Getting superuser rights on Xiaomi smartphones opens up access to hidden Android features, but requires caution. Without proper preparation, the device can turn into a βbrickβ β an inoperable device that does not turn on even before the logo. In this article, we will discuss all the current ways to unlock root on Redmi, POCO and Mi models (including Xiaomi 13/14, Redmi Note 12, POCO F5), and explain why the official method through Mi Unlock stopped working for most users in 2026.
Itβs important to understand that Xiaomi actively blocks unauthorized system changes. The latest version of MIUI 15 has made it harder to unlock the bootloader, and in some regions (e.g. the EU), getting root now requires you to confirm your account via SMS from a Chinese phone number. We tested workarounds and put together workable solutions, from classic Magisk to alternative tools like OrangeFox Recovery.
If you're a beginner, start with the Preparation section, which describes the critical steps that miss 90 percent of the guides on the Internet, for example, why you can't use fastboot oem unlock on new devices without first linking your Mi Account to your phone.
1. What is rooting on Xiaomi and what are the risks?
Root rights allow:
- π§ Remove system applications (bloatware), including miui.analytics and com.xiaomi.midrop, that cannot be disabled by standard means.
- π― Change system fonts, animations and themes at the level framework-res.apk (For example, install the iOS style on the MIUI).
- π Optimize autonomy through Greenify or Battery Guru by blocking background application activity.
- π± Install custom firmware (LineageOS, Pixel Experience) or cores to overclock the processor.
But there's a downside.
- β οΈ Loss of warranty: Xiaomi refuses to repair when unlocked bootloader is detected (even if the problem is not related to the software).
- π‘οΈ Security vulnerabilities: Some banking applications (such as SberBank Online or Tinkoff) are no longer working due to a SafetyNet trigger.
- π Problems with OTA-Updates: After receiving root, automatic updates MIUI They can break the system.
β οΈ Note: On devices with Qualcomm Snapdragon 8 Gen 2/3 (for example, Xiaomi 13 Ultra, Redmi K60 Pro unlocking the bootloader resets data from all partitions, including internal memory (userdata) and metadata. TWRP It wonβt help β you need a full backup on PC.
2. Preparation of the smartphone: 5 mandatory steps
Before unlocking the bootloader, do these steps:
Link your Mi Account to your phone (Settings β Mi Account β Sync)
Enable debugging via USB (Settings β About Phone β MIUI Version β 7 Taps β For Developers β Debugging by USB)
Allow OEM unlocking (Settings β Additional β Developers β Unlocking OEM)
Install ADB/Fastboot drivers on PC (download from [Google official website](https://developer.android.com/studio/releases/platform-tools))
Download the latest version of the Mi Unlock Tool (even if it doesnβt work, youβll need to check the status of the bootloader)-->
On new devices (MIUI 14+), this option may disappear after a reboot. If it is not in the developer menu, pay special attention to the item on OEM unlocking:
- Turn off the phone from the network and Wi-Fi.
- Go to Settings β Mi Account β Synchronization and wait for the synchronization to complete.
- Connect to the Internet β the option should appear in 5-10 minutes.
To check the status of the loader, use the command:
fastboot oem device-infoIf you see Device unlocked: false in the answer, the bootloader is locked. On some models (POCO F4 GT, Redmi K50 Gaming) you may need a 30-day wait after you have attached your Mi Account.
Redmi Note 12/13
POCO F4/F5
Xiaomi 13/14
Redmi K60/K70
Other-->
3. Official method: Mi Unlock Tool (Will it work in 2026?)
Until 2023, the official Mi Unlock Tool allowed you to unlock the bootloader in 72-168 hours of latency.
| Region | Unblocking status | Requirements |
|---|---|---|
| China | It's working. | Linking Chinese phone number to Mi Account |
| Europe/Russia | Limited. | SMS confirmation is required (often blocked) |
| Global firmware (EEA) | It's not working. | The βCouldnβt unlockβ error after 100% progress |
| India | Partially. | It only works on devices older than 2022 |
If you want to try the official method:
- Download Mi Unlock Tool from the official website (version no lower than 6.5.406.28).
- Sign in to the tool under the same Mi Account as on your phone.
- Turn your phone into fastboot (Off β Power + Volβ).
- Connect to the PC and press Unlock.
β οΈ Note: On devices with MediaTek (e.g. Redmi Note) 12 5G) Unlocking the official system can lead to loss IMEI. Before the procedure, save it through the command adb shell su -c 'cat /data/nvram/md/NVRAM/NVD_IMEI/IMEI*'.
What if the Mi Unlock Tool is an 86006 error?
4. Alternative methods of unlocking the bootloader
If the Mi Unlock Tool doesnβt work, try these methods:
Method 1: Through EDL-mode (for Qualcomm)
EDL (Emergency Download Mode) allows you to flash the bootloader bypassing fastboot.
- π Cable USB-A β USB-C Data transmission support (not all cables are suitable!).
- π» QFil or Mi Flash Pro.
- π File. prog_emmc_firehose.mbn For your model (see for your model) 4PDA or XDA Developers).
Instructions:
- Turn off the phone.
- Press Vol++ Volβ and connect to the PC β the device should be defined as Qualcomm HS-USB QDLoader 9008.
- In Mi Flash Pro, select a firehose file and swipe unlock_engineer.img.
Method 2: Bypassing the Xiaomi test server
Some users report success using the unlock test server:
- In the hosts file (on the way) C:\Windows\System32\drivers\etc\) add a line:
72.21.91.29 api.account.xiaomi.com- Restart your PC and repeat the procedure in the Mi Unlock Tool.
π‘
If your phone is not detected in fastboot, try another one. USB-port (preferably) USB 2.0) or disable the driver signature in Windows via the bcdedit command /set testsigning on in CMD on behalf of the administrator.
5.Install Magisk and get root
Once you unlock the bootloader, you need to flash Magisk, a root rights management tool, and download the latest version from GitHub (at the time of writing, Magisk v26.4).
Instructions:
- Download the original firmware for your model from Xiaomiβs website (choose the Fastboot version, not Recovery).
- Unpack the firmware and find the file boot.img (For new devices, it may be called init_boot.img).
- Transfer boot.img to your phone and select Install β Select and Patch a File via Magisk.
- Copy the resulting material. magisk_patched.img PC-only.
- Write it through fastboot:
fastboot flash boot magisk_patched.img
fastboot rebootAfter the reboot, install Magisk Manager (download only from the official repository!) and check the root status:
- π’ If the green tick is burning in Magisk, the rights are obtained.
- π΄ If the error "Magisk is not installed" - repeat the firmware with cleaning fastboot erase boot.
π‘
On Android devices 13+ (MIUI 14/15) instead boot.img need to patch init_boot.img. If you flash the wrong file, the phone won't boot!
6 Solving problems after getting root
Frequent errors and their correction:
| Problem. | Reason. | Decision |
|---|---|---|
| The phone is loaded into the bootloop | Incompatible Magisk patch or broken boot.img | Switch the original boot.img to fastboot flash boot.img |
| NFC's not working | Damaged section. modemst1/st2 unlock | Swipe the original firmware through Mi Flash with a clean all checkmark |
| SafetyNet does not pass | System modifications detected | Install Universal SafetyNet Fix in Magisk |
| Google Pay/Google Wallet is not working | CTS Profile Mismatch Trigger | Hide root through Magisk β Settings β Enable Zygisk β Configure DenyList (Add Google Pay) |
If the IMEI or serial number is missing after unlocking:
- Make sure you have an NVRAM backup (see Section 2).
- Restore the IMEI via Maui META (for MediaTek) or QCN Rebuilder (for Qualcomm).
- For Xiaomi, Snapdragon will fit the team:
fastboot flash modem NON-HLOS.bin
fastboot erase modemst1
fastboot erase modemst27. How to hide root from applications?
Many apps (banks, games, streaming services) block access on rooted devices to bypass checks:
- π Enable Zygisk in Magisk Settings (replace MagiskHide in new versions).
- π Add problematic apps to DenyList (e.g. SberBank, Netflix, PokΓ©mon GO).
- π Reboot your phone after the changes.
To check SafetyNet status, use the YASNAC app (available on GitHub).
- Install the Universal SafetyNet Fix module.
- Clear the data of Google Play Services.
- Disable Hardware-backed keystore in Magisk settings (may break some features, such as Google Pay).
β οΈ Attention: On devices with MIUI 15 and Android 14 Universal SafetyNet Fix module may not work. Alternatively, use MagiskDelta with liboemcrypto patch.
8 How to Get Everything Back (Rootback)
If you need to give up your phone under warranty or sell it, remove root traces:
- Download the original firmware for your model (the same version that is installed now!).
- Unpack it and find it. boot.img (or init_boot.img).
- Write it through fastboot:
fastboot flash boot boot.img
fastboot rebootFor complete cleaning:
fastboot erase avb_custom_key
fastboot flash vbmeta vbmeta.img
fastboot flash vbmeta_system vbmeta_system.imgThen, run the full firmware through Mi Flash with the Clean All option.
To block the loader back:
fastboot oem lockImportant: After this command, the phone will reset to factory settings!
π‘
Even after root rollback, some apps (like Netflix) may remember that the device has been rooted, in which case only a complete firmware reflash with userdata formatting will help.