How to put TWRP on Xiaomi without unlocking the bootloader: circumventing restrictions and hidden risks

Installing a custom TWRP recavator on Xiaomi smartphones traditionally requires unlocking the bootloader, a procedure that takes up to 720 hours to wait and carries the risk of loss of warranty. However, there is a lot of discussion online about β€œalternative” methods to circumvent this restriction, promising to install TWRP without unlocking. How effective are they in 2026? Is it worth the risk?

In this article, we will discuss:

  • πŸ” Why Xiaomi is blocking the installation TWRP without formal procedure – technical and legal reasons.
  • πŸ› οΈ Temporary loopholes that sometimes allow recovers to be flashed on a locked bootloader (and why they stop working).
  • ⚠️ The real consequences of such manipulations: from bricks to loss IMEI.
  • βš™οΈ Legal alternatives for those who want custom software without risk.

Beginning in 2021, Xiaomi has closed most of the vulnerabilities that have bypassed bootloader locks on new models (Redmi Note 12, Poco X5, Mi 13 and later), and the methods that worked on older devices (such as the Redmi Note 7 or Mi A2) are either irrelevant or require specific conditions.

Why Xiaomi is blocking TWRP installation without unlocking it

Xiaomi has imposed strict restrictions on the modification of the bootloader for a reason.

  • πŸ”’ Security of user data: Castomic Recovery bypass protection FBE (File-Based Encryption, potentially opening up access to personal data when a device is stolen.
  • πŸ“± License compliance: Many firmware components (e.g. Widevine) L1 for streaming in high resolution) require certification, which is removed when modifying the system.
  • πŸ’° Warranty Policy: Any changes to the bootloader automatically void the warranty, as stated in the user agreement.
  • πŸ›‘οΈ Fraud protection: Devices with unlocked bootloaders are easier to fake IMEI or bypass the ban by serial number (for example, on stolen phones).

Since 2019, Xiaomi has been using the Anti-Rollback Protection (ARB) mechanism, which blocks rollbacks on older firmware versions, meaning that even if you manage to flash TWRP on a locked bootloader, the device can turn into a brick without recovery when the first error occurs.

⚠️ Note: On devices with Qualcomm Snapdragon processors (most Xiaomi models), an attempt to flash non-castom Recovery through fastboot on a locked bootloader will lead to an error FAILED (remote: 'Flashing is not allowed in Lock State'. It is software impossible to circumvent this, only by hardware methods (e.g., via a computer system). EDL, This requires an authorized Xiaomi account).

Myths and Reality: Methods of Installing TWRP Without Unlocking

You can find dozens of TWRP installation guides online without unlocking, and let's look at what works and what doesn't.

MethodDoes it work in 2026?Risks.For which models?
Exploit DirtyCOW (CVE-2016-5195)❌ No.It doesn’t work on Android 8+Redmi 3S/4A (2016–2017)
Firmware through ADB sideload in the drainage Recovery⚠️ Partially.Requires a signed.zip with TWRP, is blocked on new firmwarePoco F1, Mi 8 (up to MIUI 12)
Using a vulnerability in fastboot oem❌ No.Closed in 2020Redmi Note 5/6 Pro
Firmware via EDL (9008 mode)βœ… Yes.Requires an authorized Xiaomi account or paid servicesAll models, but only legal for service centers
A temporary bug in MIUI (e.g., a signature verification error)⚠️ Sometimes.Corrected in the following updatesDepends on the firmware version.

The only way that's working is through EDL (Emergency Download Mode).

  • πŸ”‘ An authorized Xiaomi account is required (available only to service centers and partners).
  • πŸ’Έ The alternative is paid services like Mi Flash Pro or Firehose, but they are often blocked.
  • ⚠️ Risk of hard-brick (irreparable damage) in case of firmware error.
πŸ“Š You tried to install TWRP on Xiaomi without unlocking?
Yeah, it worked.
Yeah, but it didn't work.
No, I'm afraid to take risks.
What's TWRP?

Time loopholes: when you can flash TWRP without unlocking

In rare cases, the installation of TWRP is possible without official unlocking, but only under strict conditions:

  1. A device running old firmware (e.g. MIUI 10 or lower) with known vulnerabilities, relevant for 2018 and older models (Redmi Note 5, Mi 6).
  2. Having root rights obtained through exploits (like Magisk on a patched bootloader) but root itself already requires unlocking on most devices.
  3. A temporary bug in the signature verification in the stock Recovery. For example, on some versions of MIUI 12 for Poco X3 NFC, you could flash TWRP through ADB sideload if you rename the file to update.zip.

Example of working method for Redmi Note 8 Pro (only on firmware up to MIUI 12.0.3):

  1. Download a special version of TWRP with Xiaomi’s signature (e.g., from OrangeFox).
  2. Rename the file to recovery.img and place it in the root of the memory.
  3. In the stock recavator, select Install update.zip to System (yes, despite the.img extension).
  4. After the reboot, quickly clamp down Power + Vol+ to get into TWRP.

⚠️ Note: On Dynamic Partition devices (all Android 10 models)+) This method will cause data loss in the userdata section, and there is a high risk of fixation on the Mi logo (bootloop).

Backup all data (photos, contacts, messages)|Check the model and firmware version for compatibility|Download the correct version TWRP (only for your device)|Charge your phone at least to 70%|Prepare a cable and PC with ADB/Fastboot-->

Step-by-step instructions for older models (on the example of Redmi Note 7)

If your device is released before 2019 and runs on Android 9 or lower, you can try the following method.Please note: this will only work if the bootloader has not been updated through MIUI OTA after 2020.

Requirements:

  • πŸ“± Redmi Note 7 (lavender) on firmware MIUI 10 or MIUI 11 (up to version 11.0.5.0).
  • πŸ–₯️ Computer with installed ADB and Fastboot.
  • πŸ”— Downloaded official TWRP for lavender (version) 3.3.1-1220 lower).

Steps:

  1. Turn on USB Debugging in Settings β†’ About Phone β†’ MIUI version (shap 7 times, then go back to Additional Settings β†’ For Developers).
  2. Connect your phone to your PC and execute the command: adb reboot bootloader
  3. Fly TWRP via fastboot: fastboot flash recovery twrp-3.3.1-1220-lavender.img fastboot boot twrp-3.3.1-1220-lavender.img Please note: we use boot, not reboot, so that the bootloader does not overwrite the recovers.
  4. V TWRP Backup boot and recovery section immediately SD-map.
  5. Install Magisk for root rights (optional).

If after the reboot the phone is stuck on the logo, try:

  • Press Power + Vol+ to enter TWRP.
  • Restore the boot backup.
  • Swipe stock recaps back through fastboot.
What to do if your phone turns into a brick?
If the device does not turn on even in fastboot (black screen, no button response), only the firmware via EDL remains. This will require: 1. USB-A cable on USB-A (for forced transfer to 9008). 2. Mi Flash Pro or QFil. 3. An authorized Xiaomi account (or paid Firehose access) Without this, it is almost impossible to restore the phone.

Risks and Consequences: What to Expect When You Fail

Attempting to install TWRP on a locked bootloader is fraught with the following problems:

  • 🧱 Hard-brick: the device is not turned on, not detected by the PC, not responding to buttons. EDL (cost ~$20–$50 in service centers).
  • πŸ“΅ Loss of loss IMEI β€” On some models (Redmi Note 9 Pro, Poco) X3) After the firmware, the network disappears. IMEI It is impossible to unlock the loader without unlocking the loader.
  • πŸ”„ Bootloop – an endless reboot on the Mi logo. Often treated only with a complete reset.
  • πŸ”’ Blocking the Mi Account – with repeated attempts of firmware Xiaomi can block the account on suspicion of hacking.
  • πŸ“± Widevine's loss L1 β€” Netflix, Disney+ Other services will only work in 480p.

Statistics from the 4PDA and XDA Developers forums show that TWRP’s unblocked firmware is less than 10% successful, and 90% of users experience at least one of these problems.

⚠️ Note: On devices with MediaTek (e.g. Redmi) 9A, Poco C31) The chances of successful firmware are even lower because of Secure Boot's hardware protection, and trying to circumvent it software will result in a complete loss of access to the software. NAND-memory.

If you need custom recaps or root rights, but you don’t want to risk the device, consider these options:

  • πŸ”“ Official unlocking of the bootloader. Yes, it's long (up to 30 days waiting), but it's safe. Instructions: Link your Mi Account to your phone. Go to the unlock site and request permission. Download the Mi Unlock Tool and follow the instructions.

Magisk without TWRP

boot.img

fastboot

Installation of custom firmware through stock Recovery

Pixel Experience

ADB sideload

TWRP

Use of alternative Recovery

OrangeFox

PitchBlack

TWRP

If you only need individual custom firmware features (like ViPER4Android or AdAway), consider:

  • 🎡 Magisk modules – many custom firmware features are available through modules (e.g. Audio Modification Library for sound).
  • πŸ”§ ADB-commands – some settings (for example, disabling advertising in the MIUI) can be used without rut.
  • πŸ“² Alternative launchers – Nova Launcher or Lawnchair will replace the stock interface without modifying the system.

πŸ’‘

If you only need a root for backup apps, use ADB-Adb backup command – it works without unlocking the bootloader and allows you to save data of most applications (except for system systems).

FAQ: Frequent questions about TWRP without unlocking on Xiaomi

❓ Can I stitch it? TWRP Xiaomi without unlocking the bootloader in 2026?
Theoretically, yes, but only on very old models (before 2019) and under strict conditions (old firmware, no security updates) on new devices (Redmi Note 12, Poco X5, Mi 13) this is impossible without EDL or official unlock.
❓ What happens if you do it? TWRP lock-down?
The most likely thing to happen is: FAILED (remote: 'Flashing is not allowed in Lock State') in fastboot. Bootloop. Hard-brick. In rare cases (1-2%), the firmware may be successful, but after the first reboot, the stock recovery will reset TWRP.
❓ Can I recover my phone after a bad firmware? TWRP?
Depends on the type of brick: Soft-brick (bootloop, logo hanging) - often treated with the firmware of a stock Recovery through fastboot. Hard-brick (black screen, no reaction) - requires firmware through EDL (9008), which is only possible in the service center. If you do not have access to EDL, the chances of recovery are close to zero.
❓ What Xiaomi models can be flashed without unlocking?
The list is extremely limited and depends on the firmware version. In 2026, the only chances are: Redmi Note 7 (lavender) on MIUI 10/11. Poco F1 (beryllium) on firmware up to MIUI 12.0.7. Mi A2 (jasmine) - due to the features of the Android One program. On newer models (Redmi Note 10, Poco X3 Pro and later), bypassing the bootloader lock is impossible.
❓ Is it worth paying for the unlock through EDL?
If you critically need custom Recovery or firmware, then yes (~$20–$50) usually lower than: Buying a new phone after hard-brick. Losing data due to failed firmware. Time spent trying to bypass lock. EDL-Firmware: Warranty voided. Settings may reset DRM (Widevine loss L1). Re-linking of the Mi Account will be required.

πŸ’‘

If your goal is simply to remove ads in MIUI or get a root, consider officially unlocking the bootloader.