Obtaining superuser rights, or root access, on Lenovo smartphones opens up almost limitless possibilities for customization and optimization for the device owner. Unlike standard operation, when the user is limited by the framework established by the manufacturer, root access allows you to remove system garbage, change the processor frequency and install exclusive modules. However, the process on devices of the Chinese brand has its own characteristics related to the security policy and the specifics of the bootloader.
In this article we will analyze in detail all the stages: from preparing the tool to the final installation Magisk. It is important to understand that the procedure is not trivial and requires care, since incorrect actions can lead to turning your Lenovo K6 Note or Legion Phone Duel into a “brick”. Modern versions of Android, especially starting from 11 and 12, have significantly complicated the procedure due to the introduction of Verified Boot and data encryption.
Before taking active steps, you need to understand the risks. Warranty the device will be canceled immediately after unlocking the bootloader, and some banking applications will stop working without additional manipulations to hide root access. However, for enthusiasts who want to get the most out of hardware, this is the only right way.
Preparation of the device and risk assessment
The first step is to create a full backup of all important data. The process of unlocking the bootloader, which is a prerequisite for rooting a Lenovo, completely cleanses internal memory smartphone. This means losing photos, contacts and messages if they are not saved in the cloud or on your computer.
You will need to charge the device to at least 70-80%. Interruption of the firmware or unlocking process due to a dead battery is one of the most common reasons for device failure. Also make sure that you have an original or high-quality certified USB cable, since cheap analogues often do not provide stable data transfer.
⚠️ Attention: After unlocking the bootloader, the Widevine L1 function may be downgraded to L3, which will lead to the loss of the ability to watch content in HD/4K quality on streaming services like Netflix.
You need to enable USB debugging mode in the developer settings. To do this, go to Settings → About phone and quickly click 7 times on the item Build number. After the message “You have become a developer” appears, go to the menu System → For developers and activate the switch Debugging USB.
⚠️ Attention: The settings menu interface may differ depending on the version of the ZUI shell or pure Android. If you cannot find the item you need, use the search in the settings.
Unlocking the bootloader
The most difficult step for many Lenovo owners is the official unlocking of the bootloader. Lenovo periodically closes and opens access to obtaining an unlock code on its portal. You will need to register on the official Lenovo support website and apply to receive unlock code.
After receiving the code (usually it arrives by email within a few days or instantly), you need to put the phone into Fastboot mode. Turn off your smartphone, then hold down the Volume Down button and the Power button at the same time until the Fastboot logo appears. Connect the device to a PC that has ADB and Fastboot drivers pre-installed.
Open the command line on your computer and enter the command to test the connection:
fastboot devicesIf the device serial number is displayed in response, the connection is established. Next, enter the command to unlock:
fastboot oem unlock YOUR_CODEA warning will appear on the smartphone screen stating that all data will be deleted. Confirm the action with the volume buttons. After the reboot, the bootloader will be unlocked, which will be indicated by a message when you turn on the device. Now the way to install custom recovery is open.
☑️ Ready to unlock
Installing custom TWRP recovery
Standard recovery (Stock Recovery) does not allow installing unsigned files, such as archives with root access. Therefore, it is necessary to flash Team Win Recovery Project (TWRP). It is extremely important to download the image designed specifically for your model. Firmware from Lenovo Z6 Pro is not suitable for Lenovo Legion and can damage the device.
Rename the downloaded image file (usually with the extension .img) to recovery.img and place it in the ADB tools folder on the computer. Put your phone into Fastboot mode again. To flash the recovery firmware, use the command:
fastboot flash recovery recovery.imgThere is an important nuance for modern devices with A/B partitions. After flashing the firmware, you cannot immediately reboot into the system, otherwise the stock recovery will overwrite the installed TWRP. You must immediately hold down the power and volume up buttons to get to the recovery menu.
What to do if TWRP is not installed?
If the fastboot command gives an error, your bootloader may be locked again or a dynamic partition is being used. In this case, try the fastboot flash boot recovery.img command or use the QFIL utility for devices on a Qualcomm processor.
In the TWRP menu, first of all, make a backup of the current system state (Boot, System, Data sections). This is your insurance in case of unsuccessful root installation. It is also recommended to disable signature verification (Disable DM-Verify) in the TWRP settings, if such an option is available in your version.
Installing Magisk and obtaining root access
Today Magisk is the de facto standard for obtaining superuser rights. Unlike old methods (SuperSU), Magisk works systemically, which allows you to hide the fact of having root from banking applications and games with anti-cheat.
Download the latest version of the Magisk archive (.apk file) and rename it to magisk.zip (or just copy the apk to the phone's memory if TWRP supports apk installation). Boot into TWRP mode, select Install and specify the path to the Magisk file. Swipe to confirm the installation.
After successful installation, press the button Reboot System. When you boot for the first time, the process may take longer than usual - this is normal as the system rebuilds the boot image. Once turned on, find the Magisk icon in the application menu. If it is there and when opened, the version line displays a number rather than “N/A”, it means root access active.
| Stage | Required tool | Risk of data loss | Difficulty |
|---|---|---|---|
| Unlock BL | PC, Lenovo Code | Full wipe | High |
| Installing TWRP | Image recovery.img | No (with backup) | Average |
| Installing Magisk | Magisk archive | No | Low |
| Hide Root | Magisk Settings | No | Medium |
For To check your rights, download the Root Checker application from Google Play. It will instantly show whether superuser access has been granted correctly.
Setting up hiding Root for banking applications
Many users are faced with the fact that after receiving rights, banking applications stop launching or require removing Magisk. The solution lies in the function Zygisk and the list of exceptions. Open the Magisk application, go to the settings (gear) and activate the “Zygisk” and “Enforce DenyList” items.
Next, go to the “Configure DenyList” item. Here you need to find and tick all applications that require no root: banking clients, Google Pay (Wallet), various games with protection. Don't forget to expand the nested lists of applications and mark all processes associated with them.
After setting up the list, restart your device. If this does not help, you may need to install the module Universal SafetyNet Fix (for older versions of Android) or use the "Hide the Magisk app" function in the settings to rename the application and hide it from simple detectors.
⚠️ Attention: Google is constantly updating its security verification mechanisms (Play Integrity API). Hiding methods that work today may no longer work after an update to Google Play Services. Follow the updates in the developer community.
Possible problems and solutions
One of the common problems on Lenovo devices is a cyclic reboot (bootloop) after installing modules. If the phone does not boot beyond the logo, try entering Recovery mode and removing the problematic module through the TWRP file manager (the usual path /data/adb/modules).
If unlocking the bootloader was successful, but TWRP is not installed or displays a signature error, your device may have protection enabled Secure Bootthat cannot be disabled using standard methods. In this case, search for specific instructions for your model on the specialized forums (4PDA, XDA) is the only way out.
It is also worth noting the problem with data encryption. On Android 11+, TWRP may not see the internal memory due to encryption. The solution is to format the Data section (Format Data button in the Wipe menu), but this will permanently delete all files. Do this only if you have already created backups on your PC. data-i="126">The stability of a device with Root directly depends on the firmware version. On new versions of Android, it is more difficult to obtain rights, but the system is also safer.
The stability of a device with Root directly depends on the firmware version. On new versions of Android, it is more difficult to obtain rights, but the system is also safer.
Frequently asked questions (FAQ)
Will the Knox counter or an analogue on Lenovo be reset after receiving Root?
Lenovo devices do not have an analogue of the Knox counter like Samsung, which physically blows the fuse. However, the fact of unlocking the bootloader is recorded in the logs and is visible during diagnostics at the service center, which is the basis for refusing warranty repairs.
Is it possible to get Root on Lenovo without unlocking the bootloader?
On modern versions of Android (8.0 and higher) this is almost impossible. Vulnerabilities that allow this to be done (for example, through applications like KingRoot) have long been closed by manufacturers and may contain malicious code. The only safe way is to officially unlock BL.
Will contactless payments work after the procedure?
Yes, they will, but only if you correctly configure root hiding via Magisk Hide or DenyList. If the system detects interference, Google Pay will block the payment function. You may also need to clear the Google Pay application data.
How to return to stock state if I want to sell the phone?
You will need to download the official firmware for your model (boot, recovery, system, vendor images) and flash them through Fastboot with commands fastboot flash partition_name image_file. You also need to run the command fastboot oem lock to re-lock the bootloader (this will delete all data again).
Does Root affect the operation of the camera?
Root itself does not affect the quality of pictures. However, if you install. modules that change system libraries or image processor settings, the quality may change for the better or for the worse. Standard camera functions remain working.