How to get root access to Android without a PC: a complete guide with risks and solutions

Getting root access (superuser) on Android without a computer is a task that seems impossible to many users. However, modern methods make it possible to circumvent this limitation using only the smartphone itself. In this article we will analyze current methods of rooting without a PC, their features for different manufacturers (Xiaomi, Samsung, Realme etc.), as well as pitfalls that are rarely discussed in short guides.

It is important to understand: the process of obtaining root access has changed dramatically in recent years years. If earlier it was enough to install KingRoot or Framaroot, today many methods require unlocking the bootloader, working with Magisk and even bypassing protected partitions. We have collected 5 working methods for 2026 5 working methods for 2026, which cover 90% of current devices - from budget Redmi to flagship Galaxy S24.

Before you start, answer yourself two questions: why do you need root (deleted system applications, custom firmware, modification of games?) and are you ready for the consequences (loss of warranty, problems with banking applications, possible “brick” of the device). If yes, read on.

1. Preparing the device: what needs to be done BEFORE rooting

Before you can get root access without a PC, the device requires preliminary setup. Skipping these steps may lead to inability to complete the process or even software damage to your smartphone. Let's start with the most important:

• 🔋 Battery charge is at least 70%. The rooting process can take from 10 minutes to an hour, and a sudden power outage at critical stages often leads to a “brick” (inoperability of the device).
• 📱 Data backup. Use Google Drive, Titanium Backup (if you already have root) or physical copying to a memory card. Pay special attention to:
  • Contacts and SMS (export to .vcf i .xml)
  • Photos/videos in original resolution
  • Game saves (via Helium or manual folder transfer /Android/obb/)
• 🔓 OEM unlocking and USB debuggingEven if you do not connect a PC, these settings must be activated:
  1. Go in Settings → About phone → Build number and tap 7 times to activate developer mode.
  2. Go back to Settings → System → For developers and enable:
     • OEM unlocking (critically important!)
     • USB debugging

For devices Xiaomi, Redmi i POCO Additionally, you will need to link your Mi account to device (even if you do not plan to use Mi Unlock Tool). This is due to the company's bootloader protection policy. On Samsung processors, you may need to disable Exynos-processors may require shutdown Knox (more on this below).

⚠️ Attention: On some devices (for example Samsung Galaxy S22+ and newer) OEM unlocking is automatically reset after a reboot. Check this parameter immediately before starting rooting!

The battery is charged at 70%+

A backup of important information has been made. data

OEM unlocking is enabled

USB debugging is activated

The device is not tied to corporate MDM policies-->

2 Method 1: Rooting via Magisk (without PC, but with TWRP)

Magisk is the most reliable and universal method of obtaining root access today. However, to use it without a PC you will need already installed custom recovery TWRP. If it is not there, skip this section and proceed to method 3.

Instructions for devices with an unlocked bootloader and TWRP:

1. Download the latest version of Magisk (Magisk-v26.4.zip or later) from the official GitHub repository. Do not use third-party sources - there is a high risk of getting modified versions with backdoors.
2. Transfer the ZIP file to the root folder of the internal memory (not in folder!).
3. Reboot into TWRP:
   • Turn off the device.
   • Hold down the button combination (usually Power + Volume up, but for Samsung this Power + Bixby + Volume up).

In TWRP select Install → specify the path to Magisk-v26.4.zip → swipe to confirm.

After installation, press Reboot System. The first launch may take up to 10 minutes.

If after rebooting the device is stuck on the logo, don’t panic. Try:

• Wait 15–20 minutes (sometimes the system takes a long time to optimize applications).
• Reboot into TWRP and repeat the Magisk installation.
• Install Disable_Dm-Verity_ForceEncrypt.zip (if there is a problem with encryption).

Manufacturer	TWRP support	Magisk features
Xiaomi/Redmi/POCO	Yes (official and unofficial builds)	Requires bootloader unlocking Mi Unlock Tool (even if you only use a phone)
Samsung (Exynos)	Yes (unofficial ports)	You need to disable Knox and RMM State before installation
Realme/Oppo	Partially (depends depending on the model)	A patch may be required boot.img via Magisk Manager
Google Pixel	Yes (official builds)	The easiest way is to root, but there is a high risk of losing OTA updates

⚠️ Attention: On devices With Dynamic Partition (for example Samsung Galaxy S21 and newer), installing Magisk via TWRP may lead to data loss in the partition /data. It is recommended to use an alternative method with a patch boot.img (method 4).

Xiaomi/Redmi/POCO|Samsung|Realme/Oppo|Google Pixel|Other brand-->

3. Method 2: One-click rooting applications (KingRoot, iRoot, etc.)

The one-tap method was popular in 2016-2019, but today its effectiveness has dropped to 10-15% due to tightened Android security. However, for older devices (Android 8.1 and below) or little-known brands (Doogee, Ulefone) it may work.

The most famous applications:

• 👑 KingRoot - supports up to Android 10, but often installs Chinese software.
• 🛠️ iRoot - works on MediaTek-devices, but requires an Internet connection.
• 🔧 OneClickRoot - paid a solution with a dubious reputation.
• 🧙 360 Root - Chinese software, can be blocked by antiviruses.

Step-by-step guide (using KingRoot as an example):

1. Download the APK file from the official website (not from Google Play!).
2. Allow installation from unknown sources in Settings → Security.
3. Install and run the application.
4. Click Try to Root and wait for completion (may take up to 30 minutes). data-i="154">Reboot the device.
5. Reboot your device.

If after the reboot the application appeared SuperSU or KingUser - root received. However, be prepared for:

• Automatic installation of unnecessary applications (like Baidu or UC Browser).
• Loss of OTA updates (the system will generate an error when checking).
• Problems with SafetyNet (will not work Google Pay, Netflix, banking applications).

What what to do if KingRoot does not work?

If after several attempts KingRoot gives the error "Root failed", try:

1. Install an older version of the application (for example, 5.3.7 instead of 6.0+).

2. Disable the Internet before starting (sometimes KingRoot servers block devices). region).

3. Use MTK Su for MediaTekprocessors (requires unlocking the bootloader).

4. Check the compatibility of your model on the forums XDA Developers or 4PDA.

4. Method 3: Patch boot.img via Magisk Manager (for modern Androids)

This method has become the main one for devices on Android 11–14where traditional rooting methods are blocked. The idea is to extract the original boot.img, modify it via Magisk Manager and then flash the firmware via fastboot (yes, technically a PC is needed here, but we will get around this limitation!).

To do this without a computer you will need:

• 📱 A second Android smartphone (or tablet) with an OTG cable.
• 🔌 Application Termux with package fastboot.
• 📁 Original firmware for your model (downloaded from the manufacturer's official website).

Step-by-step guide:

1. Download the firmware for your model (for example, fastboot-rom-for-redmi-note-11.zip). Unzip it and find the file boot.img.
2. Transfer boot.img to the device you want to root.
3. Install Magisk Manager (download only from GitHub).
4. In Magisk Manager, click Install → Select and Patch a File → select boot.img.
5. After patching, the file magisk_patched.img will appear in the folder Download.
6. Flash the patched boot.img via fastboot:
   • Connect the device to the second smartphone via OTG.
   • In Termux run the commands:

     su
     fastboot flash boot /sdcard/Download/magisk_patched.img
     fastboot reboot

If you do not have a second device, you can try using Bugjaeger (application for OTG debugging), but the stability of this method is lower. Samsung instead of boot.img may require a patch AP.tar (this is a separate topic that requires Odin).

5. Method 4: Rooting through exploits (DirtyCOW, CVE-2023-XXXX)

Exploits Android kernel vulnerabilities - the most risky, but sometimes the only way to get root on locked devices. Popular exploits:

• 🐄 DirtyCOW (CVE-2016-5195) - works on Android 6–7.
• 🔓 CVE-2023-21036 - vulnerability in Pixel 6/7 (fixed in the January patch). 2026).
• 🧩 Master Key — for older versions Samsung.

Example of using DirtyCOW (for advanced users only!):

1. Download dirtycow-root.zip and unzip.
2. Connect to the device via ADB (can be used Termux on the phone itself).
3. Run the commands:

   adb push dirtyc0w /data/local/tmp
   adb shell
   chmod 777 /data/local/tmp/dirtyc0w
   /data/local/tmp/dirtyc0w

4. If the exploit worked, you will gain root access before the first reboot.

⚠️ Attention: Using exploits can lead to to:

• Unstable operation of the system (random reboots, lags).
• Blocking of the device by the manufacturer (for example, Samsung can activate eFuse and permanently block bootloader).
• Data leak (some exploits open security holes).

Use only if other methods do not work and you are ready for the consequences!

6. Method 5: Rooting via custom firmware (LineageOS, Pixel Experience)

Installing custom firmware with pre-rooted root is a radical but effective method. Advantages:

• 🆕 Current versions of Android (even for older devices).
• 🔒 Built-in Magisk or SuperSU.
• 🚀 Performance optimization (no bloatware).

How to install custom firmware without a PC:

1. Download the firmware (for example, LineageOS for your model) and OrangeFox Recovery (TWRP alternative).
2. Install Flashify or Rashr from Google Play.
3. Through these applications, flash OrangeFox Recovery to the section recovery.
4. Reboot into recovery and install ZIP firmware.
5. After installation, flash Magisk (if root is not installed by default).

Popular firmware with root:

Firmware	Root support	Minimal Android
LineageOS	Requires additional installation of Magisk	Android 8.1
Pixel Experience	Built-in Magisk (optional)	Android 10
Havoc-OS	Root by default	Android 11
CrDroid	Requires Magisk	Android 9

For Samsung the process becomes more complicated due to Knox i VaultKeeper. On the forum XDA there are special firmwares like Havoc-OS for Exynos, but they often require a preliminary shutdown. RMM State.

7. Risks and how to minimize them

Getting root access without a PC carries the same risks as with a computer, but adds difficulties with rolling back changes. Main threats:

• 💀 "Brick" device — complete or partial loss of functionality. Most often occurs due to:
  • Interruption of the rooting process.
  • Incompatibility of the firmware with the model.
  • Errors during the patch boot.img.
• 🛡️ Problems with SafetyNet —inability to use:
  • Banking applications (Sberbank Online, Tinkoff).
  • Google Pay, Samsung Pay.
  • Games with protection (Pokémon GO, Genshin Impact).
• 🔄 Loss of OTA updates — the system will stop receiving updates over the air.
• 🔒 Security vulnerabilities — root opens access to system files for all applications.

How to reduce risks:

• Use MagiskHide (built into Magisk) to bypass SafetyNet.
• Install modules only from trusted sources (Magisk Modules Repo).
• Regularly update Magisk and the kernel.
• Create a full backup in TWRP before experiments.

If the device is bricked:

• For Qualcommchips: use EDL Mode (9008) and Mi Flash Tool (even without a PC you can via OTG).
• For MediaTek: try SP Flash Tool with an authorization file.
• For Samsung: only Odin on a PC (no options).

8. Alternatives to root: what can be done without a superuser

If root is needed only for uninstalling system applications or fine-tuning - consider alternatives:

• 🧹 ADB AppControl — removing bloatware without root through ADB:

  adb shell pm uninstall -k --user 0 com.android.bloatware

• ⚙️ Shizuku + AppOps — managing application permissions.
• 🎮 Island/Work Profile — isolating applications without root.
• 🔧 Tasker + AutoTools —automation without system rights.

For games:

• Lucky Patcher (works on Android 9 and below).
• GameGuardian (requires root, but there are workarounds for emulators).
• VirtualXposed — virtual environment with Xposed rights.

If the goal is to customize the interface:

• Lawnchair — custom launcher with Pixel functions.
• Substratum - themes without root (on Android 8-9).
• Hex Installer - alternative to Substratum for new Androids.

FAQ: Frequently asked questions about rooting without a PC

❓ Is it possible to get root on Samsung without a PC?

Technically yes, but with reservations:

• On Exynos-models (Galaxy S22 Ultra, Note 20) can be used Magisk + patch AP.tar, but you will need an OTG cable and a second phone.
• On Snapdragon-models (for example Galaxy S23 for the USA) the bootloader is locked to hardware level - root without a PC is impossible.
• In any case, you will have to disable Knox, which leads to loss of warranty and problems with Samsung Pay.

❓ Why do banking applications not work after rooting?

This is due to SafetyNet — Android integrity verification system. Solutions:

1. In Magisk, enable MagiskHide and add the banking application to the list.
2. Install the module Universal SafetyNet Fix.
3. Use alternative versions of applications (for example, Sberbank Online for Android Go).
4. For Samsung you may need to reset Knox via Triangle Away (risky!).

If all else fails, consider the option of working in a virtual machine second user (Android 10+) or working in a virtual machine (UserLAnd).

❓ How to remove root and return everything as it was?

Methods depend on the rooting method:

• KingRoot/iRoot: Install SuperSU and select "Full Unroot" in the settings.
• Magisk: In Magisk Manager, click Uninstall → Complete Uninstall.
• Custom recovery: Flash the original boot.img via TWRP.
• Firmware: Return to stock firmware via fastboot or Odin.

For complete reset (if you need to hide the fact of rooting before selling):

1. Flash the stock firmware.
2. Restore the stock recovery.
3. Reset Lock State (for Xiaomi — via Mi Flash Tool with option clean all and lock).

❓ Does root work on Android 14?

Yes, but with serious limitations:

• Magisk supports Android 14, but requires manual patching init_boot.img (instead of boot.img).
• On Pixel 8 and later, root is only possible through exploits (there are no stable methods yet).
• Samsung One UI 6.0 blocks most traditional methods - you will need to wait for updates from the community XDA.
• Functions like Zygisk (replacement MagiskHide) may not work on all devices.

Recommendation: if root is needed for customization, consider GSI firmware (Generic System Image) with Magisk pre-built.

❓ Is it possible to get root on Huawei after a Google ban?

The situation with Huawei is complicated due to:

• Locked bootloader on models after 2019 (P40, Mate 40).
• Lack of official support fastboot oem unlock.
• Proprietary file system EROFSwhich is difficult to modify.

Possible solutions:

1. For Kirin 980/990 (for example, P30 Pro): use Huawei Multi-Tool to unlock the bootloader (risk of bricking ~30%).
2. For new models: only exploits (for example, CVE-2021-22555), but they often require a PC.
3. Alternative: installation OpenKirin or GSI firmware via fastboot (PC required).

Important: on Huawei with Hongmeng OS (HarmonyOS) root is impossible - the system uses a microkernel LiteOSthat is incompatible with traditional methods.