Root on Xiaomi: how to unlock the bootloader and get root rights without errors

Getting root rights on Xiaomi smartphones opens up access to hidden Android features, allows you to remove system applications, optimize performance and install custom firmware. However, the process requires prior unlocking the bootloader, which is officially supported by the company, but carries risks from loss of warranty to β€œbrick” devices. In this guide, we will discuss current methods for 2026, including changes in Xiaomi policy and circumventing new restrictions.

It is important to understand that the procedure is different for different lines: Redmi, POCO and flagship Xiaomi (for example, 13 Ultra or 14 Pro) may require different tools. We will also look at alternative ways for devices with a locked bootloader where official unlocking is not available. If you are a beginner, start by exploring the risk section to assess the feasibility of the procedure.

Preparation for unlocking the loader

Before you start unlocking, there are a few critical steps that you need to take, and ignoring them can lead to data loss or the inability to complete the process.

  • πŸ“± Backup all data (photos, contacts, messages) through Settings β†’ Google β†’ Backup or third-party utilities like Titanium Backup (requires root).
  • πŸ”‹ The battery must be at least 60% charged, and interruption of the process due to discharge can render the phone inoperable.
  • πŸ–₯️ Install drivers for your Xiaomi model on your PC. Download them from the official Mi website UI Download or Mi Flash Tool.
  • πŸ”‘ Link your Mi Account to your device. Without that, unlocking is impossible. Go to Settings. β†’ Xiaomi account β†’ Security and make sure the device is tied.

Also check if your model is officially unlocked. The list of compatible devices is regularly updated. For example, some POCO models (e.g., POCO F5) may require additional steps due to the features of the HyperOS firmware. For clarification, use the Mi Unlock Status service - enter the IMEI of the device in the appropriate field.

πŸ’‘

If your device is not identified in the Mi Unlock Tool, try switching to Global (EEA/Global) firmware via Mi Flash.

Unlock the bootloader through the Mi Unlock Tool

The most reliable way to unlock is to use the official Mi Unlock Tool, but since 2023 Xiaomi has tightened the requirements: you now have to wait 72 hours after you link your account to your device.

  1. Download the latest version of the Mi Unlock Tool from the official website (avoid third-party sources!).
  2. Launch the utility on behalf of the administrator and log in under the same Mi Account as on your phone.
  3. Turn the phone into Fastboot mode: Turn off the device, then press Volume Down + Power before the Mi Bunny logo appears.
  4. Connect your phone to your PC via the original USB Type-C cable (cheap cables can cause errors).
  5. In Mi Unlock Tool, press Unlock. If you have a waiting message, wait until the specified time (usually 72 hours).

Once successfully unlocked, the bootloader will be labeled Unlocked, and you can check this by restarting the phone in Fastboot, and the corresponding label will appear at the bottom of the screen. Importantly, unlocking resets all data on the device, including internal memory!

Is the Mi Account linked to the device?|Drivers installed ADB/Fastboot?|Battery charge >60%?|Data backup made?|Used by the original USB-cable?-->

Risks and consequences of obtaining root rights

Despite the obvious advantages (deleting the bloatware, fine-tuning the system, installing Magisk), root access has serious disadvantages:

  • ⚠️ Xiaomi officially declares that unlocking the bootloader will void warranty obligations, as well as service centers in Russia.
  • πŸ›‘οΈ Security vulnerabilities: Root access opens up potential vulnerabilities for malware, especially if modules are installed from unreliable sources.
  • πŸ”„ Problems with OTA-After the root, system updates may be installed with errors or stop working altogether.
  • πŸ’₯ The risk of a "brick": Incorrect actions (for example, installing incompatible firmware) can turn a phone into a "brick".

⚠️ Note: On HyperOS devices (e.g. Xiaomi 14, Redmi Note 13 Pro)+) The root may disrupt functions such as Mi Share or AI-Before the procedure, check the reviews of the owners of your model in the forums. 4PDA or XDA Developers.

If you use your phone for payments (like Google Pay or SberPay), please note that after a root, these services may stop working due to a SafetyNet breach.

How to get root rights after unlocking

Once the bootloader is unlocked, you can get a root using one of the following methods, and the choice depends on the device model and the firmware version:

MethodSuitable devicesPlusesCons
Magisk (patched boot.img)All models with unlocked loaderSupports SafetyNet, a modular systemRequires manual patching boot.img
SuperSU (obsolete)Older models (until 2019)Ease of installationNot updated, problems with new versions of Android
Custom Recovery (TWRP)Most of Xiaomi/Redmi/POCOInstallation convenience ZIP-fileNot all models have stable builds.

The most universal and recommended method is to use Magisk. Here is a brief instruction:

  1. Download the latest version of Magisk from GitHub.
  2. Remove boot.img from the firmware of your model (you can download from Xiaomi Firmware Updater).
  3. With Magisk Manager (or Command Prompt), patch boot.img: magisk patch boot.img.
  4. Fastboot: Fastboot Flash boot magisk_patched.img
How to check the success of the rut?
Open Magisk Manager, and if the status shows "Installed," and the Superuser app appears in the phone's settings, it's a success, and you can also type in the terminal command su, and if you have a license request, the root is activated.

Some devices require a specific approach due to the features of the hardware platform or firmware.

  • πŸ“± Xiaomi 13/14 Use Magisk Delta (the original Magisk fork) to bypass HyperOS checks. Regular Magisk may not work.
  • πŸ“± Redmi Note 12/13: Before the firmware boot.img turn off AVB 2.0 (Android Verified Boot via command: fastboot --disable-verity --disable-verification flash vbmeta vbmeta.img
  • πŸ“± POCO F5/X5: These models often require custom recovery firmware (such as PitchBlack) before installing Magisk.
  • πŸ“± Xiaomi Pad 6: On Xiaomi tablets, the root can disrupt the stylus.Recommended to use the module MiPad6 Fix for Magisk.

For Qualcomm Snapdragon devices (e.g. Redmi K60), you can use the QFil firmware utility if fastboot refuses to work. See XDA Developers for instructions and programmer files in your model themes.

Redmi Note 12/13|POCO F5/X5|Xiaomi 13/14|Xiaomi Pad 6|Another model|I don't know.-->

Common mistakes and their solutions

Even with the correct following of the instructions, problems can arise, and here are the most common mistakes and ways to fix them:

Mistake.Reason.Decision
Couldn't unlock the Mi Unlock ToolIt has not been 72 hours since the account was linked.Wait until the time is set or try another Mi Account.
The phone is not defined in fastbootLack of drivers or faulty cableInstall drivers manually through Device Manager or try another one USB-port (preferably) USB 2.0)
Invalid image when running boot.imgFile. boot.img Incompatible with the firmware versionDownload boot.img specifically for your version of MIUI/HyperOS (check in Settings β†’ About phone)
Hanging on the Mi logo after firmwareIncorrectly patched boot.img or module conflictSweep through the original boot.img through fastboot and start the process again.

⚠️ Warning: If the phone stops turning on after a bad firmware, don't panic. EDL (Emergency Download Mode) by closing the test points on the motherboard, which requires a special cable or soldering iron. 4PDA repair-themed.

If Magisk is not installed due to an error --install-module, try:

  1. Delete /data/adb folder via TWRP.
  2. Reinstall Magisk with the internet down (sometimes checks for certificates are hindered).
  3. Use an alternative build, such as Magisk Alpha.

Alternative methods without official unlocking

For devices where official unlocking is not available (such as some regional versions of Redmi for China), workarounds exist, which are more risky and can lead to locking the device, but in some cases remain the only option:

  • πŸ”“ Exploits for older versions MIUI. For example, the DirtyCOW vulnerability worked on Android devices. 6-7. For modern firmware, such methods are irrelevant.
  • πŸ› οΈ Firmware through EDL. Requires an authorized Xiaomi account (for example, from a service center) and special software like Mi Flash Pro.
  • πŸ“¦ Some builds (like LineageOS or Pixel Experience) already include root, but installing them requires an unlocked bootloader.

The most promising method for new devices is a temporary root through Magisk in RAM. It is not saved after a reboot, but allows you to perform operations that require superuser rights.

  1. Download Magisk and unpack boot.img from firmware.
  2. Launch it at the terminal:
  3. Restart the phone. The Root will be active until the next reboot.

πŸ’‘

A temporary root is the only way to access system files on devices with a locked bootloader, but it requires a repeat of the procedure after each shutdown.

What to do after obtaining root rights?

Now that you have a root, you can optimize the device. Here are some useful things to do:

  • 🧹 Uninstall system applications. Use Titanium Backup or System App Remover to remove bloatware (e.g. Mi Browser, Mi Music).
  • ⚑ Optimize performance. Install Magisk modules like Universal. GMS Doze to save battery or FDE.AI to improve multitasking.
  • πŸ”’ Privacy protection: AppOps or XPrivacyLua modules allow you to block applications from accessing personal data.
  • 🎨 Customization of the interface: Substratum or LSPosed can change themes, fonts and animations at the system level.

However, don’t get carried away with removing system components, which can lead to unstable work, for example, deleting MiuiDaemon will disrupt push notifications, and deleting MiShare will disable the fast file transfer function.

To restore the functionality of Google Pay and other banking applications after the root:

  1. Install the MagiskHide Props Config module.
  2. In Magisk settings, enable MagiskHide and add apps to the Hidden List.
  3. Restart your device and check the SafetyNet status through the SafetyNet Test app.
How to return the warranty after the rut?
Technically, it is impossible to return the warranty, but you can hide traces of the root: 1. Sweep the original firmware through Mi Flash (select clean all). 2. Close the bootloader with fastboot oem lock (this will delete all data!). 3. Make sure that the fastboot status of the bootloader shows Locked. However, the service center can check the logs or status of eMMC, so this does not give a 100% guarantee.

Frequently asked questions

Can I get a root on Xiaomi without unlocking the bootloader?
The exception is older models (until 2018) with vulnerabilities in firmware or devices for which exploits exist (for example, through DirtyCOW).
Why does Mi Unlock Tool show the Coldn't unlock error?
Most common reasons: It's been 72 hours since your Mi Account was linked to your device. USB-cable USB 3.0 (try it out) USB The device is not officially supported (check on Xiaomi website). Mi Unlock Tool version is outdated (download the latest from the official website). If the error persists, try using another Mi Account or wait for the utility update.
How to update the firmware after receiving the root?
Update through OTA (Over the air) can cause root loss or device freeze.Recommended method: Download the full firmware package (.tgz) for your model with Xiaomi Firmware Updater. boot.img from the archive and patch it through Magisk. TWRP or fastboot, replacing the original boot.img After the update, you may need to re-install Magisk.
Will NFC and contactless payment work after the root?
The default is not, as root violates SafetyNet, and banking applications (such as Google Pay or SberBank Online) require a certified environment. However, the problem can be solved: Install MagiskHide Props Config and configure root hiding for banking applications. Use alternative payment systems that do not check SafetyNet (such as Mir Pay or SamPay). Google Pay can help the Universal SafetyNet Fix + MagiskHide module. Note that some banks (such as Tinkoff) block access when you find the root regardless of SafetyNet.
Can I go back and close the bootloader?
Yes, but with a full data reset. To do this: Sweep the original firmware through Mi Flash (select clean all option). In fastboot, execute the command: fastboot oem lock Reboot the device. The bootloader will be locked, but all data will be deleted. Please note that some service centers can detect the fact of unlocking from the eMMC logs, even if the bootloader is blocked again.