).
  2. Move the twrp.img file to the folder from fastboot to PC.
  3. Connect your phone in Fastboot mode and execute the command: fastboot flash recovery twrp.img fastboot boot twrp.img
  4. In TWRP, go to Advanced โ†’ Disable DM-Verity (important to prevent looping downloads!).
  5. Download Magisk (version 26.4+) and install it via Install โ†’ Select Storage.

After the reboot, check for root rights using the Root Checker app. If the phone is stuck on the MI logo, repeat the step with Disable DM-Verity.

What to do if TWRP does not start?
After installation TWRP The phone reboots to standard recovery, so the firmware overwrites the custom: 1. In fastboot, run fastboot flash recovery. twrp.img and fastboot boot at once. twrp.img. 2. V TWRP Go to Mount. โ†’ Enable MTP And copy the file to the phone. disable_dm-verity_forceencrypt.zip. 3. Install this file through Install, then swipe Magisk. 4. Reboot with the fastboot reboot command (not via the menu) TWRP!).

4. Alternative methods: EDLs and exploits

If official unlocking is not available (for example, due to error 86006), you can use the device. EDL-This is an Emergency Download Mode:

  • ๐Ÿ”ง Special cable (EDL cable) or short circuit test points on the board.
  • ๐Ÿ’พ Firehose firmware for Redmi Note 9 (see forums) 4PDA or XDA).
  • ๐Ÿ–ฅ๏ธ Mi Flash Tool or QFil.

โš ๏ธ Attention: use EDL-A regime without experience can lead to a complete loss of life. IMEI This method is recommended only if other methods have not worked.

Another option is exploits like DirtyCOW or CVE-2023-21036, but they only work on older versions of MIUI (up to 12.5).

su -c "id"

If the answer appears uid=0(root), the exploit worked, but these methods are often blocked by security updates.

5 Risks and how to minimize them

Getting root rights always comes with risks, and here are the main ones and ways to avoid them:

  • ๐Ÿšจ Loss of warranty: Xiaomi cancels warranty if unlocked bootloader is detected.Solution: before contacting the service center, return the phone to factory condition using the Mi Flash Tool.
  • ๐Ÿ”„ Bootloop looping: This is due to incompatibility between firmware or Magisk.Solution: Keep stock firmware for the Redmi Note 9 on hand.
  • ๐Ÿ“ก Network problems: after firmware can disappear IMEI. Solution: Backup folder /efs through TWRP before manipulation.
  • ๐Ÿ›ก๏ธ Security vulnerabilities: Root rights open access to system files for malware.Solution: Install Magisk with SafetyNet Fix module.

โš ๏ธ Note: If you are using Redmi Note 9 Pro (codename joyeuse) or Note 9S (curtana, the instructions in this article won't work -- these models have a different bootloader and firmware set. Always check the code name of the device through the command:

adb shell getprop ro.product.device

6. How to get it all back: a rollback to stock firmware

If after obtaining the root license, the phone becomes unstable or you want to sell the device, return it to a factory state.

  1. Download stock firmware for Redmi Note 9 (select Global Stable version).
  2. Unpack the archive and place the firmware folder in the root of the C:\ disk.
  3. Connect your phone in Fastboot mode and start the Mi Flash Tool.
  4. Select the firmware folder, press Refresh, then Flash (the Clean all option will delete all data!).

After the flashing, the bootloader will remain unlocked, but there will be no root rights and custom recovery.

  • ๐Ÿ”’ Block the bootloader via fastboot oem lock (โš ๏ธ Note: This will delete all data and may result in bootloop if the firmware is not stock!).
  • ๐Ÿ“ฑ Reset Mi Account through Settings โ†’ Accounts.

๐Ÿ’ก

If the phone doesn't turn on after you've run the firmware, try clamping Volume Up + Power for 20 seconds for a forced reboot. If that doesn't work, repeat the firmware with the Clean all and lock option in the Mi Flash Tool.

7. Frequent errors and their solutions

Even with the correct instructions, errors can occur, and here are the most common ways to correct them:

Mistake.Reason.Decision
Couldn't unlock (86006)Account not tied to device or waiting is not completedWait 72 hours, check the Internet connection, log in again
Fastboot: unknown commandNo ADB/Fastboot drivers installedInstall Platform Tools or Xiaomi Drivers
Telphon stuck on MI logoDM-Verity or Magisk Module Conflict not disabledCheck it out. TWRP, set up disable_dm-verity.zip, remove problem modules
Invalid IMEI after the firmwareThe /efs folder is damaged.Restore the efs backup or use the QCN Restore Tool

If neither solution worked, please refer to the 4PDA or XDA-Developers forums with error logs.

  • Phone model (merlin, joyeuse, etc.)
  • The MIUI version (Settings โ†’ About Phone โ†’ MIUI version)
  • Accurate error message (screenshot or text).
Can I get a root right without unlocking the bootloader?
No, on the Redmi Note 9, unlocking the bootloader is mandatory. Alternative methods (such as through kernel vulnerabilities) only work on older firmware and often lead to unstable phone operation. The only exception is a temporary root through Magisk in RAM, but it disappears after a reboot.
Will I lose data when I unlock the bootloader?
When you officially unlock through the Mi Unlock Tool, the data will be saved. However, when you install TWRP or custom firmware, all data will be deleted. We recommend backup through adb backup or manually copy files to your PC.
Can I upgrade MIUI after I get a root license?
Yes, but only manually via TWRP. Automatic update via Settings โ†’ System update will result in root rights loss and possible bootloop. Before updating: Download the full firmware package (.zip) for your model. Install it through Install โ†’ Select Zip in TWRP. After updating, re-sweep Magisk.
How to hide root rights from applications (for example, banking)?
Use the MagiskHide Props Config or Universal SafetyNet Fix module. Also, in the Magisk settings, activate the MagiskHide option and add problematic applications to the hide list. Banking applications (e.g. Sberbank Online) may require: Disable Magisk via Settings โ†’ Turn off Magisk (temporary shutdown). Use alternative versions of applications (e.g., SberPay instead of the full bank version).
Which is the best custom firmware for Redmi Note 9?
The most stable options are LineageOS 20 (Android 13) โ€“ minimalist firmware without unnecessary features. Pixel Experience โ€“ firmware with Google Pixel interface and monthly security updates. crDroid โ€“ balance between performance and functionality. AOSP Extended โ€“ firmware with advanced customization settings. Before installing, check compatibility with the code name of your device (merlin) on the XDA forum.