Owners of devices running an operating system Android 6.0 Marshmallowoften face restrictions imposed by the manufacturer or telecom operator. The standard interface does not allow you to remove system applications, change fonts, or use powerful utilities for deep memory cleaning and overclocking the processor. It is to solve these problems that users are looking for a way to get root access on Android 6 in order to gain full control over their gadget.
The process of obtaining superuser rights in this version of the OS has its own unique features that distinguish it from newer versions of Android. Marshmallow has introduced new protection mechanisms, such as SELinux and Verified Boot, which require a more careful approach to unlocking bootloader. In this material, we will analyze in detail the safe methods, necessary tools and potential risks that you may encounter.
Before taking active steps, you must clearly understand that any intervention in the system partition carries risks. Incorrect firmware or interruption of data recording to the /system partition on Android 6 often leads to a cyclic reboot (bootloop), which cannot be corrected by simply resetting the settings. However, if you follow the instructions and prepare the device correctly, you can unlock the full potential of your smartphone or tablet.
Preparation of the device and necessary tools
The beginning of the path to obtaining superuser rights requires careful preparation of the workplace and the smartphone itself. You will need a computer with an operating system Windows, macOS or Linux, as well as a high-quality USB cable that can transfer data, and not just charge the battery. Make sure that the device charge is at least 70-80%, as the process can take considerable time and energy consumption in debugging mode increases significantly.
The first step is to activate the hidden developer menu. To do this, go to Settings → About phone and find the “Build number” item. You must quickly click on this item 7 times in a row until the system notifies you that you have become a developer. After this, a new section will appear in the main settings menu For developers, where you need to activate the “USB Debugging” item.
You need to install ADB and Fastboot drivers on your computer, which are the bridge between your PC and your smartphone. Without these components, the computer simply will not see the device in command line mode. It is also worth downloading universal drivers for your processor, be it Snapdragon, MediaTek or Exynos, since standard Windows drivers may not work correctly.
☑️ Ready for rooting
The critically important step is to create a full backup of all data. Obtaining root access often involves unlocking the bootloader, which in 99% of cases leads to the complete deletion of user data (Factory Reset). Save contacts, photos and important documents to the cloud or to an external storage device so as not to lose them forever.
Unlocking the bootloader
Most modern smartphones come with a locked bootloader, which is a security measure to prevent the installation of malware. However, to install a custom recovery and gain root access, this lock must be removed. The process varies depending on the manufacturer: some, seperti Xiaomi or Sony, require obtaining a special unlock code through the official website.
For devices Nexus, Pixel and many other models, the process often comes down to executing a command in Fastboot mode. After switching the smartphone to the appropriate mode (usually by holding down the volume down button when turning it on), connect it to the PC and enter the command to check the status: fastboot oem device-info. If the status shows Device unlocked: false, unlocking.
⚠️ Attention: Unlocking the bootloader on devices from Samsung, Huawei and some other brands may permanently trigger the Knox tripper or a similar counter, which will lead to loss of warranty and the inability to use protected applications like Samsung Pay or banking services even after returning the stock firmware.
If the manufacturer provides an unlock code, the procedure is as follows. In the command line, located in the platform-tools folder, enter the command: fastboot oem unlock [YOUR_CODE]. A warning about data loss will appear on the smartphone screen, which must be confirmed with the volume buttons. The device will reboot and reset to factory settings.
What to do if the manufacturer does not provide the code?
There are paid services and exploits for unlocking the bootloader without a code, but they often require disassembling the phone and short circuiting the contacts on the board (test point) or using specific software like DC-Unlocker. Using such methods is extremely risky and can lead to physical damage to the device.
Installing custom TWRP recovery
The stock recovery menu (Stock Recovery) has extremely limited functionality and does not allow you to install third-party zip archives or obtain root access. It is being replaced by TWRP (Team Win Recovery Project) the gold standard of custom recovery. It has a touch interface and allows you to make full system backups (Nandroid backup).
To install, you need to download a recovery image that strictly corresponds to your device model. The file usually has the extension .img. After downloading, place it in the folder with ADB drivers and rename it twrp.img for convenience. Put your smartphone into Fastboot mode and run the command: fastboot flash recovery twrp.img.
However, on Android 6 there is an important nuance. The custom system can automatically replace the custom recovery with the stock one at the first boot. To prevent this, immediately after flashing TWRP, you need to execute the command to enter recovery mode, preventing the system from starting: fastboot boot twrp.img. This will launch TWRP temporarily, and inside it you will need to secure the rights to change the system partition.
If TWRP does not open or shows a black screen, try the version for your processor (for example, separately for Snapdragon and separately for MediaTek), since the kernels may differ even within the same phone model.
After successfully launching TWRP, you will see the touch menu. If the system asks for a password or pattern, and you have not entered it into TWRP before, you may need to format the data (not just wipe, but format data), which will delete all data, but will allow you to work with partitions. This is the standard procedure for protecting Android 6 data.
Methods of obtaining root via KingRoot and KingoRoot
For users who do not want to bother with the command line and unlocking the bootloader, there are automatic applications such as KingRoot and KingoRoot. These apps exploit vulnerabilities in the Android 6.0 kernel to inject their root user. They work on a “one-click” principle and are often successful on devices from Chinese manufacturers.
The installation process is simple: download the APK file of the application (version for Android, not for PC, if you install it directly on your phone), allow installation from unknown sources and run a scan. The application will detect the model and try to find an exploit. The success rate of the method is about 60-70% for Android 6, since many vulnerabilities have already been closed by manufacturers.
| Parameter | KingRoot | KingoRoot (PC) | Manual TWRP |
|---|---|---|---|
| Difficulty | Low | Medium | High |
| Need PC | No | Yes | Yes |
| BL Unlock | Not required | Often required | Required |
| Risk brick | Low | Medium | High |
Main The disadvantage of such methods is the installation of a proprietary rights manager, which is difficult to remove, and the potential transfer of data to developer servers. In addition, after successful rooting, it is recommended to immediately replace the built-in superuser with a more reliable one Magisk or SuperSUif the specific version of KingRoot allows it.
Using Magisk for hidden root
In the modern Android ecosystem, Magiskhas become the de facto standard. Unlike older methods that modified the system partition (/system), Magisk works in systemless mode. This means that it makes changes to the boot partition (boot), leaving the system partition untouched.
For Android 6, the Magisk installation process via TWRP looks like this: download the zip archive with the latest version of Magisk and copy it to your phone. Boot into TWRP, press the Installbutton, select the archive and confirm the installation by swiping. After the reboot, you will have root access and the Magisk Manager application.
The key advantage of Magisk on Android 6 is the ability to bypass security checks. Many banking apps and games (such as Pokemon GO) do not work on rooted devices. Magisk Hide allows you to hide the fact that you have root access from specific applications, making their use possible. This is achieved by creating an isolated space for these apps.
⚠️ Attention: On Android 6.0, the Magisk Hide function may be unstable on some firmware. If the bank application still sees root, try enabling Zygisk in the Magisk settings (if the version allows) or using modules to hide the root, but remember that this is a game of cat and mouse with application developers.
Possible problems and solutions
The rooting process rarely goes perfectly smoothly for all users. One of the common problems on Android 6 is the loss of Wi-Fi or Bluetooth after installing a custom recovery. This is due to the fact that some stock recovery updates the modem or firmware sections, but custom ones do not, or do it incorrectly.
Another common problem is “bootlap” (cyclic reboot). If your phone keeps rebooting after rooting, don't panic. Go to TWRP, select Wipe → Advanced Wipe and clear Dalvik/ART cache and system cache (Cache). Do not touch the Data section if you do not want to lose data, but often a full reset (Format Data) helps.
Users also encounter the “Software update available” problem when the system stops updating over the air (OTA). The presence of a modified bootloader or a modified boot image blocks the installation of official updates. To return the ability to update, you will have to completely reflash the device in stock image using tools like Odin (for Samsung) or Fastboot.
The most common reason for unsuccessful rooting on Android 6 is the use of a TWRP image intended for a different revision of the device or a different version of Android (for example, TWRP for Android 7 on Android 6).
Frequently asked questions (FAQ)
Will updating the system over the air (OTA) reset root access?
Yes, in most cases, updating the system will overwrite the modified boot partition, and root access will disappear. In addition, the update itself may not install if the bootloader is unlocked. It is recommended to make a full backup before updating and be prepared to repeat the rooting procedure.
Is it possible to get root on Android 6 without a computer?
Yes, this is possible using applications like KingRoot, OneClickRoot or Towelroot (although for Android 6 Towelroot is already of little use). However, (the probability of success) is lower than when using a computer and TWRP, and such methods are less secure.
Will root affect the camera's performance and photo quality?
Root itself does not affect the quality. However, if you install a module that modifies the image processor or remove the camera's system libraries, the quality may deteriorate. When root access is installed correctly via Magisk, the photo quality remains normal.
What to do if Google Pay stops working after rooting?
Google Pay (now Google Wallet) does not work on devices with root access for security reasons. You need to use the hiding function in Magisk (Magisk Hide) for the Google Play Services application and the wallet itself, or install the Universal SafetyNet Fix module.