Full guide: how to get superuser rights on Android without errors

Obtaining administrator rights (or root-rights) on Android opens access to hidden system functions, but requires caution. This process transforms your device from a closed box into a flexible platform where you can remove built-in apps, optimize performance, or install custom firmware. However, along with opportunities come risks: from loss of warranty to “bricking” the smartphone.

In this article we will analyze relevant methods for obtaining root access in 2026including official and unofficial tools, and also explain why some methods (for example, through KingRoot or Framaroot) no longer work on modern devices. We will pay special attention to security - from creating a backup to checking the integrity of files before installing the firmware.

What are root access and why you need them

root access (from English root — “root”) give the user full control over the operating system Android, similar to administrator rights in Windows or sudo in Linux. With their help you can:

• 🔧 Remove pre-installed applications (bloatware) that cannot be uninstalled using standard methods.
• ⚡ Optimize battery and processor performance through the system kernel (for example, using Kernel Adiutor).
• 📱 Install custom firmware (LineageOS, Pixel Experience) to update outdated devices.
• 🔒 Block advertising at the system level via /etc/hosts.
• 📁 Access hidden memory sections, for example, for backup EFS (IMEI data).

However, there is a downside: many banking applications (for example, SberBank Online or Tinkoff) refuse to work on rooted devices due to security risks. In addition, over-the-air updates (OTA) may stop coming, and the manufacturer's warranty will be void.

⚠️ Attention: On devices with Samsung Knox (for example, Galaxy S23 or Note 20) obtaining root access will lead to irreversible triggering of the flag. Knox 0x1, which will block access to Samsung Pay, Secure Folder and other security functions.

Preparing the device: 5 mandatory steps before rooting

Before you begin to obtain root access, you must perform a number of steps to minimize risks. Skipping at least one step can lead to data loss or a “brick.” device.

Pay special attention to backup. Use TWRP (if. already installed) or cloud services like Google Drive. Suitable for contacts and SMS Swift Backup, and for applications - Titanium Backup (requires root, but can be used on another device for recovery).

To unlock OEM unlocking (required for most methods), go to Settings → About phone → Build number (press 7 times to activate developer mode), then to Settings → System → For Developers and enable:

• 🔓 OEM unlocking (may be absent on some devices).
• 🔧 USB debugging.

⚠️ Attention: On devices Xiaomi and Redmi before unlocking the bootloader, you need to link your account Mi to the device and wait up to 7 days (policy Xiaomi Anti-Rollback). Without this step, unlocking will not be possible.

Method 1: Unlocking the bootloader + Magisk (recommended method)

This is the most reliable and universal method that works on most modern devices (2018–2026). It involves unlocking the bootloader (bootloader) and installing Magisk a tool for managing root access, which masks them from applications (for example, banking).

The instructions are suitable for devices with Qualcomm Snapdragon, Samsung Exynos and some Mediatek. For Huawei and Honor (since 2019) this method does not work due to a locked bootloader.

1. Unlock the bootloader via fastboot:

   adb reboot bootloader
   fastboot flashing unlock

   On the device screen, confirm unlocking (using the volume + power buttons).

2. Install custom recovery (for example, TWRPDownload the image for your model from the official website twrp.me and flash:

   fastboot flash recovery twrp-3.7.0_xiaomi_lavender.img

3. Flash Magisk:
   1. Download the latest version Magisk (Magisk-v26.4.zip) from GitHub.
   2. Reboot in TWRP (adb reboot recovery).
   3. Click Install → select Magisk-v26.4.zip → swipe to install.
4. Reboot and check root through the app Magisk Manager.

What to do if Magisk does not install?

If after flashing Magisk the device boots into bootloop (cyclic reboot), try:

1. Flash Magisk into another slot (A/B).

2. Use the boot image patch via Magisk (for devices with dynamic partitions).

3. Remove all Magisk modules before installation.

Brand	Is bootloader unlocking supported	Features
Samsung	Yes (except for models with Knox 3.7+)	Required Odin for firmware TWRP.
Xiaomi/Redmi/Poco	Yes, but with a wait of 7 days	Use Mi Unlock Tool.
Google Pixel	Yes	Supports fastboot flashing unlock_critical.
OnePlus	Yes	Unlocking does not reset data.
Huawei/Honor (after 2019)	No	The bootloader is locked at the hardware level.

Method 2: Root without unlocking the bootloader (for Mediatek)

Devices on processors Mediatek (for example, Realme, Oppo, Tecno) often allow you to get root access without unlocking the bootloader through exploits in the kernel. One of the working tools is MTK Easy SU (for Android 9–12).

The advantage of the method: no data reset is required and the risk of a “brick” is minimal. Disadvantage: rights may disappear after a reboot, and some system changes will be blocked.

1. Download MTK Easy SU from XDA Developers.
2. Connect the device to a PC with enabled USB debugging.
3. Run MTK_Su.exe and follow the instructions (usually enough click Start).
4. After reboot, check your rights via Root Checker.

⚠️ Attention: On devices with Android 13+ kernels Mediatek Helio G99/Dimensity 9000 this method may not work due to closed vulnerabilities. Before use, check compatibility on the forum. XDA or 4PDA.

Method 3: Using custom firmware with pre-installed root

Some custom firmware (for example, LineageOS for microG or Havoc-OS) already include root access via Magisk. This method is suitable if you want not only root, but also a clean system without bloatware.

Installation process:

1. Unlock the bootloader (see Method 1).
2. Flash TWRP or other custom recovery.
3. Download the firmware (for example, from lineageos.org) and GApps (if you need Google services).
4. B TWRP run Wipe → Format Data (this will delete all data!).
5. Flash the firmware, then GApps, then Magisk.

Advantages:

• 🆕 Updated version of Android even on older devices.
• 🧹 No unnecessary applications.
• 🔒 Built-in support Magisk Hide to bypass checks (for example, in Pokémon GO).

Method 4: Root via ADB (temporary access)

If you need root access temporarily (for example, to change system files), you can use adb shell with superuser rights. This method does not require firmware, but the rights will disappear after a reboot.

Instructions:

1. Connect the device to the PC and make sure that USB debugging is enabled.
2. Open command line and enter:

   adb shell
   su

   If the device is already rooted, you will have access to root-shell.

3. For non-rooted devices, you can try exploits like DirtyCOW (works on Android 6–7), but this is risky.

Example commands to change file permissions:

adb shell
su
chmod 644 /system/etc/hosts

⚠️ Attention: Temporary root via ADB is not suitable for installing applications that require permanent rights (for example, Greenify or AdAway). Also, some manufacturers (for example Samsung) block access to su even on rooted devices through Knox.

Method 5: Alternatives to root access (if root is not possible)

If your device does not support bootloader unlocking (for example Huawei Mate 40 Pro or iPhone —just a joke, they are on iOS), consider alternatives:

• 📱 ADB AppControl: Managing applications via adb without root (for example, disabling bloatware).
• 🔄 Shizuku: Allows some applications (for example Tasker) to gain extended rights through adb.
• 🛠️ Island (Work Profile): Creates an isolated environment for testing applications without risk to the main system.
• 🔒 Xposed Framework (for Android 5–8): Modification of system functions without full root.

For example, to disable an unnecessary application via ADB, use the command:

adb shell pm uninstall -k --user 0 com.android.browser

Risks and how to minimize them

Getting root access is always associated with risks, but they can be reduced:

Risk	How to avoid
Data loss	Make a backup via TWRP or Swift Backup.
Brick device	Use only proven firmware and tools (for example, Magisk instead of SuperSU).
Blocking banking applications	Enable Magisk Hide and use modules like Universal SafetyNet Fix.
Security vulnerabilities	Do not install modules from unverified sources.

If the device has turned into a “brick” (hard brick), try:

1. Flash the stock firmware via Odin (for Samsung) or SP Flash Tool (for Mediatek).
2. Use EDL Mode (for Qualcomm) using QFil or Mi Flash.
3. Contact the service center (if nothing above helps).

FAQ: Frequently asked questions about root access

You can Is it possible to get root on Samsung Galaxy S23?

Technically yes, but with reservations: unlocking the bootloader will trigger the flag Knox 0x1which will disable Samsung Pay, Secure Folder other functions. In addition, Exynos 2300 there may be problems with Magisk due to the new signature verification mechanism AVB 2.0.

How to hide root from banking applications?

Use Magisk Hide (in settings Magisk Manager enable the option and add the application to the list For Android 12+ also install the module Universal SafetyNet Fix and go through the verification process YASNAC.

Will I lose the warranty after getting root?

Yes, most manufacturers (including Samsung, Xiaomi, OnePlus) will void the warranty if rooted or unlocked bootloader. However, some service centers may turn a blind eye to this if the problem is not related to the software part (for example, a broken screen).

Is it possible to update Android after getting root?

Over-the-air updates (OTA) will stop working, since they check the integrity of the system partitions. you need to:

1. Download the full firmware image for your model.
2. Flash it via TWRP or Odin (for Samsung).
3. Re-flash Magiskif it flew off.

How to remove root access?

To return the device to stock state:

1. Remove Magisk via Magisk Manager (option Uninstall).
2. Flash the original firmware via Odin/Fastboot.
3. For Samsung you may need to reset the flag Knox via Triangle Away (does not work on all models).

After this, the warranty will not be restored, but the device will return to factory settings.