Obtaining full control over the operating system Android opens up endless possibilities for the user to customize and optimize the device. root access allow you to remove pre-installed system junk, change the processor frequency and use powerful utilities for deep memory cleaning. However, this process is fraught with serious risks, including loss of warranty and the possibility of turning the smartphone into a “brick.”
In this article we will analyze in detail all stages of the procedure, from unlocking the bootloader to installing a rights manager. You have to make an informed decision as some banking apps and contactless payment services may not work on a rooted device. We will consider both software methods and the need to use a computer.
Before you begin, make sure that your firmware version is compatible with the chosen hacking method. Modern versions Android 12, 13 and 14 have enhanced protection, which is more difficult to bypass than on older devices. Prepare a backup copy of all important data, since the process almost always involves a complete reset.
Preparing the device and the risks of the procedure
The first step is to understand the consequences. Gaining root privileges will void the manufacturer's warranty in most cases. If the device fails during or after modification, the service center may refuse free repair. It is also worth noting that the function Google Pay or Samsung Pay is blocked by default when changes are detected in the system partition.
⚠️ Attention: The procedure for obtaining root access irreversibly changes the boot partition of the device. Incorrect actions can lead to complete inoperability of the gadget without the possibility of recovery using software methods.
You need to charge the smartphone battery to at least 70-80%. Interruption of the firmware process due to low battery is one of the most common causes of failure. You will also need to enable USB debugging mode in the developer menu. To do this, go to Settings → About phone and click 7 times on the build number.
After activating the developer menu, go to section System → For developers. Find the item USB debugging and activate it. Without this permission, the computer will not be able to send the necessary commands to the device through the interface ADB. Some manufacturers, for example Xiaomi or Huawei, require additional unlocking of the bootloader through the official website.
Unlocking the bootloader (Bootloader)
Most modern smartphones come with a locked bootloader, which prevents the installation of an unofficial recovery or modified kernel. Unlocking Bootloader is a mandatory step that clears all data from the internal storage. The process differs for different brands: in some places one command is enough, in others you need to wait for the unlock code for several days.
For devices with a clean Android or Pixel the procedure is standard. Connect your phone to your PC, open the command line in the platform tools folder and enter the command to switch to Fastboot mode. Next, the unlock command is used, which requires confirmation on the screen of the smartphone itself. On devices Samsung this is done through a key combination and confirmation in a special menu Download Mode.
adb reboot bootloader
fastboot flashing unlock
After successful unlocking, the device will reboot and reset to factory settings. A warning may appear on the download screen indicating that the software is not certified. This is normal and indicates successful completion of the step. Now the phone is ready to install a custom recovery, such as TWRP.
Take a photo of the IMEI number on the box before unlocking. In rare cases, if there are failures, it may be needed to restore network functions through the engineering menu.
Installing custom Recovery (TWRP)
The standard Android recovery menu has limited functionality and does not allow installing ZIP archives with access rights. TWRP Recovery (Team Win Recovery Project) - this is the most popular solution that provides complete access to the file system. You need to find an image specifically for your device model, since there are no universal versions.
Download the image file with the extension .img from the official project website or a reputable forum 4PDA. Place the file in the folder with ADB drivers on your computer. Switch your smartphone to Fastboot or Download mode (depending on the model) and connect it to the PC with a cable. The firmware command varies, but most often the standard syntax is used fastboot.
| Manufacturer | TWRP installation command | Features |
|---|---|---|
| Xiaomi / Poco | fastboot flash recovery twrp.img |
Requires unlocked BL |
| Samsung | Flashing via Odin (.tar) | You need to disable Auto Reboot |
| Google Pixel | fastboot flash boot twrp.img |
The boot section is used |
| OnePlus | fastboot flash recovery twrp.img |
Immediately boots into TWRP |
An important nuance: after installing TWRP you cannot immediately boot into the system. If you do this, the stock recovery will overwrite the custom one and all your efforts will be in vain. You must immediately hold down the key combination (usually Volume Up + Power) to enter the new menu. Only when you are inside TWRPcan you proceed to the next step.
What to do if TWRP is not installed?
If the command is executed, but Recovery does not change, you may have a device with dynamic partitions (A/B). In this case, you need to flash the image into the boot_a and boot_b slots separately, or use specialized scripts for your model.
Installing Magisk and obtaining root access
Today Magisk is the de facto standard for obtaining Root access. Unlike the old method SuperSU, Magisk works systemically seamlessly (Systemless), which allows you to hide the fact of having rights from banking applications. You will need the Magisk manager APK file and the stock firmware file (boot.img) for your device.
The process is as follows: install the Magisk application on your phone, launch it and select "Install". Select "Select and patch file" as the method. Specify the path to the extracted file boot.img from the stock firmware. The app will create a modified file magisk_patched.img in the downloads folder.
⚠️ Attention: Never use a patched file from another phone model or another version of Android. This is guaranteed to lead to a cyclic reboot (bootloop).
Copy the resulting patched file back to your computer. Put your phone into Fastboot mode again and run the command to flash the modified image. After rebooting, the Magisk application will appear on the system, which will confirm that you have superuser rights. Now you can install modules and manage application access.
fastboot flash boot magisk_patched.img
fastboot reboot
☑️ Checking successful rooting
Alternative methods: KingRoot and OneClickRoot
There are utilities that promise to obtain rights in one click without using a computer and unlocking the bootloader. Applications like KingRoot or Framaroot use vulnerabilities in the system kernel to escalate privileges. This method is only suitable for very old devices running Android 5-7, since modern security holes have long been closed by manufacturers.
The use of such apps carries increased security risks. You don't know what code is running on your device, and often such utilities contain hidden miners or spyware. In addition, they install their own rights manager, which is difficult to remove and which conflicts with modern modules.
If you have a new device, forget about these methods. They do not work on processors with the new security architecture and can only clog the system with advertising junk. The only reliable way for modern smartphones is to manually unlock and use Magisk or KernelSU. Saving time here is not worth the loss of personal data.
One-click methods are practically useless on Android 10 and higher. The only working method for new devices is unlocking the bootloader and flashing a patched image.
Hiding Root and solving security problems
After successfully obtaining root access, you will be faced with the fact that some applications refuse to start. Banks, Google Wallet and games with anti-cheat modifications. There is a function in Magisk Zygisk and a list of exceptions (DenyList), which allows you to hide the fact of rooting from specific applications. Activate Zygisk in Magisk settings and reboot your device.
Next you need to add the target applications to the hide list. Go to Magisk settings, select “Customize exclusion list” and check the boxes for banking applications, Google Play Services and Google Wallet. It is also important to hide the Magisk application itself by renaming its package and changing the icon through the “Hide Magisk application” setting.
In some cases, it is necessary to install additional modules, such as Shamiko or Universal SafetyNet Fix. They help pass the system integrity check Play Integrity API. Without passing this check, contactless payment will not work, even if the bank application is running. Stay tuned for updates to these modules, as Google is constantly changing detection algorithms.
⚠️ Attention: Interfaces and names of functions in banking applications may change. If payment stops working after updating the system, check the status of the device in the Google Wallet application through the “Settings” -> “Device Status” section.
Return to stock state (Unroot)
If you decide to give up root access or need to sell the phone, you need to return the device to its original state. The Magisk app has a "Full uninstall" button that automatically removes the entitlement binaries and restores the stock boot image. However, this will not close the bootloader back.
To fully restore the warranty and hide the fact of interference, you need to re-lock the Bootloader. This is only possible if you have not changed sections that are critical for signature verification (for example, on some Samsung this is not possible after the Knox counter is triggered). The process requires flashing the full stock firmware through official utilities (Odin, MiFlash, SP Flash Tool).
Remember that re-locking the bootloader on devices with custom Recovery will lead to a “brick”. First restore stock Recovery, then lock the bootloader. Only after this the device will look like new to the service center. Make sure you have the original firmware files before starting this procedure.
What is a Knox counter?
On Samsung devices, the Knox physical fuse (e-fuse) tripping when unlocking the bootloader is irreversible. Even returning to stock state will not allow you to use Samsung Pay or a protected folder again.
Will root access reset the phone to factory settings?
A normal factory reset via the Android menu does not remove root access, since they are written in the system partition, which is not affected when resetting user data. To remove rights, you need to use the Unroot function in Magisk or reflash the device.
Is it possible to get OTA updates after rooting?
Automatic over-the-air (OTA) updates are most often not installed on rooted devices with an unlocked bootloader. You will have to download the firmware manually and install it through the computer, while maintaining Root (by re-patching boot.img).
Is it safe to enter card data on a rooted phone?
Technically, if you have correctly configured Root hiding (Magisk Hide / DenyList) and use only proven modules, there is a risk minimal. However, the very possibility of having malware with superuser rights theoretically increases the vulnerability of the system compared to stock.
Do you need a computer to get Root on all phones?
For modern smartphones (Android 10+), a computer is required to unlock the bootloader and flash the image. On very old devices (Android 6 and below), there were methods for setting rights directly from the phone through vulnerabilities, but now they are not relevant.