How to get root rights to Xiaomi Redmi Note 9S: a safe way to unlock the bootloader

Why do you need root rights to the Redmi Note 9S?

Getting root rights to the Xiaomi Redmi Note 9S (codename curtana) opens up hidden Android features, but it takes care. With root, you can uninstall system applications, configure the kernel, install modified firmware, or use specialized utilities like Greenify to optimize the battery. However, the process comes with risks ranging from loss of warranty to device blinking when errors occur.

It is important to understand that the Redmi Note 9S based on the Qualcomm Snapdragon 720G has a secure bootloader that must be unlocked through the official Mi Unlock Tool. Without this step, installing a custom recovery (TWRP) and obtaining root will not be possible. In this article, current methods for 2026, taking into account changes in Xiaomi policy and model features.

Preparation of the device: what to do before unlocking

Before you start the process, make sure your Redmi Note 9S meets the following requirements:

  • πŸ“± Android version: MIUI 12/13/14 (Android-based 10/11/12). Check in Settings β†’ The phone.
  • πŸ”‹ Battery charge: at least 60% to avoid shutdown during the process.
  • πŸ” Mi Account: Linked to the device (required to unlock the bootloader).
  • πŸ’» Computer: Windows 7/10/11 with Windows Defender disabled and Qualcomm drivers installed.

Back up all data through Settings β†’ Additional β†’ Backup or Mi PC Suite. Unlocking the bootloader erases all data on the device without being restored through standard means. Also download the necessary files:

ComponentReferenceVersion.
Mi Unlock ToolOfficial websiteThe Last (2026)
TWRP for curtanaTWRP page3.7.0+
MagiskGitHub26.4 or later
ADB & FastbootAndroid Developers34.0.5

⚠️ Note: If your device was purchased in China (suffix version) CN In the model, unlocking the bootloader can be blocked at the firmware level. Check the region in Settings β†’ The phone. β†’ Version. MIUI.

πŸ“Š You have already tried to unlock the bootloader on Xiaomi?
Yes, successfully.
Yeah, but there were mistakes.
No, it's my first time.
I plan, but I'm afraid.

Unlock the bootloader with the Mi Unlock Tool

The official way to unlock the bootloader on the Redmi Note 9S requires confirmation via your Mi Account and waiting 7-14 days (depending on Xiaomi policy).

  1. Activate Developer Mode: Go to Settings β†’ About Phone and click on MIUI Version 7 times.
  2. Enable USB Debugging and OEM Unlock in Settings β†’ Additional β†’ For Developers.
  3. Connect the phone to the PC, confirm the debugging permission on the device screen.
  4. Launch the Mi Unlock Tool, log in to your Mi Account and follow the instructions of the program. During the device check phase, you will receive a wait notice (usually 168 hours).

If the tool is running a "Couldn't unlock" or "Device not supported" error, check:

  • πŸ”Œ Cable USB: Use the original Xiaomi cable (not use it) USB 3.0!).
  • πŸ–₯️ Port port USB: Try the port USB 2.0 on the back of the PC.
  • πŸ“± Version MIUI: Update your firmware to the latest stable version.

⚠️ Note: Once the bootloader is unlocked, the device will be reset to factory settings. If you used the Find My Device feature, you must disable it in advance in the Mi Account settings.

β˜‘οΈ Preparation for unlocking the loader

Done: 0 / 5

Install TWRP and get root rights through Magisk

Once unlocked, you can start installing a custom TWRP recavator and getting root through Magisk, which is considered the most reliable method for the Redmi Note 9S.

Step 1: Installation of TWRP

Downloaded file twrp-3.7.0-curtana.img rename recovery.img and put it in a folder with the platform-tools. CMD:

adb reboot bootloader


fastboot flash recovery recovery.img




fastboot reboot recovery

The device will reboot to TWRP. If the screen is black for more than 5 minutes, repeat the process with another file. TWRP (Maybe your version. MIUI requires special assembly).

Step 2: Magisk firmware

In TWRP, do the following:

  1. Click Install β†’ select the file Magisk-v26.4.zip.
  2. Swipe to confirm the installation.
  3. After completion, press Reboot System.

The first download can take up to 10 minutes. Once you start, check for root through the Magisk Manager app (should appear in the app menu).

What to do if TWRP does not start?
If the device is loaded into a standard MIUI reboot after the fastboot reboot recovery command, then the TWRP firmware has been overwritten by the stock one. Solution: After the TWRP firmware is installed, immediately execute the command fastboot reboot recovery without rebooting to the system. In some cases, you need to disable the signature verification in TWRP via Settings β†’ Disable DM-Verity.

Solving common problems

The process of rooting on the Redmi Note 9S is often accompanied by errors, and the following are typical scenarios and ways to fix them:

Problem.Reason.Decision
The β€œAnti-Rollback” error in the firmwareTrying to flash the old version of MIUIUpdate your firmware to the latest via fastboot update
TWRP asks for password when downloadingEncryption of data in MIUIFormat /data to TWRP (all data will be deleted!)
Magisk doesn't define rootIncorrect installation or module conflictReinstall Magisk via TWRP, disable all modules
The device is stuck on the MI logoBoot section damagedSwitch to boot.img via fastboot

If banking applications (e.g. SberBank Online) have stopped working after installing Magisk, use the MagiskHide Props Config module to mask root.

  1. Install the module through Magisk Manager.
  2. Reset the device.
  3. In the module settings, select the Edit device fingerprint and specify the rootless model (e.g., Redmi Note 10).

πŸ’‘

If navigation gestures stop working after getting root, disable the Magisk modules associated with the modification of the system UI. Often the problem is solved by installing the Fluid Navigation Gestures module.

Alternative methods of obtaining root

If the standard method with TWRP and Magisk is not suitable, consider alternatives:

  • πŸ”§ Patched Boot Image: Modified firmware boot.img via fastboot without installation TWRP. Suitable for temporary root.
  • πŸ“¦ Custom firmware: Install LineageOS or Pixel Experience with pre-built root.
  • πŸ”„ EDL Mode: Emergency mode for recovery of "bricks" Requires an authorized Xiaomi account and a special cable.

For the Patched Boot method:

  1. Download the stock firmware for your version of MIUI from the Xiaomi Firmware Updater website.
  2. Remove boot.img from the firmware archive.
  3. File processing via Magisk Manager (Install β†’ Select and Patch a File).
  4. Fastboot: Fastboot Flash boot magisk_patched.img

⚠️ Attention: Use EDL Mode to unlock the bootloader on devices with Snapdragon 720G This may result in a hardware lock of the module. IMEI. This method is recommended only in extreme cases.

Risks and how to minimize them

Getting the root rights to the Redmi Note 9S entails several critical risks:

  • 🚨 Loss of warranty: Xiaomi cancels warranty if unlocked bootloader is detected.
  • πŸ›‘οΈ Security vulnerabilities: Root opens access to system files for malware.
  • πŸ”„ Unstable operation: Magisk module conflicts can cause random rebukes.
  • πŸ“΅ Lockdown OTA-Updates: System updates will have to be installed manually.

To reduce the risks:

  • πŸ”’ Use MagiskHide to hide root from apps.
  • πŸ“₯ Update Magisk and modules regularly through Magisk Manager.
  • πŸ”„ Backup boot and recovery partitions before experimenting.
  • πŸ› οΈ Install only verified modules from the official Magisk repository.

The Redmi Note 9S with MIUI 14+ firmware may require a pullback on MIUI 12 to successfully unlock the bootloader due to Xiaomi's tightening security policy. Before rolling back, make sure the firmware version is compatible with your region (Global/EU/CN).

πŸ’‘

Even after successful rooting, avoid modifications to /system and /vendor system partitions, which are common reasons for "brick" on devices with Dynamic Partitions (introduced in Android 10+).

FAQ: Frequent root questions on Redmi Note 9S

Can I get root without unlocking the bootloader?
No. On the Redmi Note 9S (as with all modern Xiaomi devices), unlocking the bootloader is mandatory for installing a customized backup or modified boot.img. Alternative methods like exploits (such as DirtyCOW) do not work on current versions of MIUI.
How to return the device to its original state?
For a full return to stock firmware: Download the latest Fastboot firmware for your model from the official website. Unpack the archive and launch the script flash_all.bat (Windows or flash_all.sh (Linux/Mac). Wait until the process is complete (the device will be completely reset) and then the bootloader will remain unlocked, but all data and modifications will be deleted.
Why does Magisk not pass SafetyNet?
Since 2023, Google SafetyNet has tightened checks on devices with unlocked bootloaders. To get around the restrictions: Install Universal SafetyNet Fix module via Magisk. Enable MagiskHide in Magisk settings. Reboot your device and check status through the SafetyNet Test app. If the problem persists, try changing the device fingerprint through the MagiskHide Props Config module.
Can I update my MIUI after I get root?
Yes, but only manually. OTA-Update will cause root loss.To update: Download the full service pack (.zip) for your model.Reboot to TWRP And then you can run the file through Install, and after you update, you can re-sweep Magisk (if the root is gone β€” TWRP will cope with the installation, but the risk of errors is higher than with a stock update.
How to check if the bootloader is unlocked?
Turn off the device and press Power + Volume down to enter Fastboot Mode. If the bottom of the screen shows "Unlocked" with an open lock, the bootloader is unlocked. You can also check the command: fastboot oem device-info Look for the lines Device unlocked: true.