Getting root rights to the Xiaomi Redmi Note 9S (codename curtana) opens up hidden Android features, but requires care. This Qualcomm Snapdragon 720G-based smartphone has a secure bootloader, so standard methods like KingRoot won't work here. In 2026, the process has become complicated due to Xiaomi's tightening security policies, but workarounds remain.
It is important to understand that unlocking the bootloader on the Redmi Note 9S with MIUI 14/15 requires a Mi Account to be tied to the device and a 7-day wait is a prerequisite that cannot be avoided. Without this step, further manipulation of the firmware is impossible. In this article, we will discuss legal ways to obtain root through Magisk and official tools, and also warn about the risks specific to this model.
Preparation of the device: what to do before unlocking
Before you start the process, make sure your Redmi Note 9S meets the following key requirements:
- ๐ฑ Version. MIUI: 14.0.1+ (stable global or EEA). Chinese Firmware Demands Additional Steps.
- ๐ Battery charge: at least 60%, and when discharged during the process, the device can turn into a brick".
- ๐ Mi Account: Linked to the phone and confirmed via SMS/email. Without this, unlocking is impossible.
- ๐ป PC: Windows 10/11 with BitLocker disabled (it can block access to the ADB).
Pay special attention to backup. Use Mi Mover or TWRP Backup (if already installed) to save:
- ๐ Application data (especially) /data/data/com.xiaomi.* โ This is where the system settings are stored).
- ๐ธ Photo and video from internal memory (external) SD-card unaffected).
- ๐ Call log and SMS (Export it through Google Contacts).
โ ๏ธ Attention: On the Redmi Note 9S s MIUI 15+ When unlocking the loader is automatically reset DRM-This means that Widevine support is lost. L1 โ Netflix, Disney+ Other services will only work in 480p.
Unlocking the bootloader: step-by-step process 2026
The official Mi Unlock Tool is the only legal way to unlock the bootloader on the Redmi Note 9S. The procedure takes at least 7 days due to Xiaomi's policy:
- Download the latest version of the Mi Unlock Tool (check the hash amount of the file for viruses).
- Activate Developer Options: Go to Settings โ About Phone โ MIUI version and tap 7 times.
- Enable USB Debugging and OEM Unlocking in the Developer Menu.
- Connect your phone to your PC, log in to the Mi Unlock Tool and wait for the message "Added account successfully. Wait 168 hours."
After 7 days, reconnect. If the tool gives you a "Couldn't unlock" error, do:
adb reboot bootloader
fastboot oem device-infoIn the conclusion, check the line Device unlocked: false. If true, the bootloader is already unlocked.
Linked to the Mi Account to the device
USB debugging and OEM unlocking enabled
Qualcomm drivers installed on PC
Backup of all important data is made
Battery charge >60%-->
โ ๏ธ Note: Some of the Redmi Notes 9S firmware V14.0.4.0+ When you unlock it, you get an "Anti-rollback check" error, which means you're trying to install the firmware older than the current one. MIUI via Fastboot.
Selection of firmware: custom vs Patched boot
After unlocking the bootloader, you have two ways to get root rights:
| Method | Pluses | Cons | Difficulty |
|---|---|---|---|
| TWRP + Magisk | Full control of the system, backups through NANDroid | Risk of DRM loss, complex installation | โญโญโญโญ |
| Patched Boot | SafetyNet Compliance, Save Widevine L1 | Limited functionality, requires updates | โญโญ |
| Custom ROM | Clean Android, regular updates | Loss of MIUI (IR-blaster, Game Turbo) | โญโญโญโญโญ |
For most users of the Redmi Note 9S, the best option with patched boot is:
- Download the original boot.img for your MIUI version with Xiaomi Firmware Updater.
- Install Magisk Manager (the latest version is here).
- In Magisk, select Install โ Select and Patch a File and select boot.img.
- Squeeze the result. magisk_patched.img Fastboot: Fastboot Flash boot magisk_patched.img fastboot reboot
๐ก
If the phone boots to bootloop after you have patched boot, try disabling the forced encryption. Use the format data โ yes command in TWRP before you run it.
Installation of Magisk and Root Rights Check
After a successful firmware magisk_patched.img:
- Install. APK-Magisk Manager file (unless previously installed).
- Open the app and wait for the message "Magisk is installed".
- Check SafetyNet status in Check SafetyNet. If you show FAIL on ctsProfile, install Universal SafetyNet Fix via Magisk.
To check the root rights, use:
- ๐ฑ Termux with the su command (to be requested by Magisk).
- ๐ Root Checker app from Google Play.
- ๐ ๏ธ Any application that requires root (e.g. Titanium Backup).
โ ๏ธ Attention: On the Redmi Note 9S s MIUI 15+ Magisk may be in conflict with miui_optimization. If the phone overheats or discharges quickly, turn off optimization through ADB: adb shell settings put global miui_optimization_disabled 1
What if Magisk can't see the root?
Solving Typical Problems on the Redmi Note 9S
Even with the exact instructions, owners of the Redmi Note 9S face specific errors:
| Mistake. | Reason. | Decision |
|---|---|---|
| Fastboot: FAILED (remote:'Flashing is not allowed') | Unlocked bootloader or account not tied | Repeat the unlocking procedure with the Mi Unlock Tool |
| Invalid sparse file format at header magic | The file is damaged. boot.img or TWRP | Download the image again, check the checksum |
| The phone does not turn on after the firmware | Incompatible version of MIUI or interrupted process | Run the full ROM through the Mi Flash Tool in EDL mode |
| Magisk: Installation failed | Place taken in /boot section | Use Magisk Delta with compression option |
If after receiving the root stopped working:
- ๐ฎ Game Turbo: Install the module MIUI Game Turbo Enabler.
- ๐ท 48 MP camera: run a modified libmmcamera.
- ๐ Dolby Atmos: activate via Build.prop Editor (add the line persist.dolby.status)=1).
๐ก
On the Redmi Note 9S with MIUI 15+, after receiving the root, be sure to turn off automatic system updates in Settings โ About Phone โ Update MIUI. Update "over the air" will lead to loss of root rights and possible bootloop!
How to hide the root from banking applications
Many applications (Sberbank, Tinkoff, Google Pay) block work on devices with root rights.
- Install the MagiskHide Props Config module.
- In Magisk settings, activate MagiskHide and add apps to the list.
- For Google Pay, additionally swipe the SafetyNet Fix module and restart.
- Check status via Termux: su getprop ro.boot.verifiedbootstate Must return green.
If the banking application does not work:
- ๐ Rename the application package via App Cloner.
- ๐ก๏ธ Use Island (Sandbox) to isolate the app.
- ๐ฑ Install an alternative client (e.g. Sberbank Lite via the APK).
โ ๏ธ Attention: On the Redmi Note 9S Android 12+ MagiskHide is unstable because of Zygote hardening. If the detects root app, try rolling back to Magisk 25.2 or using Shamiko instead of MagiskHide.
Alternative methods: without unlocking the loader
If unlocking via Mi Unlock Tool is not available (for example, due to the error "This device is locked"), consider the temporary workarounds:
- ๐ ADB Root: on some firmware MIUI 13 can be obtained temporary root through: adb shell su (only working until reboot).
- ๐ฆ Shizuku: Allows you to manage systems API without full root (required) ADB).
- ๐ ๏ธ Local Terminal: some commands (e.g. pm grant) run without a root on the MIUI.
These methods give limited access and are only suitable for:
- Changes to build.prop settings.
- Delete system applications via pm uninstall -k --user 0.
- Run scripts in /data/local/tmp.