How to remove protection on Xiaomi: unlock the bootloader, MIUI and FRP

Why Xiaomi is blocking devices and how to get around it

Xiaomi smartphones are known not only for their affordable price and powerful specs, but also for their multi-layered security system. The manufacturer implements locks at the bootloader level, the MIUI operating system and even hardware components. On the one hand, it protects users from data theft and unauthorized access. On the other, it creates difficulties when trying to unlock the phone to install custom firmware, reset password or recover from a software failure.

The main protections on Xiaomi that users face:

• 🔒 Bootloader locking – hardware protection that prevents the installation of unofficial software.
• 📱 MIUI Protection – software binding of the Mi Account to the device after reset.
• 🔄 Factory Reset Protection (FRP) — locking after resetting to factory settings without detachment of the account.
• 🔐 Password/pattern lock – a standard screen lock that can be bypassed without unlocking the bootloader.

In this article, we will discuss legal and safe ways to remove protection on Xiaomi, including official tools from the manufacturer and workarounds for power users. Importantly, all manipulations with the bootloader and firmware will void the warranty and can lead to a “brick” of the device – use the instructions at your own risk.

1. Unlock the bootloader (Bootloader) on Xiaomi

The Xiaomi bootloader is locked by default, which means you won’t be able to install TWRP, custom recovery, or alternative firmware (like LineageOS), the official way to unlock is through the Mi Unlock Tool, but it has limitations:

• ⏳ Wait 7–30 days after linking your Mi Account to your device.
• 📱 Not all models are supported (e.g. Redmi Note 12 and later require additional confirmation).
• 🔌 You need original. USB-cable and stable connection to PC.

Instructions for unlocking:

1. Activate Developer Options: Go to Settings → About Phone → MIUI version and tap 7 times.
2. Turn it on. OEM-unlocking and debugging USB Settings menu → Additionally. → For developers.
3. Link the device to your Mi Account in Settings → Xiaomi Account.
4. Download Mi Unlock Tool, log in and connect your phone in Fastboot mode (clip Volume Down + Power).
5. Run unlock and wait until it is completed (it may take several attempts).

Developer options activated|Linked to Mi Account|On. OEM-unlock|Drivers installed ADB/Fastboot|Download the latest version of the Mi Unlock Tool-->

⚠️ Note: After unlocking the bootloader, all data, including photos and apps, will be deleted from the device. → Additionally. → Backup.

If the Mi Unlock Tool is running a "Couldn't unlock" error, try it.

• 🔄 Reconnect the phone to another USB-port (preferably) USB 2.0).
• 📥 Install an older version of the utility (e.g. 5.5.224.24 for older models).
• 🕒 Wait 72 hours – sometimes the system takes extra time to verify.

2. bypass MIUI Protection after discharge

If you reset Xiaomi to factory settings via recovery or fastboot, the system can request data from a tied Mi Account, called MIUI Protection, a mechanism similar to FRP on Samsung, and you can get around it in several ways:

The most reliable way is to use the official Find Device service:

1. Sign in to the Mi Account linked to the phone.
2. Go to Find Device → Your Device → Erase Data
3. Confirm the reset - after the reset, the lock will be removed.

💡

If you have forgotten your Mi Account password, restore it through your linked email or phone number. To do this, click on the login page and follow the instructions.

For models Redmi Note 8/9/10 and the like, you can use the bypass through Fastboot:

fastboot oem unlock-go


fastboot flashing unlock

These commands will only work if the bootloader has already been unlocked before.

3. Withdrawal of Factory Reset Protection (FRP)

Factory Reset Protection is a lock that is activated after resetting if a Google or Mi Account was attached to the device. On Xiaomi, it works differently than on Samsung or Huawei, but the essence is the same: without account data, the phone turns into a “brick”.

Ways to bypass FRP on Xiaomi:

• 📧 Restore access to Mi Account – if your account is yours, restore your password via email or SMS.
• 🔧 Use of the EDL-mode – requires special cable and software (for example, Mi Flash Pro).
• 📱 Emergency Call bypass – works on some models (e.g. Redmi) 7A).
• 🖥️ Fastboot Firmware – if the bootloader is unlocked.

For the Emergency Call round-trip:

1. On the lock screen, press Emergency Call.
2. Enter #4636## and the test menu will open.
3. Go to Usage Statistics → Settings and disable Factory Reset Protection.

⚠️ Emergency Call method does not work on all models and versions MIUI. On new devices (for example, Xiaomi 13) this method is blocked.

4. Removal of the graphical password or PIN-code

If you have forgotten the pattern lock or PIN-code on Xiaomi, but remember the data from Mi Account, there will be no problems: after 5 unsuccessful attempts, the system will offer to reset the password through the account?

Options for a solution:

• 🔄 Recovery Reset – Deletes all data but unlocks your phone.
• 📱 Use of the ADB — if debugging is on USB.
• 🖥️ Fastboot Firmware – if the bootloader is unlocked.

The easiest way is to reset through Recovery:

1. Turn off the phone.
2. Press Volume Up + Power to enter Recovery Mode.
3. Select Wipe Data → Wipe All Data (control – volume buttons, confirmation – power button).
4. After restarting, set your phone as new.

If USB debugging was enabled before blocking, you can delete the password via ADB:

adb shell


su




rm /data/system/gesture.key




rm /data/system/password.key




reboot

⚠️ Attention: Teams ADB They only work on rooted devices or if the bootloader has been previously unlocked. on new Xiaomi models (e.g. Redmi Note 12 Pro)+) This method may not work due to increased protection.

5. Unlock through EDL-regimen (9008)

EDL Mode (Emergency Download Mode) is a service mode that allows you to flash the device at a low level, even if it does not turn on. On Xiaomi, EDL is logged in through a special combination or short circuit of contacts on the board.

What you need EDL for:

• 🔧 Recovery of the brick after a failed firmware.
• 📱 Circumvention MIUI Protection and FRP.
• 🔄 Firmware of official software without unlocking the bootloader (requires an authorized account).

How to log into EDL:

1. Turn off the phone.
2. Hold the Loud up. + Loud down and plug in. USB-plug-in.
3. Hold the buttons for 10-15 seconds until a notification of a new device appears in Device Manager (Qualcomm HS-USB QDLoader 9008).

To run through EDL, you will need:

• 🖥️ Mi Flash Pro or QFilm.
• 📁 Official firmware in.tgz or.mbn format.
• 🔑 Authorized Xiaomi account (for new models).

💡

EDL-The mode is the last chance to save the brick, but it takes experience. A firmware error can lead to permanent motherboard failure.

6. Alternative methods of unlocking

If standard methods don't work, alternative solutions can be tried, suitable for power users and requiring technical skills.

Ways for Advanced Users:

• 🔧 Use of exploits – vulnerabilities in MIUI, Bypassing the lock (e.g. DirtyCOW for older versions of Android).
• 📱 Firmware through TestPoint - closing contacts on the board for entering EDL login.
• 🖥️ Use of boxes – specialized equipment (e.g. UFi Box or EasyJTAG).

Example of DirtyCOW bypass (operates on MIUI 8-10):

1. Download exploit for your model.
2. Connect your phone to a PC with USB debugging enabled.
3. Run the script via ADB: adb push dirtycow /data/local/tmp adb shell chmod 777 /data/local/tmp/dirtycow adb shell /data/local/tmp/dirtycow
4. After execution, restart the device.

⚠️ Note: Exploit's often contain malicious code. download files only from trusted sources (e.g., download files from a trusted source, XDA Developers or 4PDA).

For Xiaomi models on the MediaTek processor (for example, Redmi 9A), you can use the SP Flash Tool:

1. Download the firmware in scatter format.
2. Open the SP Flash Tool and upload the scatter file.
3. Connect the phone to the PC (without battery if possible).
4. Press Download and wait for the firmware to finish.

Official Mi Unlock Tool Officially|Reset via Recovery|Passage ADB|Firmware in EDL-mode|None of the above.-->

FAQ: Frequent questions about unlocking Xiaomi