Xiaomi Redmi 9T, also known as Poco M3 or Redmi Note 10 4G depending on the region, is based on the powerful Snapdragon 662 processor. Despite its solid performance, the standard MIUI shell imposes a number of restrictions on user actions. Getting root rights (superuser rights) opens access to system files, allowing you to delete preinstalled software, change the processor frequency and install deep interface modifications.
The privileged access process requires care, because it involves interfering with boot memory. You will need to unlock the bootloader, which is officially authorized by Xiaomi, but entails the complete removal of data from the device. It is critical to keep a backup of all important data before starting any operations.
In this tutorial, we will look at the current method of installing the Magisk rights manager, which is the industry standard for Android devices. We will not use outdated and insecure methods like KingRoot. Instead, you will learn to patch the boot image and stitch it through Fastboot, which ensures that the system will work smoothly after the modification.
Preparation of equipment and software
Before you start modifying the system, you need to prepare the workplace. You need a Windows computer that is working. USB-cable and the smartphone itself, with a battery charge of at least 60%. ADB Fastboot, which allows you to send commands from your PC to your device in a special mode.
You will also need to download the original firmware that matches the version installed on your phone. You can find out the exact version from the Settings → About Phone menu. The firmware file should have the.zip extension for global versions or.tgz for Chinese versions, but for the patch method we will need to extract the boot.img file.
- 📱 Smartphone Xiaomi Redmi 9T unlocked.
- 💻 PC with installed Xiaomi drivers USB Driver and Google USB Driver.
- 📥 File Manager and Archivist (e.g., file manager, 7-Zip WinRAR).
- 🔓 Mi Account tied to the device at least 7 days ago (to unlock the bootloader).
Don’t forget to enable USB debugging. Go to Settings → About Phone and quickly press 7 times on MIUI Version until you notice that you’ve become a developer. Then activate the USB Debugging Slider in advanced settings.
Unlocking the Bootloader bootloader
Without an unlocked bootloader, a modified boot image cannot be installed. Xiaomi has implemented security that requires authorization through official servers, a process that takes time and requires a stable Internet connection.
Download the official Mi Unlock Tool to your computer. Launch the program and log in to your Mi Account. On your smartphone, select bootloader Status and click Add Account. The device will request confirmation — agree.
⚠️ Warning: Once the account is tied, the timer may indicate the need to wait 168 hours (7 days).If you try to unlock the device earlier, the process will not end and the timer may reset.
After the waiting time, reconnect your phone in Fastboot mode. To do this, turn off your smartphone and press the Volume Down and Power buttons simultaneously until the rabbit logo appears in the eardress cap. Connect the cable to your PC and press the Unlock button in the utility. The process will delete all data from internal memory.
💡
If Mi Unlock is running an error of 10008, try using mobile internet instead of Wi-Fi. IP-Mobile address operators are sometimes less blocked by Xiaomi servers.
Remove and patch boot.img via Magisk
The most reliable way to get root rights is to modify the boot image. You need to find the exact firmware for your version of the system. If the firmware is downloaded in.tgz, unpack it twice until you find the file. images.zip, inside boot.img.
Copy boot.img file into the internal memory of your smartphone. Install the Magisk app (the.apk file needs to be renamed.zip for installation through recovery, or simply install as a regular application if the system allows). Open the Magisk app.
On the home screen, find the Installation section and click the Select File button. Find the previously copied file. boot.img. The app will suggest patching. Once completed, a file with the name of the view will appear in the Download folder. magisk_patched_[random].img.
- 📂 Copy the patched file magisk_patched.img back to the computer in the folder with ADB tool.
- 🔄 Rename the file for convenience, such as patched_boot.img.
- 💾 Make sure the file is not damaged when copying (check the size).
Now move the smartphone to Fastboot mode (clamp Volume Down) + Power. Connect it to your computer. Open the command line in the folder with ADB Check the connection with the fastboot device command. If the serial number is displayed, the connection is established.
Firmware of modified image
The final step is writing the modified image to the boot section. An error in this step can lead to bootloop, so watch the commands carefully. Make sure the cable is securely connected and does not interrupt the connection during the process.
Enter the following command in the terminal:
fastboot flash boot patched_boot.imgAfter a successful recording (the Finished label appears), you need to start a reboot. Sometimes the system can take a long time to boot on the first start after you get the rights — this is normal, since Magisk is doing the initial setup.
fastboot rebootIf the phone is turned on and you see an active Magisk app, then the root rights are set. You can check for rights by installing the Root Checker app from the Google Play store or using the built-in checker in Magisk itself.
☑️ Verification of successful installation
Magisk setup and root rights hiding
Many banking and anti-cheat apps and games don't work on open-source devices, and Magisk has a hidden feature to get around these limitations, but it's not enough to just turn it on, it requires additional setup.
Open the Magisk settings (cogs at the top right). Turn on the Zygisk option and Follow the list. After that, go to the Setting up the list and mark those apps that should think that root rights are not (banks, Google Pay, games).
| Parameter | Default value | Recommended value | Impact |
|---|---|---|---|
| Zygisk | Off. | Included. | Allows modules to be embedded in Android processes |
| Follow the list | Off. | Included. | Hiding root only in selected applications |
| Notifications | Included. | As you wish. | Shows the status of Magisk updates |
| Language | Systemic | Russian | Rights Manager interface |
It is also recommended to install Universal SafetyNet Fix (if it is relevant for your version of Android) to pass Google’s security check, which will allow you to enjoy contactless payment even with an unlocked bootloader.
What to do if SafetyNet does not work?
Possible problems and solutions
System modification is not without risks, and most often users are faced with a situation where the phone goes into a permanent reboot after firmware, which means that the patched boot.img is incompatible with the current version of the kernel or was damaged when copying.
If the device doesn’t boot, you’ll need to go back to Fastboot mode and flash the original (not patched) boot.img file from stock firmware.This will return the phone to its original root-free state, but save your data (unless a full cleanup has been done).
⚠️ Warning: Never flash through the recovery or vbmeta section without a clear understanding of the consequences. Wrong command, such as fastboot flash recovery recovery.img flagless --disable-verity, Can completely block the loader of the device.
In case of serious errors, when the phone is not in any mode, you may need to use the Xiaomi ADB/Fastboot Tools tool or EDL (Emergency Download) mode, which allows you to restore the device to a deep level, but often requires an authorized service center account.
💡
The main key to success is the use of the original boot.img, strictly the same firmware version that is installed on the smartphone. Mismatch versions are the cause of 90% of failures.