Root on Xiaomi: how to unlock the bootloader and set the rights of the superuser

Why you need Root on Xiaomi and what risks it carries

Obtaining superuser (Root) rights on Xiaomi smartphones opens up access to hidden Android features, allowing you to remove system applications, optimize performance or install custom firmware. However, this process requires unlocking the bootloader, installing custom recovery (TWRP) and Magisk firmware - every step involves risks, from loss of warranty to the "brick" of the device.

V 2026 Xiaomi tightens security policy on new models (for example, Redmi Note) 13 Pro+ Xiaomi 14 Ultra) unlocking the bootloader requires binding the Mi Account and waiting until 720 hours (30 Old devices like Poco. F3 or Redmi Note 10 Pros unlock faster, but even here, the verification algorithms have changed. MIUI 14/15 HyperOS.

Preparation of the device: what to do before unlocking

Before starting the process, make sure your device meets the key requirements:

  • 📱 Smartphone model: check the unlock support on Xiaomi's official website.Some models (e.g. Xiaomi) 13T Pro for the European market may have restrictions.
  • 🔋 Battery charge: at least 60% Interrupting the process due to discharge will result in inability to recover via Fastboot.
  • 🔐 Backup: Use Settings → The phone. → Backup or Mi Mover. data will be deleted!
  • 💻 Computer: Windows required 10/11 (for Mi Unlock Tool or Linux/macOS (for ADB/Fastboot). Virtual machines are not recommended.

Pay special attention to drivers: download Mi PC Suite or install Google USB Driver via Android SDK. Without the correct drivers, the Mi Unlock Tool will not recognize the device.

📊 What Xiaomi model do you plan to unlock?
Redmi Note 12/13
Poco F/X
Xiaomi 13/14
Another model

Unlock the bootloader with the Mi Unlock Tool

The official Mi Unlock Tool is the only legal way to unlock a bootloader on Xiaomi, and the process consists of two steps: linking the account to the device and actually unlocking.

  1. Activate Developer Options: Go to Settings → About Phone and click on MIUI 7 times.
  2. Enable USB Debugging and OEM Unlock in the Settings menu → Additional → For developers.
  3. Link Mi Account to your device: Settings → Xiaomi Account → Security → Link your account.
  4. Download Mi Unlock Tool, log in and connect your phone in Fastboot mode (clip Volume Down + Power).

Once connected, the tool will show you the latency (72 to 720 hours) on new devices (HyperOS) may require confirmation via SMS. Don't disconnect the device from the PC while waiting - this will reset the timer!

Linked Mi Account to the device|Debugging is on. USB|Drivers installed ADB|Battery charge >60%|Backup created-->

⚠️ Note: If the Mi Unlock Tool gives you a Couldn't unlock error, check if the process is blocked by an antivirus (for example, Avast or Kaspersky.

TWRP Recovery: An Alternative to Standard Recovery

TWRP (Team Win Recovery Project) is a customized recavery required to run Magisk firmware and get Root. For each Xiaomi model, there is a version of TWRP that you need to download from the official website.

Installation instructions:

  1. Download. twrp-3.7.0_12-0-<model>.img for your device (for example, twrp-3.7.0_12-0-alioth.img POCO F3).
  2. Move the file to the folder with the platform-tools (Android SDK).
  3. Connect your phone in Fastboot mode and execute the command: fastboot flash recovery twrp-3.7.0_12-0-<model>.img
  4. Immediately after firmware, go to TWRP, holding Volume Up + Power.

On some devices (Xiaomi 12T, Redmi K50), TWRP may not start due to anti-Rollback protection, which will require a rollback to an older version of MIUI.

What to do if TWRP does not start?
If the phone is loaded into a standard backup after TWRP firmware, Anti-Rollback protection has worked. Solution: 1. Sweat the full MIUI version through Mi Flash Tool (select the clean all option). 2. Install TWRP for an older firmware version (for example, for MIUI 13 instead of MIUI 14). 3. Once you successfully log in to TWRP, you can upgrade to the current firmware through ADB Sideload.

Xiaomi modelSupported version of TWRPFeatures
Redmi Note 11 Pro+ 5G (peux)3.7.0_12-0Requires to disable dm-verity after firmware
Poco F4 GT (ingres)3.6.2_11-0HyperOS is not compatible with MIUI 14
Xiaomi 13 Lite (taoyao)3.7.0_9-0Supports data encryption (you need to enter a PIN into TWRP)
Redmi K60 Pro (mondrian)3.7.0_12-1Requires a patch for vendor_boot installation of Magisk

Magisk firmware and obtaining Root rights

Magisk is a modern alternative to SuperSU, allowing you to get Root without changing the systemless root.

Step-by-step:

  1. Download the latest version of Magisk from GitHub (Magisk-v26.4.zip file).
  2. Move the archive to your phone or flash drive.
  3. Download to TWRP and select Install → specify the path to Magisk-v26.4.zip.
  4. After installation, run the Reboot System.

On devices with HyperOS (such as Xiaomi 14), you may need an additional patch for boot.img:

  1. Remove boot.img from the firmware via MIUI bootloader.
  2. Patch it in Magisk: Upgrade → Select and patch the file.
  3. Sweep the patchy boot.img Fastboot: Fastboot Flash boot magisk_patched.img

⚠️ Note: On some devices (Redmi Note) 12 Turbo) Magisk may conflict with module miui_camera, Solution: disable the module via Magisk → Modules.

💡

If after installing Magisk phone is fixated on the boot, try flashing Disable_Dm-Verity_ForceEncrypt.zip through TWRP. This will disable the integrity check.

Root rights check and solve typical problems

After the reboot, check for Root with the Root Checker app or the command in Terminal:

su

If the command returns #, the rights are obtained successfully. If there is a Permission denied error, follow the following steps:

  • 🔄 Reinstall Magisk: Download the latest version and repeat the firmware.
  • 📱 Check the version. TWRP: on some devices required TWRP supportive A/B partitions.
  • 🔧 Disable modules: In Magisk, go to Modules and deactivate everything except MagiskHide.
  • 🔒 Reset the context of SELinux: Setenforce 0

HyperOS devices may require manual mounting of /vendor partitions in TWRP:

mount /vendor

💡

If banking applications (Sberbank, Tinkoff) refuse to work, activate MagiskHide and add them to the list of hidden applications.

Hiding Root for Banking Apps and SafetyNet

Many apps (such as Sberbank Online or Google Pay) block work on devices with Root. To circumvent this protection, use:

  1. MagiskHide: Enable the option in the Magisk settings and add apps to the list.
  2. Universal SafetyNet Fix: Install the module through Magisk to pass the SafetyNet test.
  3. Props Config: Change the device fingerprint to a certified one (e.g. Pixel 6).

Use the YASNAC app to check SafetyNet status. If the test is not passed, update the modules or try an alternative method of hiding - Shamiko.

⚠️ Note: On HyperOS devices, MagiskHide may not work smoothly due to new security mechanisms. In this case, try using DenyList (Settings tab). → Configuration in Magisk).

FAQ: answers to frequent questions about Root on Xiaomi

Can I get Root without unlocking the bootloader?
No. On all modern Xiaomi devices (starting with MIUI 12), unlocking the bootloader is mandatory. Alternative methods (for example, through vulnerabilities in DirtyCOW) do not work on current firmware.
Will the unlock counter reset after the MIUI update?
No, the meter is tied to the device’s hardware identifier. however, after the upgrade, it may be necessary to re-unblock if Xiaomi has changed its security policy.
How to return the guarantee after receiving Root?
In theory, no. But in practice, some service centers don't check the status of the bootloader unless the problem is software related (e.g., a broken screen), so to hide the traces of the Root, return the stock receptacles and run the official firmware through the Mi Flash Tool (clean all and lock option).
Does Magisk work on HyperOS?
Yes, but with reservations. HyperOS (e.g. Xiaomi) 14) patching init_boot.img instead boot.img. Some modules that are optimized for MIUI.
What if the camera or NFC stopped working after Root?
This is a typical problem on Dynamic Partitions devices (e.g. Redmi Note). 12 Pro+). Solution: Remove all Magisk modules associated with the camera.Swipe stock vendor_boot.img Use alternative camera apps (e.g. GCam).