How to unlock Xiaomi phone if you forget the password from Mi Account and MIUI

When a Xiaomi smartphone is blocked by requiring you to enter a password for your Mi Account after a reset, it is one of the most stressful for the owner: Anti-Theft, a security mechanism designed to prevent unauthorized users from using the stolen device. However, if you forget the data to log in to your account, the security system becomes an insurmountable barrier that blocks access to all functions of the gadget.

It is important to understand that modern versions of MIUI firmware (especially versions 12, 13, 14 and later) have a high level of protection that cannot be avoided by simply reflashing or rebooting. Server-based device binding to an account means that without authorization, the phone will remain a “brick” with the functionality of a conventional calculator.

Before you take action, you need to understand the risks. Any manipulation of system partitions or attempt to bypass security can lead to complete loss of data or lock the device over IMEI. So every step must be done consciously. Below are methods that range from the simplest and safest to more complex technical solutions that require a PC and specialized software.

Mi Cloud and Anti-Theft

The Find Device feature in the Xiaomi ecosystem works at a deep level of integration with the operating system. When you enter your Mi Account for the first time, a unique device identifier is tied to the company's servers. If you have a forced Hard Reset via the Recovery menu or keyboard combination, the next boot, the system requests proof of ownership.

The server check happens when you connect to the Internet. Even if you reinstall the firmware through Fastboot, the first time you start, the device will send a request to the activation server. If the database has an active binding, the lock screen will not disappear. It's not a bug, it's a feature that you can't just turn off without deleting the record from the database or entering the correct credentials.

There is a misconception that older versions of MIUI (before version 9) could easily be circumvented through certain vulnerabilities, but today such security holes are almost closed. The only working option for older models is sometimes to change the region or use specific versions of firmware, but this requires deep knowledge and does not guarantee the result.

Official Recovery Method through Mi Account

The most reliable and secure method is to restore access to your account by standard means. If you have access to the phone number or email to which your account was registered, the problem is solved in 5-10 minutes. You do not need computers or complex programs, any device with Internet access is enough.

Go to the official portal id.mi.com or account.xiaomi.com. In the login form, select the option "Forgot password." The system will offer several options for verifying your identity: a code from the SMS, a backup email or an answer to a secret question if it was set in advance.

• 📱 SMS confirmation: The fastest way is if you have a SIM card in your hand.
• 📧 Email Verification: Suitable if your phone is lost but your mail is available from another device.
• 🔐 Two-factor authentication: If enabled, code from an authenticator application or trusted device will be required.

💡

If the phone number associated with your account is no longer valid, try to restore the SIM card from the carrier, which is often faster than going through the account recovery process through technical support with documents.

Once you've successfully changed your password, go back to your locked phone, connect to Wi-Fi and enter new data, and if your device writes "False Password" right after you type in, wait 24 hours, this is brute-force password protection, and in a day, the lock will be removed, and the login will be successful.

Use the "Find Device" function for remote reset

If you remember your account password, but your phone is locked in a strange way or it's bugging your interface, you can use a cloud service to manage your device. Find Device not only allows you to track your location, but also manage your lock, and it only works if you have Internet and geolocation enabled on your phone.

Log in to i.mi.com from a computer or other smartphone. Sign in to your Mi Account. Select a locked gadget from your device list. You'll have a few actions: play a sound, lock the screen, or clear the data.

A remote cleaning operation is like a Hard Reset, and once it's done, the phone will reboot, because the reset was initiated by the owner through an authorized cloud login, the next time you boot, the system may not ask for the password again, or it will ask for it to be confirmed, but you already know it. This is a standard unlock scenario.

Reset via Recovery Mode and Activation Nuances

If access to an account is completely lost, users often resort to a full reset via the Recovery menu.This erases all user data, including lock screen passwords, but, as mentioned earlier, does not remove the Mi Account binding.

Most Xiaomi and Redmi models need to press the Volume Up and Power button at the same time, hold them until the Mi logo or Recovery menu appears. In some new models without a volume button (for example, some tablets or specific smartphones), you can log in via a PC connection when one of the volume buttons is pressed.

In the Recovery menu, the navigation is done with volume buttons (up/down), and the choice is confirmed by the power button. You need to select a language (usually English), then go to Wipe Data -> Wipe All Data -> Confirm.

⚠️ Warning: Once you run Hard Reset, your device will require you to connect to Wi-Fi and enter a password from your Mi Account that was previously set. If you don’t plan on re-accessing your account, this method will lead you to an activation screen that can’t be accessed without your data.

There is a myth about "secret combinations" or special codes in the engineering menu that disable account verification. In modern versions of MIUI, such codes do not exist, and trying to find them on the Internet often leads to downloads of viruses or paid shell programs.

Software Methods and Work with Fastboot

For advanced users, there is a Fastboot mode that allows you to interact with the bootloader at a low level. Connecting in this mode (pressing the Volume Down + Power button) allows you to reflash the device through the PC. However, the standard firmware (Global Stable) when installed will also check the activation status.

Some enthusiasts use Unlocked Bootloader to install customized backups (TWRPs) and firmware. In theory, this gives access to a file system where you can try to delete account configuration files. However, in MIUI 12/13/14, the partitions with account data are often encrypted or are in a secure area that is not accessible for easy deletion.

💡

Unlocking the bootloader is officially only possible after waiting 168 hours (7 days) from the moment the account is linked to the device.

Using third-party software like the Mi Flash Tool in Clear All mode will also not help bypass locking if the bootloader is locked, and even trying to reflash the device with the bootloader locked can lead to an error and the need to carry the phone to the service center for soldering memory chips.

Contacting the service center and proof of ownership

If none of the software methods worked, the only legal way is to contact an authorized Xiaomi service center, which has access to internal diagnostic tools and can remove the lock, but only if you confirm ownership.

To do this, you will need an original purchase check (a sales receipt, invoice) and a box from the device that shows the IMEI/S/N code. These data must match the data in the service database. Without a check, unlocking is usually impossible, since the service cannot guarantee that the phone is not stolen.

⚠️ Warning: Buying a handheld device without a check or a box makes things much more difficult, and the service center has every right to refuse service to avoid the use of stolen items.

The procedure in the service takes from 1 to 14 days. The device is sent for inspection, IMEI is checked with the databases of operators and manufacturers. If everything is clean, the lock is removed remotely or the device is reflashed with certified software. This is a paid service if the warranty case is not confirmed (and the forgotten password is not a warranty case).

Frequently Asked Questions (FAQ)