Installing applications from unknown sources on Xiaomi Redmi is one of the most common reasons for a smartphone to be infected with viruses, spyware or adware. Even if you are sure that the file you are downloading is safe, accidentally clicking on a fake installer or data leakage through third-party application stores can result in serious problems: from intrusive advertising to theft of accounts and banking data. .apk-file, accidentally clicking on a fake installer or data leakage through third-party app stores can lead to serious problems: from intrusive advertising to theft of accounts and banking data.
The manufacturer by default blocks installation from unknown sources, but many users Xiaomi by default blocks installation from unknown sources, but many users manually allow this option to install pirated games, modified applications or software that is not available in Google Play. However, after this they forget to return the security settings to their original state. In this article we will look at how permanently prohibit installation APK on Redmi (including models Note 12, 11 Pro, 10C, 9A and others), as well as what to do if the option is gray and inactive.
Why is it important to disable installation from unknown sources
The main danger lies not in the fact of installation itself .apk, but in the fact that 90% of Android malware is distributed through third-party sources (according to data Kaspersky for 2023). Here are the key risks:
- 🦠 Viruses and Trojans: The files may contain hidden scripts that steal data or encrypt files (as in the case of the virus FluBotthat was distributed through fake APKs of banking applications).
- 🕵️ Spyware: Some "free" modified games (mods) contain keyloggers that track password input.
- 📢 Intrusive advertising: Even without viruses, many APKs from unverified sources load aggressive advertising SDKs that display banners on top of other applications.
- 🔒 Device lock: Some malware locks the screen and requires payment for unlocking (so-called ransomware).
At the same time, Google Play Protect (built-in Android protection) does not scan files installed externally. That is, you are left without any automated verification. Even if you trust the source (for example, APKMirror or APKPure), one wrong click a fake version of the application may negate all precautions.
Where is the setting on Xiaomi Redmi
Unlike “pure” Android, the shell MIUI hides the installation option from unknown sources deeper in the menu. The path depends on the firmware version:
- 📱 MIUI 14/13/12.5 (relevant for Redmi Note 12, 11, 10, 9):
Settings → Applications → Manage applications → Application settings → Install unknown applications - 📱 MIUI 11/10 (old models like Redmi 8, 7A):
Settings → Advanced → Privacy → Special permissions → Install unknown applications
After going to the section, you will see a list of applications (for example, Browser, File manager, Telegram) that are allowed to install APK. It is important to understand here: the ban does not work globally, and for each application separately. That is, if you disable the permission for Chrome, but leave it for File manager, then installation through the explorer will still be possible. possible.
On some firmware Xiaomi the option may be called “Unknown sources” or “Installation from external sources”. If you don’t find it, use the search in the settings (magnifying glass icon at the top).
Step-by-step guide: how to block APK installation
Follow this algorithm to completely block the installation of applications from outside:
- Open "Settings" and go to section
Applications → Manage applications. - Select item
Settings applications(orSpecial permissionson older versions of MIUI). - Tap on
Install unknown applications. - A list of applications with sliders will open in front of you. Disable all sliders (they should turn gray).
- Go back to the main settings menu and check if there are any other items with similar permissions (for example, in the section
Security).
If the slider is inactive (grayed and does not move), this means that the application never asked for permission to install the APK. In this case, you don’t need to do anything - it’s already there blocked.
☑️ Security check after disabling
What to do if the option is gray and inactive
Sometimes users are faced with a situation where the installation slider for unknown applications cannot be switched remains gray and does not respond to clicks. Reasons and solutions:
| Cause | Solution |
|---|---|
| Device in "For Children" mode or with parental control | Disable the mode in Settings → Accounts → Family Sharing. |
| Employer security policy is active (corporate devices) | Contact your IT administrator or delete your work profile in Settings → Accounts → Delete work profile. |
| Firmware modified (custom software, root access) | Return the official firmware via Mi Flash Tool or disable the modules Magiskresponsible for installing the APK. |
| System error (MIUI glitch) | Restart your phone or reset security settings in Settings → System → Reset settings → Reset application settings. |
If none of the methods did not help, and the option is still inactive, check whether an administrator application is installed on the device (for example, Mobile Anti-Theft or corporate MDM solutions). To remove such software, go to Settings → Security → Device Administrators and uncheck suspicious apps.
How to check if there are device administrators on your phone?
Open Settings → Security → Device administrators. If there are unknown applications in the list (for example, Android Device Manager from a third-party developer), disable their rights.
Additional security measures for Xiaomi Redmi
Disabling installation from unknown sources is only the first step To maximize protection Redmi from malware, follow these steps:
- 🛡️ Enable Google Play Protect:
- 🔍 Install antivirus:
- 🔄 Update MIUI and applications:
- 🚫 Block installation via ADB:
Go to Google Play Store → Profile → Play Protect → Settings and activate the options "Scan device for threats" and "Improve malware detection."
Recommended free solutions: Dr.Web Light, Kaspersky Mobile Antivirus or BitdefenderThey scan not only installed applications, but also downloaded files.
Closed vulnerabilities in older versions firmware is the main loophole for viruses. Check for updates in Settings → About phone → System update.
If you previously allowed APK installation via adb install, disable USB debugging in Settings → About phone → MIUI version (tap on the version 7 times, then return to Advanced → For developers → USB debugging).
Even with installation from unknown sources disabled, viruses can penetrate through vulnerabilities in the browser or instant messengers. Clear your cache regularly and do not click on suspicious links.
What to do if a virus is already installed
If you suspect that Redmi there is already malware (constant advertising, fast battery drain, strange SMS), follow this plan:
- Put your phone into safe mode:
Hold down the power button, then hold your finger on "Power off" until the "Safe Mode" option appears. Only system applications work in this mode, which will help remove the virus.
- Check the list of installed applications:
Go to
Settings → Applications → Manage applicationsand sort by installation date. Remove all suspicious apps (especially those with names like System Update, Flash Player or Cyrillic characters). - Use an antivirus for deep scanning:
Run a scan via Malwarebytes or Avast (in safe mode, viruses cannot block scanning).
- Reset the settings to factory settings:
If the virus is not removed, perform a hard reset on
Settings → System → Reset settings → Delete all data. Before doing this, make a backup copy important files!
⚠️ Attention: Some viruses disguise themselves as system applications (for example, com.android.system). Removing them manually is dangerous - it can lead to the phone not working. In such cases, it is better to reset or contact a service center.
How to prevent APK installation for specific applications
If you need to leave the option of installing APK for only one or two applications (for example, Telegramto share files), but block for the rest, do the following:
- Go to
Settings → Applications → Manage applications → Application settings → Install unknown applications. - Disable sliders for all applications except those you trust.
- For additional protection, set a password on the file manager (for example, in Mi File Manager you can enable the request for a PIN code when opening).
Example: if you allow installation only for Telegram, then APKs downloaded through it can be installed, and files from browser or instant messengers - no. However, remember that even trusted applications can be compromised (for example, through vulnerabilities in their code).
⚠️ Attention: Some applications (for example Xender or ShareIt) automatically ask for permission to install an APK when first launched. If you do not use them, delete them to avoid accidental permission.
FAQ: Frequently asked questions
Is it possible to install an APK if you disable unknown sources?
No if you have disabled permission for all applications in the list. However, some system apps (for example, Mi App Store) can bypass this limitation. In this case, delete or disable unnecessary system applications through Settings → Applications.
Why were the settings reset after the MIUI update?
For major updates (for example, with MIUI 13 on MIUI 14) some resolutions are reset to factory settings. Always check your security settings after an update. This may also occur due to a malfunction Google Play Services —in this case, reboot the phone.
How to prevent APK installation on Xiaomi without access to the settings (for example, on a work phone)?
If the device is controlled via Mobile Device Management (MDM), you will not be able to change settings without administrator rights. Contact your company's IT department. If the phone is personal, but blocked by politicians, perform a factory reset (the data will be deleted!).
Is it possible to install an APK through a computer if it is prohibited on the phone?
Yes, if USB debugging is enabled and the PC has ADB. However, to do this, you need to confirm the permission on your phone the first time you connect. To completely block this method, disable USB debugging in Settings → Advanced → For developers.
What applications are most often used to install malicious APKs?
According to statistics Xiaomi, most infections occur via:
- Browsers (Chrome, Mi Browser) - when downloading files from dubious sites.
- File managers - when opening APK from folders
DownloadorBluetooth. - Messengers (Telegram, WhatsApp) - when receiving files from unknown contacts.
- Third-party stores (APKPure, Aptoide) - even legal platforms can distribute infected files.
Disable permission to install APK for all these applications.