Root rights to Xiaomi: a complete analysis with unlocking the bootloader and installing Magisk

Getting root rights on Xiaomi smartphones is a process that opens up access to hidden system capabilities, but requires accuracy and understanding of risks. In 2026, with the release of HyperOS and updated versions of MIUI 14/15, the algorithm changed: the manufacturer tightened control over unlocking the bootloader, and some models (for example, Xiaomi 14 Ultra or Redmi Note 13 Pro+) now require additional steps to bypass the protection of Anti-Rollback.

This article will not just list the steps, but will explain why each step is important, what pitfalls lie ahead (such as blocking a Mi Account when you do something wrong), and how to avoid common mistakes. We will discuss two main methods: the official (via the Mi Unlock Tool) and the alternative (for devices with a locked bootloader), and we will also detail the installation of Magisk, the most reliable tool for managing root rights in 2026.

⚠️ Critical warning: Once the bootloader is unlocked, the Xiaomi smartphone automatically resets to factory settings. All data (photos, contacts, messages) will be irretrievably deleted unless you back up in advance.

1.Preparation of the device: what to do before unlocking

Before you start unlocking, make sure that your smartphone meets the key requirements. Xiaomi has introduced strict restrictions: for example, models on HyperOS (for example, Xiaomi 13T or POCO F5) require the binding of Mi Account account to the device at least 7 days before the procedure, this rule has been in force since 2023 and is aimed at combating device theft.

Also check:

🔋 Battery charge at least 60 percent. Unlocking can take up to 30 minutes, and suddenly shutting down will result in a brick").
📱 Version. MIUI/HyperOS. Outdated firmware (e.g, MIUI 12 on the Redmi Note 9) You may not support current versions of the Mi Unlock Tool. → The phone. → Updating the system.
🔑 bootloader status: You can find it by fastboot oem device-info in the terminal. If Device unlocked: false is the answer, the bootloader is locked.
🛠️ Availability of a Windows PC 10/11 (Mi Unlock Tool has no official version macOS/Linux). Xiaomi drivers will also be needed. USB Drivers and ADB/Fastboot.

Some smartphones (such as the Xiaomi Mi A3 on Android One) have unique limitations, and flagships of the Xiaomi 12/13/14 series may require additional authorization through the service center when unlocked.

Link Mi Account to your device (at least 7 days ago)

Make a backup copy of the data (photos, contacts, messages)

Install Xiaomi USB and ADB/Fastboot drivers on PC

Charge your phone to 60% or more

Check the version. MIUI/HyperOS and update if necessary-->

2 Unlock the bootloader through the Mi Unlock Tool

The official way to unlock is to use Xiaomi’s Mi Unlock Tool, which consists of three steps: account binding, pending permission, and directly unlocking. Importantly, Xiaomi has increased the resolution wait time from 72 hours to 168 hours (7 days) for new accounts since 2026, a rule that does not apply to devices purchased before 2023.

Step-by-step:

Activate Developer Mode: Go to Settings → About Phone and 7 times click on MIUI Version. Then go back to Settings → Additional → For Developers and turn on USB Debugging and OEM Unlock.
Connect the phone to the PC, confirm the debugging permission on the smartphone screen.
Download Mi Unlock Tool from the official website (the version should match your firmware). Launch the utility and log in under the same Mi Account that is linked to the phone.
The utility will suggest linking the device to your account, then starting the 168 hours countdown, then re-starting the Mi Unlock Tool and pressing Unlock.

⚠️ If the utility gives you an error "Couldn't unlock. Please add your account in" MIUI", Solution: Reboot your phone, check your Internet connection, and try again in 24 hours.

What if the Mi Unlock Tool can’t see the device?

1. Check if drivers are installed ADB (In Device Manager, the phone should appear as “Android Bootloader Interface.” 2. USB-cable (preferably original from Xiaomi). 3. Disable the antivirus - it can block the utility. 4. Launch Mi Unlock Tool on behalf of the administrator. 5. If nothing helps, use an alternative method of unlocking through the EDL (see section 3).

Mistake in Mi Unlock Tool	Reason.	Decision
Couldn’t verify device	The device is not tied to the Mi Account	Link your account to your phone and wait 168 hours
Current account is different from the account info on the device	Authorized under another account	log out of all accounts on PC and phone, log in again
Device isn’t supported	The model does not support unlocking	Use alternative methods (EDL, exploit)
Network error	Problems with connecting to Xiaomi servers	Try it later or use a VPN (China region)

Alternative Unlocking Methods (EDL, exploit)

If the Mi Unlock Tool refuses to work (for example, for the POCO X5 Pro or Redmi K60 models with HyperOS), alternative methods can be used.

🔧 EDL-Emergency Download Mode - allows you to flash the bootloader bypassing official restrictions. Requires an authorized Xiaomi account with developer rights (you can buy on the forums) and the utility Mi Flash Pro.
🐞 Exploit for bypassing waiting – some vulnerabilities in firmware MIUI 14 lets you unlock the bootloader without a 168-hour wait. For example, exploit Doodle for Redmi Note 11.
🔄 Downgrade firmware - installing an old version MIUI (For example, from 14 to 13), where unlocking is easier and then updating back.

⚠️ Attention: Method EDL If you do not do it correctly, the phone can turn into a hard brick (not even in fastboot mode), use it only if you are confident in your skills or under the guidance of an experienced user.

The exploit methods will require:

Find a relevant exploit for your model (e.g., on the XDA Developers or 4PDA forum).
Install ADB and execute a command to activate the vulnerability (example for Redmi Note 10 Pro):

adb shell


su -c "echo 1 > /data/.doodle"

Reboot your phone to fastboot and try to unlock again via the Mi Unlock Tool.

Official (Mi Unlock Tool)

EDL-regime

Exploit to bypass waiting

Downgrade firmware

I haven't decided yet.-->

4.Installation of Magisk: obtaining root rights

Once the bootloader is successfully unlocked, you can start installing Magisk, the most popular root rights management tool in 2026. Magisk allows you to hide root from applications (such as banking or Pokémon GO), modularly expand the functionality of the system and update the firmware without losing root.

Installation steps:

Download the latest version of Magisk from GitHub (Magisk-v26.4.zip or later).
Download the firmware for your model from the Xiaomi Firmware Updater website. Importantly, the firmware version should match the current one on your phone (check in Settings → About Phone → MIUI version).
Remove boot.img from the firmware (use the archiver or Payload Dumper utility for.ozip files).
Move it. boot.img by telephone and by Magisk (established as APK) Choose Install → Select and Patch a File. After processing, the file will be saved as magisk_patched.img.
Connect your phone to your PC in fastboot mode and run the patch boot: fastboot flash boot magisk_patched.img fastboot reboot

After the reboot, the Magisk Manager app will appear on the phone. Check the root status with the command in the terminal:

su

If the input (#) invitation appears, root is installed successfully.

💡

To hide root from banking applications, activate MagiskHide (newer versions include Zygisk + DenyList) and blacklist the apps.

5. Typical problems after rooting and their solution

Even after successful Magisk installation, users are faced with errors, and here are the most common ways to fix them:

🚫 Bootloop (cyclic reboot) – occurs when patched boot.img Solution: Implement the original boot.img via fastboot and repeat the process with the correct version.
🔒 SafetyNet doesn't pass, which means root is detected by security systems (e.g. Google Pay doesn't work).Solution: In Magisk, install Universal SafetyNet Fix and MagiskHide Props Config modules.
📱 No network after root is a common problem on Xiaomi with HyperOS. Solution: flash the module IMEI Repair or restore backup copy modemst1/modemst2 sectional /dev/block/bootdevice/by-name.
🔋 Fast battery discharge - root can activate background processes. Solution: check the activity of modules in Magisk and turn off unnecessary ones.

⚠️ Note: On HyperOS devices (e.g. Xiaomi) 13T Pro) after system updates through OTA root may disappear. To avoid this, before the update:

Create a backup copy of boot.img current firmware.
Once updated, repatch the new boot.img through Magisk.
Run it through fastboot.

💡

Xiaomi with HyperOS cannot install Magisk in the section init_boot — This will lead to a bootloop. boot.img!

6. How to hide root from apps (MagiskHide, Zygisk)

Many apps (banking, gaming, streaming) block access when root is detected, and in 2026 Magisk offers two mechanisms for cloaking:

🔍 MagiskHide (Old but Working) – Hiding root from specific applications. → MagiskHide).
🛡️ Zygisk + DenyList is a more reliable method integrated into the kernel, which allows you to hide not only root, but also changes in the kernel. /system.

Instructions for setting up Zygisk:

In Magisk, go to Settings → Enable Zygisk.
Install Universal SafetyNet Fix via Magisk → Modules.
Add apps to DenyList (e.g. Sberbank Online, Google Pay).
Reset the device.

To check the health, use the YASNAC (Yet Another SafetyNet Attestation Checker) application. If both tests (ctsProfile and basicIntegrity) are passed, the cloaking works.

7 Security: root risks and how to minimize them

Root rights give you complete control of the system, but also open the door to threats.

🕵️ Malware - with root viruses can access system files. Solution: install applications only from trusted sources and use Magisk to control rights.
🔓 Data Leakage – Some root apps may share personal information Solution: Regularly check permissions in Settings → Annexes.
🚨 Warranty Lock – Xiaomi may refuse warranty repairs if an unlocked bootloader is detected.Solution: return the phone to its original state before you enter the service (see Section 8).
💥 Unstable operation – incorrect Magisk modules can cause failures.Solution: install only proven modules (for example, from the Magisk Modules Repo repository).

⚠️ Note: On HyperOS devices, some Magisk modules (for example, to change system fonts) can lead to soft brick.

For additional protection:

Use AFWall+ to monitor network traffic.
Install XPrivacyLua to restrict access to personal data.
Update your Magisk and modules regularly.

8 How to return the phone to its original state (unroot)

If you want to sell or rent a phone, you need to remove the root and lock the bootloader, and there are three steps to the process.

Remove Magisk: In the Magisk app, select Uninstall → Complete Uninstall.This will remove all modules and restore the original boot.img.
Lock bootloader: go to fastboot and execute the command: fastboot oem lock ⚠️ This will result in the reset of all data!
Reset to factory settings: fastboot run: fastboot erase userdata fastboot erase cache fastboot reboot

After this action, the phone will return to the “out of the box” state, and the bootloader status in the Mi Unlock Tool will be Locked. However, Xiaomi can keep the unlock information in its database — this does not affect the operation, but can be noticeable when diagnosing in the service center.

💡

If the phone does not turn on after locking the bootloader, run the full firmware through the Mi Flash Tool in clean all and lock mode.

FAQ: Frequent questions about root on Xiaomi

❓ Can I get root without unlocking the bootloader?

No. On all modern Xiaomi devices (starting with MIUI 12), unlocking the bootloader is a prerequisite for installing Magisk or SuperSU. Alternative methods (for example, through vulnerabilities in the kernel) are extremely unreliable and work only on older models (until 2019 release).

❓ Why Mi Unlock Tool Should Wait 168 Hours?

This is a security measure from Xiaomi, introduced in 2023, which used to be 72 hours, but because of the increase in the number of smartphone thefts, the waiting period has been extended, and you can not avoid it officially, only through exploit (if it exists for your model) or informal services (the risk of blocking an account).

❓ Does Magisk work on HyperOS?

Yes, but with reservations. HyperOS uses a new boot mechanism init_boot, This section should be patched (not the one). boot.img). For HyperOS models (e.g. Xiaomi) 14) Use special versions of Magisk (such as Magisk Delta) or follow the instructions on the Magisk Delta. 4PDA for your model.

❓ Can I update the firmware with root?

Yes, but with caution. When you upgrade through OTA root, it usually disappears. To save it: Download the full service pack (.zip) from Xiaomi Firmware Updater. Remove the new boot.img. Patchit it through Magisk and run it in fastboot. Install the update manually through Settings → System Update → Select a file. On HyperOS, this method may not work, in which case you will have to re-install Magisk after the update.

❓ How to check if the bootloader is unlocked?

There are three ways: Turn on your phone in fastboot mode (press Power + Vol− when the phone is off). If the bottom of the screen says UNLOCKED, the bootloader is unlocked. In the terminal, execute the command: adb reboot bootloader fastboot oem device-info If Device bootloaded: true, the bootloader is unlocked. In Mi Unlock Tool, the device status will appear as Unlocked.