Xiaomi 'This device is locked': what to do without a password and login

A screen that says "This device is locked" can take anyone with a Xiaomi, Redmi or Poco smartphone by surprise, and this lock is activated by the MIUI (or new HyperOS) security system when you try to activate the device after you reset to factory settings. The system requires you to enter a password from the Mi Account that was previously tied to the phone. If you forget the login details or purchased the gadget from your hands, the situation seems to be a dead end.

However, there are proven methods to circumvent this protection that do not require original credentials. In this article, we will discuss in detail how to unlock a device using official services, specialized software and engineering utilities. It is important to understand that each method has its own risks and requirements, so carefully follow the instructions to avoid turning a smartphone into a brick.

Before we get into action, we need to identify the type of lock, and most of the time, it's Mi Cloud Lock, but sometimes people confuse it with Bootloader lock, and we want to unlink the account to get full access to the system, and we'll look at the options from simple actions through the recovery form to complex flashing procedures.

Causes of blockage and diagnosis

When you see a message, "This device is locked," it's a regular response from Find Device's protection to reset settings. When you make Hard Reset through the Recovery menu or button combination, the security system perceives this as potential theft, and the activation screen displays a login requirement in the account that was synced to the device before the reset.

Often users forget that the device was logged in to Mi Account, which could have happened automatically when you first set up the phone or after you upgrade the system, and the problem is also relevant for those who buy used equipment: if the previous owner did not untie the device from his cloud, you will encounter this obstacle.

⚠️ Note: If a device has been found or stolen, there are no legal methods of unlocking without the owner's password.The methods described below are designed to restore access to personal devices when data is lost or equipment is purchased from hands without waivers.

For an accurate diagnosis, you need to check the status of the bootloader blocker, and you can do this by putting the phone in Fastboot mode, usually by pressing the volume button and the power button, and at the bottom of the screen you'll see the status of either Locked or Unlocked. If the bootloader is locked, the firmware methods will be limited, and you'll need to use official service tools.

πŸ“Š How did you get in front of the lock screen?
Forgot my password.
I bought a used phone.
Attempting to reset settings
Found the device.

Official method: Unlock form of Mi Unlock

The safest and most legal method is to use the official Mi Unlock Tool, but it requires access to or recovery of your account. If you have access to a phone number or backup email linked to your Mi Account, start by restoring your password through i.mi.com.

If restoration is not possible but you are the legal owner, you can apply for unlocking through a service center or an official form, which requires proof of ownership by providing a purchase check or a box of goods. IM-The process can take anywhere from a few days to two weeks.

β˜‘οΈ Preparations for official unblocking

Done: 0 / 4

In some regions, Xiaomi allows you to send a request to remove the binding via an online support form. IM-If the data matches the database and the device is not wanted, you may be given a temporary code or remotely unlocked.

Where to find out. IM-code?
IM-The code is usually printed on a factory sticker on the back of the device or on a box, and can also be seen in Fastboot mode. + power), it will be displayed at the top of the screen or in the "Project" line".

Use of service accounts and utilities

For situations where official paths are closed, specialists use service accounts at the level of Global or CMI. These accounts have extended rights and allow you to bypass the check Mi Cloud.

One popular tool is the Mi Account Remove Tool, which works by creating a local tunnel to send commands to the activation server, and it is important to understand that using such tools often requires a paid subscription or purchase of a license, since service accounts have a limited number of activations.

MethodSkills requiredRisk of data lossCost
Official dischargeLow.Complete.Free of charge.
Service utilitiesMedium.Complete.Paid (license)
Hardware reset (EDL)High-pitchedComplete.Tall.
Bypassing ADBHigh-pitchedPartialFree/Paid

The process of unlocking through service software usually looks like this: the phone is put into Fastboot mode, connects to a PC, and the program runs an account deletion script. After a successful operation, the device reboots, and the lock screen disappears. However, on new versions of HyperOS, this method may not be effective due to the enhanced protection of the kernel.

πŸ’‘

When using third-party software, always check the digital signature of the file and only download it from trusted developer forums (such as 4PDA or XDA) to avoid the introduction of malware.

ADB bypass method and region change

This method is suitable for devices with an older version of MIUI (up to 12-13 version) installed, where vulnerabilities in the activation menu are not yet closed, the essence of which is to intercept the configuration process and change system files or region, which allows you to skip the verification step of the acc.

To start, you’ll need a PC, a USB cable, and installed ADB drivers. Connect your phone, wait for the welcome screen, and select the language. Then quickly tap the Wi-Fi icon several times, or use a keyboard combination to call to get into your browser or settings.

adb shell pm disable-user --user 0 com.miui.cloudservice


adb shell pm disable-user --user 0 com.android.cloudsda.otafileprovider

Executing these commands through ADB disables the system services that are responsible for checking the cloud. After that, you can try to complete the configuration. However, on modern firmware, access to ADB from the activation screen is closed, and this method requires prior preparation or vulnerability in a particular version of the software.

⚠️ Warning: Don't try to delete system processes blindly. Disabling critical services can lead to a cyclical reboot. Always know what a particular com.miui package is responsible for....

Alternatively, exploiting a vulnerability in the activation browser can be used to click on a link (which can be found on the developer forums for your version of MIUI), to cause a buffer overflow or open the debugging menu, enabling debugging over USB and full access to the file system to delete the anchor files.

πŸ’‘

The ADB method is only effective on older versions of MIUI without security patches. On HyperOS and MIUI 14+, this method hardly works without first unlocking the bootloader.

Firmware via EDL (Emergency Download Mode)

Regime. EDL (Qualcomm Emergency Download is a deep level of access to the memory of the processor. The firmware in this mode allows you to completely overwrite the software, ignoring the bootloader locks. EDL-Xiaomi devices require an authorized account with engineer rights.

There are two options for entering this mode: software (via the command adb reboot edl, if allowed) and hardware. The hardware method involves disassembling the smartphone and closing certain contacts on the board (Test Point).

The main difficulty is that since 2020, Xiaomi has closed the possibility of free firmware in EDL. Now even in this mode, the server checks authorization, users are forced to contact paid services that have access to remote authorization servers, or buy temporary access to the authorization account.

  • πŸ”Œ Disassembly: Remove the back cover (heating may be required) and turn off the battery.
  • πŸ” Test Point Search: Find two contacts on the board marked as TP or as indicated in the scheme for your model.
  • ⚑ Close the contacts with tweezers and connect at the same time USB-plug-in.
  • πŸ’» Device Manager: The Windows Device Manager should have a Qualcomm device HS-USB QDLoader 9008.

If the device is identified as QDLoader, you can try to flash the image through the MiFlash Tool. Select Clean All or Clean All and Lock mode (caution only if you are sure of the lock region). If the firmware is successful, the Mi Account lock will be removed along with all data.

Frequent errors and precautions

When unlocking, users often make mistakes that make things worse, one of the most common being interrupting the firmware process or turning off the cable, which can lead to partition table failure, and the phone will no longer be identified by the computer at all.

It is also dangerous to download "cracked" versions of service software from questionable resources, often stitched into such programs by miners or password stylists, and use only proven tools from forums where there is live discussion and moderation.

⚠️ Note: After successful third-party unlocking, the system may not work properly with Google Play or Mi Cloud services. In some cases, you need to re-register a new account and completely clean the data to stabilize the work.

Don't forget the risk of loss of warranty: any interference with the software, except for a standard reset, formally disqualifies the right to free repairs in authorized centers. If the phone is warranty, it is better to contact the service with a check for official unlocking.

Questions and Answers (FAQ)

Can I unlock Xiaomi without a computer?
It's almost impossible to do this on your own, without a PC, either by requiring an official password recovery site (which requires access to your mail/phone) or by a service center. Mobile unlocking apps are often scams.
Will unlocking all the data from your phone?
Yes, 99% of the time, Mi Account bypassing (Hard Reset, EDL) will result in the complete deletion of all user data, and you won’t be able to save photos and contacts without a password from your account.
Is it dangerous to unblock through service accounts?
Using paid services with a good reputation is safe for hardware, but you trust your data to third parties. After unlocking, it is recommended to immediately change all passwords and set two-factor authorization to a new account.
What if the phone needs a password again after unlocking?
This means that the method was used incorrectly or the lock was not removed from the server. Try to reflash the device clean (Clean All) or contact a specialist, as it may be listed on the blacklist.