Xiaomi Redmi Note 9 remains one of the most popular budget smartphones even years after its release. However, standard MIUI restrictions do not allow users to fully control the device: you can not remove system applications, change the processor frequency or install custom firmware. The solution is root rights, but the process requires caution: a mistake can turn the phone into a brick.
In this guide, we will discuss three current ways to unlock the root rights on Redmi Note 9 (codenamed merlin), including the official Mi Unlock Tool and alternative ways for power users. We will focus on the risks of loss of warranty and recovery methods after failures. All instructions are validated on MIUI 14/15 firmware and are valid for 2026.
1.Preparation of the device: what to do before unlocking
Before you start getting a root license, you need to prepare your smartphone and computer, and skipping any of the steps can lead to locking the bootloader or loss of data.
The Redmi Note 9 has a bootloader locked by default, so youโll have to unlock it through the official Mi Unlock Tool.
- ๐ Charge your phone to at least 60% โ the unlocking process can take up to 30 minutes.
- ๐ฑ Enable Developer Mode: Go to Settings โ The phone. โ Version. MIUI and press 7 times.
- ๐ Activate OEM-unlocking and debugging USB on the Developer Menu.
- ๐ป Install on PC Mi Unlock Tool (version not lower than 5.5.224.30).
- ๐ก Connect to a stable Internet โ Xiaomi checks your account during unlocking.
Important: If you previously linked your device to another Mi Account, you will have to delete it through Settings โ Accounts โ Mi Account โ Delete your account. Otherwise, unlocking will not be possible.
๐ก
If the Mi Unlock Tool gives you a "Couldn't unlock" error, try connecting the phone to another one. USB-port (preferably) USB 2.0) or use the original Xiaomi cable.
2.Official method: unlock the bootloader through Mi Unlock
This is the safest method, but it requires a Mi Account and 72 to 168 hours of waiting (depending on the region).
- Sign in to Mi Account on your phone and PC (required to have the same account!).
- Connect the Redmi Note 9 to your computer in Fastboot mode (turn off your phone, then press Volume Down + Power).
- Launch the Mi Unlock Tool, log in to your account and follow the program instructions.
- After successful unlocking, the phone will automatically restart (the data will be saved).
From now on, you can install custom recovery (TWRP) and firmware.
Whether the data is saved (photos, contacts)
Does the sensor and buttons work?
Is it connected to the mobile network?
Did artifacts appear on the screen?-->
| Method of unlocking | Waiting time | Risks. | Data retention |
|---|---|---|---|
| Official (Mi Unlock) | 3-7 days | Minimum (the guarantee is lost) | Yes. |
| Through EDL-regime | 10.30 minutes | High (brick risk) | No. |
| Exploit (vulnerability) | 5-15 minutes | Medium (may not work on new firmware) | Yes. |
3. Install TWRP and obtain root rights through Magisk
Once the bootloader is unlocked, you can start installing custom recovery. 9 recommended TWRP version 3.7.0_12-0 or newer.
Instructions:
- Download TWRP for Merlin (check out the version!).
- Move the twrp.img file to the folder from fastboot to PC.
- Connect your phone in Fastboot mode and execute the command: fastboot flash recovery twrp.img fastboot boot twrp.img
- In TWRP, go to Advanced โ Disable DM-Verity (important to prevent looping downloads!).
- Download Magisk (version 26.4+) and install it via Install โ Select Storage.
After the reboot, check for root rights using the Root Checker app. If the phone is stuck on the MI logo, repeat the step with Disable DM-Verity.
What to do if TWRP does not start?
4. Alternative methods: EDLs and exploits
If official unlocking is not available (for example, due to error 86006), you can use the device. EDL-This is an Emergency Download Mode:
- ๐ง Special cable (EDL cable) or short circuit test points on the board.
- ๐พ Firehose firmware for Redmi Note 9 (see forums) 4PDA or XDA).
- ๐ฅ๏ธ Mi Flash Tool or QFil.
โ ๏ธ Attention: use EDL-A regime without experience can lead to a complete loss of life. IMEI This method is recommended only if other methods have not worked.
Another option is exploits like DirtyCOW or CVE-2023-21036, but they only work on older versions of MIUI (up to 12.5).
su -c "id"If the answer appears uid=0(root), the exploit worked, but these methods are often blocked by security updates.
5 Risks and how to minimize them
Getting root rights always comes with risks, and here are the main ones and ways to avoid them:
- ๐จ Loss of warranty: Xiaomi cancels warranty if unlocked bootloader is detected.Solution: before contacting the service center, return the phone to factory condition using the Mi Flash Tool.
- ๐ Bootloop looping: This is due to incompatibility between firmware or Magisk.Solution: Keep stock firmware for the Redmi Note 9 on hand.
- ๐ก Network problems: after firmware can disappear IMEI. Solution: Backup folder /efs through TWRP before manipulation.
- ๐ก๏ธ Security vulnerabilities: Root rights open access to system files for malware.Solution: Install Magisk with SafetyNet Fix module.
โ ๏ธ Note: If you are using Redmi Note 9 Pro (codename joyeuse) or Note 9S (curtana, the instructions in this article won't work -- these models have a different bootloader and firmware set. Always check the code name of the device through the command:
adb shell getprop ro.product.device6. How to get it all back: a rollback to stock firmware
If after obtaining the root license, the phone becomes unstable or you want to sell the device, return it to a factory state.
- Download stock firmware for Redmi Note 9 (select Global Stable version).
- Unpack the archive and place the firmware folder in the root of the C:\ disk.
- Connect your phone in Fastboot mode and start the Mi Flash Tool.
- Select the firmware folder, press Refresh, then Flash (the Clean all option will delete all data!).
After the flashing, the bootloader will remain unlocked, but there will be no root rights and custom recovery.
- ๐ Block the bootloader via fastboot oem lock (โ ๏ธ Note: This will delete all data and may result in bootloop if the firmware is not stock!).
- ๐ฑ Reset Mi Account through Settings โ Accounts.
๐ก
If the phone doesn't turn on after you've run the firmware, try clamping Volume Up + Power for 20 seconds for a forced reboot. If that doesn't work, repeat the firmware with the Clean all and lock option in the Mi Flash Tool.
7. Frequent errors and their solutions
Even with the correct instructions, errors can occur, and here are the most common ways to correct them:
| Mistake. | Reason. | Decision |
|---|---|---|
| Couldn't unlock (86006) | Account not tied to device or waiting is not completed | Wait 72 hours, check the Internet connection, log in again |
| Fastboot: unknown command | No ADB/Fastboot drivers installed | Install Platform Tools or Xiaomi Drivers |
| Telphon stuck on MI logo | DM-Verity or Magisk Module Conflict not disabled | Check it out. TWRP, set up disable_dm-verity.zip, remove problem modules |
| Invalid IMEI after the firmware | The /efs folder is damaged. | Restore the efs backup or use the QCN Restore Tool |
If neither solution worked, please refer to the 4PDA or XDA-Developers forums with error logs.
- Phone model (merlin, joyeuse, etc.)
- The MIUI version (Settings โ About Phone โ MIUI version)
- Accurate error message (screenshot or text).