How to get a root rights on Xiaomi Redmi Note 9S: Safe Guide 2026

Getting root rights to the Xiaomi Redmi Note 9S (codename curtana) opens up hidden Android features, but requires care. This Qualcomm Snapdragon 720G-based smartphone has a secure bootloader, so standard methods like KingRoot won't work here. In 2026, the process has become complicated due to Xiaomi's tightening security policies, but workarounds remain.

It is important to understand that unlocking the bootloader on the Redmi Note 9S with MIUI 14/15 requires a Mi Account to be tied to the device and a 7-day wait is a prerequisite that cannot be avoided. Without this step, further manipulation of the firmware is impossible. In this article, we will discuss legal ways to obtain root through Magisk and official tools, and also warn about the risks specific to this model.

Preparation of the device: what to do before unlocking

Before you start the process, make sure your Redmi Note 9S meets the following key requirements:

  • ๐Ÿ“ฑ Version. MIUI: 14.0.1+ (stable global or EEA). Chinese Firmware Demands Additional Steps.
  • ๐Ÿ”‹ Battery charge: at least 60%, and when discharged during the process, the device can turn into a brick".
  • ๐Ÿ” Mi Account: Linked to the phone and confirmed via SMS/email. Without this, unlocking is impossible.
  • ๐Ÿ’ป PC: Windows 10/11 with BitLocker disabled (it can block access to the ADB).

Pay special attention to backup. Use Mi Mover or TWRP Backup (if already installed) to save:

  • ๐Ÿ“ Application data (especially) /data/data/com.xiaomi.* โ€” This is where the system settings are stored).
  • ๐Ÿ“ธ Photo and video from internal memory (external) SD-card unaffected).
  • ๐Ÿ“ž Call log and SMS (Export it through Google Contacts).

โš ๏ธ Attention: On the Redmi Note 9S s MIUI 15+ When unlocking the loader is automatically reset DRM-This means that Widevine support is lost. L1 โ€” Netflix, Disney+ Other services will only work in 480p.

๐Ÿ“Š What kind of unlocking method you plan to use?
Officially via Mi Unlock
TWRP+Magisk Castomic
Patched Boot via Fastboot
I haven't decided yet.

Unlocking the bootloader: step-by-step process 2026

The official Mi Unlock Tool is the only legal way to unlock the bootloader on the Redmi Note 9S. The procedure takes at least 7 days due to Xiaomi's policy:

  1. Download the latest version of the Mi Unlock Tool (check the hash amount of the file for viruses).
  2. Activate Developer Options: Go to Settings โ†’ About Phone โ†’ MIUI version and tap 7 times.
  3. Enable USB Debugging and OEM Unlocking in the Developer Menu.
  4. Connect your phone to your PC, log in to the Mi Unlock Tool and wait for the message "Added account successfully. Wait 168 hours."

After 7 days, reconnect. If the tool gives you a "Couldn't unlock" error, do:

adb reboot bootloader


fastboot oem device-info

In the conclusion, check the line Device unlocked: false. If true, the bootloader is already unlocked.

Linked to the Mi Account to the device

USB debugging and OEM unlocking enabled

Qualcomm drivers installed on PC

Backup of all important data is made

Battery charge >60%-->

โš ๏ธ Note: Some of the Redmi Notes 9S firmware V14.0.4.0+ When you unlock it, you get an "Anti-rollback check" error, which means you're trying to install the firmware older than the current one. MIUI via Fastboot.

Selection of firmware: custom vs Patched boot

After unlocking the bootloader, you have two ways to get root rights:

MethodPlusesConsDifficulty
TWRP + MagiskFull control of the system, backups through NANDroidRisk of DRM loss, complex installationโญโญโญโญ
Patched BootSafetyNet Compliance, Save Widevine L1Limited functionality, requires updatesโญโญ
Custom ROMClean Android, regular updatesLoss of MIUI (IR-blaster, Game Turbo)โญโญโญโญโญ

For most users of the Redmi Note 9S, the best option with patched boot is:

  1. Download the original boot.img for your MIUI version with Xiaomi Firmware Updater.
  2. Install Magisk Manager (the latest version is here).
  3. In Magisk, select Install โ†’ Select and Patch a File and select boot.img.
  4. Squeeze the result. magisk_patched.img Fastboot: Fastboot Flash boot magisk_patched.img fastboot reboot

๐Ÿ’ก

If the phone boots to bootloop after you have patched boot, try disabling the forced encryption. Use the format data โ†’ yes command in TWRP before you run it.

Installation of Magisk and Root Rights Check

After a successful firmware magisk_patched.img:

  1. Install. APK-Magisk Manager file (unless previously installed).
  2. Open the app and wait for the message "Magisk is installed".
  3. Check SafetyNet status in Check SafetyNet. If you show FAIL on ctsProfile, install Universal SafetyNet Fix via Magisk.

To check the root rights, use:

  • ๐Ÿ“ฑ Termux with the su command (to be requested by Magisk).
  • ๐Ÿ” Root Checker app from Google Play.
  • ๐Ÿ› ๏ธ Any application that requires root (e.g. Titanium Backup).

โš ๏ธ Attention: On the Redmi Note 9S s MIUI 15+ Magisk may be in conflict with miui_optimization. If the phone overheats or discharges quickly, turn off optimization through ADB: adb shell settings put global miui_optimization_disabled 1

What if Magisk can't see the root?
1. Reinstall Magisk via fastboot flash boot (do not use direct install in Magisk Manager). 2. Check the firmware version - on MIUI 14.0.8+ requires Magisk 26.1+. 3. Remove conflicting modules (especially Riru or EdXposed). 4. If nothing helps, swipe the full MIUI image through the Mi Flash Tool with the clean all option and repeat the process.

Solving Typical Problems on the Redmi Note 9S

Even with the exact instructions, owners of the Redmi Note 9S face specific errors:

Mistake.Reason.Decision
Fastboot: FAILED (remote:'Flashing is not allowed')Unlocked bootloader or account not tiedRepeat the unlocking procedure with the Mi Unlock Tool
Invalid sparse file format at header magicThe file is damaged. boot.img or TWRPDownload the image again, check the checksum
The phone does not turn on after the firmwareIncompatible version of MIUI or interrupted processRun the full ROM through the Mi Flash Tool in EDL mode
Magisk: Installation failedPlace taken in /boot sectionUse Magisk Delta with compression option

If after receiving the root stopped working:

  • ๐ŸŽฎ Game Turbo: Install the module MIUI Game Turbo Enabler.
  • ๐Ÿ“ท 48 MP camera: run a modified libmmcamera.
  • ๐Ÿ”Š Dolby Atmos: activate via Build.prop Editor (add the line persist.dolby.status)=1).

๐Ÿ’ก

On the Redmi Note 9S with MIUI 15+, after receiving the root, be sure to turn off automatic system updates in Settings โ†’ About Phone โ†’ Update MIUI. Update "over the air" will lead to loss of root rights and possible bootloop!

How to hide the root from banking applications

Many applications (Sberbank, Tinkoff, Google Pay) block work on devices with root rights.

  1. Install the MagiskHide Props Config module.
  2. In Magisk settings, activate MagiskHide and add apps to the list.
  3. For Google Pay, additionally swipe the SafetyNet Fix module and restart.
  4. Check status via Termux: su getprop ro.boot.verifiedbootstate Must return green.

If the banking application does not work:

  • ๐Ÿ”„ Rename the application package via App Cloner.
  • ๐Ÿ›ก๏ธ Use Island (Sandbox) to isolate the app.
  • ๐Ÿ“ฑ Install an alternative client (e.g. Sberbank Lite via the APK).

โš ๏ธ Attention: On the Redmi Note 9S Android 12+ MagiskHide is unstable because of Zygote hardening. If the detects root app, try rolling back to Magisk 25.2 or using Shamiko instead of MagiskHide.

Alternative methods: without unlocking the loader

If unlocking via Mi Unlock Tool is not available (for example, due to the error "This device is locked"), consider the temporary workarounds:

  • ๐Ÿ”“ ADB Root: on some firmware MIUI 13 can be obtained temporary root through: adb shell su (only working until reboot).
  • ๐Ÿ“ฆ Shizuku: Allows you to manage systems API without full root (required) ADB).
  • ๐Ÿ› ๏ธ Local Terminal: some commands (e.g. pm grant) run without a root on the MIUI.

These methods give limited access and are only suitable for:

  • Changes to build.prop settings.
  • Delete system applications via pm uninstall -k --user 0.
  • Run scripts in /data/local/tmp.
How do you get it back?
To completely remove the root and return the stock firmware: 1. Download the latest version of MIUI for curtana from the official website. 2. Unpack ZIP and swipe through Mi Flash Tool with the clean all and lock option. 3. Wait for automatic restart (the first run will take 10-15 minutes). 4. Check the bootloader status: fastboot oem device-info should show Device unlocked: false.

FAQ: Answers to Frequent Questions

Can I get a root on the Redmi Note 9S without a PC?
No, unlock the bootloader and firmware. magisk_patched.img Alternative methods like KingRoot, iRoot, on this device don't work because of the protected Qualcomm bootloader.
Why doesn't NFC work after Root?
This is a well-known MIUI 14+ problem on the Redmi Note 9S. Solution: Install the NFC Fix for MIUI module via Magisk. Turn off Fast Payment in NFC settings. Reboot your phone. If it doesn't work, swipe through the modified libnfc-nci.so.
How to update MIUI without losing root?
Update only through manual firmware: Download the full ZIP update (not OTA!). Remove boot.img from it and patch it through Magisk. Update via TWRP or fastboot update. After the update, scrolle through patched boot.img. Never upgrade through Settings โ†’ Update MIUI!
Will Google Pay work after the root?
Yes, but additional customization is required: Install modules: Universal SafetyNet Fix + MagiskHide Props Config. In MagiskHide add com.google.android.gms and com.google.android.apps.walletnfcrel.Reboot and check SafetyNet in Magisk. If ctsProfile fails, change the device print to a certified one (e.g. Pixel 5). MIUI 15+ may require a rollback to Magisk 26.0.
Can I return the Widevine L1 after unlocking the bootloader?
Partially. Full L1 recovery is impossible, but you can achieve L3 (720p on Netflix) Switch stock boot.img without Magisk. Install Widevine L1 for MIUI (works on 30% of devices). Reset DRM settings: Settings โ†’ Apps โ†’ All apps โ†’ Google Play Services โ†’ Storage โ†’ Delete Data. Check status in DRM Info (app from Play Market).