How to get a root right on Xiaomi: a complete guide to unlock the bootloader

Getting root rights on Xiaomi smartphones opens up access to hidden Android features, but requires caution. The process has become much more complicated after 2020, when the company tightened its security policy: now you need to wait up to 168 hours (7 days) of confirmation to unlock the bootloader, and some models do not have this option at all. This article is relevant for devices on MIUI 14/15 and HyperOS, including the latest flagships like Xiaomi 14 Ultra and the budget series Redmi Note 13.

We will discuss three officially supported ways: through Fastboot with unlocking the bootloader, using Magisk (for firmware with a patch), and an alternative method for devices without the possibility of anlock. Separately, we will focus on the critical risks: loss of warranty, blocking Mi Account when errors and "brick" device when you do not act correctly with /system or /vendor. If your goal is simply to remove embedded applications or change fonts, consider less dangerous alternatives like ADB or Xposed modules.

Why Xiaomi is blocking the bootloader unlock?

Since 2017, Xiaomi has been tightening its rules for root rights, and the reasons are threefold:

• 🔒 Data security: Open bootloader allows attackers to bypass Mi Account protection and reset the device via Fastboot, leading to a wave of account thefts in 2019-2020.
• 📱 Stability MIUI/HyperOS: Users with root rights often modify system files, which leads to camera malfunctions (Hal3), sensor NFC.
• 💰 Warranty policy: The manufacturer has the right to refuse repairs if traces of firmware changes are found (triggers in fstab or recovery logs).

Today, even after successfully unlocking the bootloader, many features remain limited, such as the Xiaomi 13T Pro with HyperOS, root rights block Google Pay and File-Based Encryption (FBE) encryption, and devices with Knox-like protection (such as the POCO F5 Pro) can trigger a hardware RPMB flag, making rollback impossible.

Preparation of the device: what to do before unlocking

Before you start unlocking, follow the mandatory steps, and ignoring them can lead to data loss or device lockdown:

1. Back up via Settings → About Phone → Backup or Mi Cloud. Contacts, SMS, and app data are especially critical (e.g. WhatsApp is not saved to the cloud!).
2. Check the model and version of MIUI in Settings → About Phone. Some devices (e.g. Redmi 9A on MIUI 12.5) require additional drivers for Fastboot.
3. Unlock your Mi Account (if you plan to sell the device) and once unlocked, linking to your account can cause activation problems.
4. Charge the battery to 60-80%. The unlocking process can take up to 30 minutes, and a discharge below 30% will interrupt the operation.

For models with HyperOS (such as Xiaomi 14), check the bootloader status with the command:

fastboot oem device-info

In the answer, look for the line Device unlocked: false. If the value is true, the bootloader has already been unlocked (possibly by the previous owner).

Method 1: Officially unlock through Mi Unlock Tool

This is the only legal method approved by Xiaomi, and is suitable for most devices other than those released for the Chinese market (China ROM) or are carrier-specific (e.g. MegaFon’s Redmi Note 11 Pro 5G).

Step 1: Linking your Mi Account to your device

Go to Settings → Xiaomi Account → Mi Cloud and make sure that:

• 📱 Device is linked to account (see in the list of devices).
• 🔄 Synchronization enabled (especially "Find the device").
• 🔐 Two-factor authentication disabled (can block unlocking).

Step 2: Requesting permission to unlock

Download Mi Unlock Tool (at least 5.5.224.30 for HyperOS). Launch the utility, log in to your Mi Account and connect your phone in Fastboot mode (click Volume Down + Power).

Step 3: Unlocking the bootloader

After the timer has expired:

1. Reboot your phone to Fastboot.
2. Connect to your PC and start the Mi Unlock Tool.
3. Press Unlock. It takes 1-2 minutes.

Successful unlocking is confirmed by the Unlocked successfully message and the change of status in fastboot oem device-info to true.

⚠️ Note: On HyperOS devices (e.g. Xiaomi) 13T) When unlocked, the reset to factory settings is automatically performed. Do not attempt to interrupt the process - this may damage the userdata partition.

Method 2: Install Magisk without unlocking (for firmware with a patch)

If your device does not support official unlocking (e.g, POCO X5 Pro for the Chinese market, you can try the method with a patch boot.img This is only working on supportive firmware. init_boot (Android 12+).

Step 1: Extract boot.img

Download the firmware for your model from the site MIUI Downloads. Unpack the.tgz file and find it. boot.img In the image folder, HyperOS may require an additional archive. fw_*model*_miui_*.zip.

Step 2: Patching through Magisk

Install Magisk Manager (latest version – 26.4) and:

1. Copy boot.img to your phone.
2. In Magisk, select Install → Select and fix the file.
3. After patching, you will receive the file. magisk_patched-*.img.

Step 3: Firmware patch boot.img

Reboot your phone to Fastboot and execute the command:

fastboot flash boot magisk_patched-26400_*.img


fastboot reboot

After the reboot, check for root rights through the Root Checker app.

⚠️ Note: On HyperOS devices (e.g. Xiaomi) 14 Pro) patching boot.img This can lead to a bootloop cycle, in which case you need to flash the original bootloop. boot.img Fastboot: Fastboot Flash boot boot.img fastboot reboot method 3: Alternatives to root rights (without unlocking) If unlocking is impossible or too risky, consider these methods: 🔧 ADB-Commands: Removal of system applications (pm uninstall) -k --user 0 com.miui.analytics) or change settings without root. 📱 Shizuku + AppOps: Managing App Permissions via Android Debug Bridge. 🔄 Castomy restoration (TWRP): Some models (e.g. Redmi Note) 10 Pro) can be flashed TWRP Unlock the bootloader through the DirtyCOW exploit. To remove embedded applications (bloat) without root, use: adb shell pm uninstall -k --user 0 com.xiaomi.ab adb shell pm uninstall -k --user 0 com.miui.analytics A list of safe packets to remove can be found at XDA Developers for your model. 💡Before removing system applications through ADB Create a list of installed packages with the adb shell pm list packages and save it. This will help you recover the deleted ones in case of problems. Risks and how to minimize them Even if you successfully unlock, you face a number of limitations: 🚫 Loss of warranty: Xiaomi service centers check the status of the bootloader through fastboot oem readlockstate. 🔐 Mi Account Lock: When resetting via Fastboot, you may need an original account tied to the device. 📵 Problems with OTA-Updates: After root updates "over the air" lead to bootloop. You need to manually stitch the full packages through TWRP. 💳 Broken payment systems: Google Pay, Samsung Pay, and banking apps (like SberBank Online) block out on rooted devices. To mitigate risk: Use MagiskHide (in Magisk settings) to mask root rights from banking apps. Make backups regularly through your banking apps. TWRP or adb backup. Don't modify partitions. /system and /vendor — This is most often the case with bootloop. 💡On HyperOS devices (e.g. Xiaomi) 14) Root rights automatically disable hardware encryption (FBE), This makes the device vulnerable to physical attacks (e.g., data extraction via chip-offs). Frequent errors and solutions Even experienced users face problems in obtaining root rights. Here are the most common errors and ways to fix them: Error Reason Solution Couldn't unlock in Mi Unlock Tool Not passed 168 Wait or re-connect your device Fastboot: Unknown command [oem] Outdated Fastboot drivers Install Android SDK Platform Tools Bootloop after Magisk firmware Incompatible patch boot.img Stitch the original boot.img Fastboot This device is locked after unlocking Incomplete unlock (left) FRP lock) Perform fastboot flashing unlock_critical If after unlocking the phone does not turn on or stuck on the logo MI, Try: Load to Fastboot (Loudness Down) + Power) and flash the original firmware through the Mi Flash Tool. EDL-regime (9008) Recovery via QFil or Mi Flash (requires an authorized Xiaomi account). ⚠️ Note: On devices with Qualcomm chipset (e.g., Snapdragon) 8 Gen 2 Xiaomi 13) misuse EDL It can cause a permanent blink due to partition damage modemst1/st2. This section is responsible for IMEI and networking. FAQ: Can you get a root right on Xiaomi without unlocking the bootloader? On most modern devices (MIUI 14+/HyperOS) — The exception is models with vulnerabilities in the kernel (e.g, CVE-2022-20421 for Snapdragon, but they quickly close with updates. The alternative is to use ADB Why the root doesn't work after the root NFC It's about damage or a camera? HAL-Hardware Abstraction Layer (Hardware Abstraction Layer) for partition modification /vendor. To restore you need to sew the original vendor.img or use Magisk patch modules (e.g. MagiskHide Props Config). How to hide root rights from banking applications? Enable Magisk with MagiskHide (or Zygisk) + DenyList in newer versions) and add apps to the exclusion list. Google Pay will require Universal SafetyNet Fix. Can you return the warranty after you get the root rights? Theoretically, yes, if you return the device to its original state: Lock the bootloader (fastboot flashing lock), flash the official firmware and reset the counters modifications (fastboot oem lock). /data/adb/magisk.db or RPMB. What Xiaomi models cannot be unlocked 2026 List includes: Devices for the Chinese market (China) ROM) No global firmware. HyperOS and hardware-based models. RPMB (For example, Xiaomi Pad 6S Pro) Smartphones released for carriers (e.g. Redmi Note) 12 5G Beeline). Devices with MediaTek chipsets and blocked BL Lock (for example, POCO M5s).