The Android 6.0 Marshmallow era has officially ended, but millions of devices around the world continue to run this version of the operating system. For many users, obtaining root access becomes the only way to extend the life of a smartphone, remove pre-installed junk or install custom firmware. However, the process of obtaining superuser privileges on the sixth version of Android has its own unique features that distinguish it from newer versions.
Unlike modern Android 12 or 13, where the virtual partition system and strict integrity checks dominate, Android 6.0.1 still allows the use of relatively simple methods of modifying the system partition. However, the risks of bricking the device remain high, especially if the manufacturer has blocked the bootloader. Before you begin, you need to realize that you take full responsibility for the performance of your gadget.
This guide covers the entire range of necessary actions: from preparing tools to the final check of access rights. We will consider both classic methods via a computer, as well as options for those who prefer to act directly from the smartphone screen. It is important to understand that there is no universal “root” button, and each step requires care.
⚠️ Attention: Obtaining root access will automatically void the official warranty for the device. If your smartphone is still under warranty service, we strongly advise you to refrain from this procedure.
Device preparation and backup
The first and most critical stage is saving your data. The process of unlocking the bootloader, which is almost always necessary for rooting, results in the complete removal of all user data from the internal memory. This is not just formatting a memory card, but resetting the device to factory settings with clearing partitions /data i /cache.
Use Google cloud services or local copying to your computer to save contacts, photos and documents. Pay special attention to folders with instant messengers, since the history of correspondence is often stored in the internal memory. For a reliable backup, you can use specialized utilities like Titanium Backup, but they already require superuser rights to work, so a standard export will do at this stage.
You also need to check the battery charge level. The process of flashing the recovery or kernel can take from 15 minutes to an hour, and a sudden power outage at this moment is fatal. Make sure that the charge is at least 60-70%, or better connect the device to a power source during critical stages.
☑️ Checklist before you start
Don't forget to enable USB debugging in the developer menu. To do this, go to Settings → About phone and quickly click on the build number seven times. After a message appears that you have become a developer, a new item will appear in the main settings menu where you need to activate the switch USB debugging.
Unlocking the bootloader
A bootloader is a app that which runs before the operating system starts and verifies the digital signatures of the downloaded software. On most devices running Android 6.0.1, it is locked by the manufacturer for security reasons. Without unlocking, you will not be able to install a custom recovery, such as TWRPwhich is necessary for rooting.
The unlocking procedure is radically different for different brands. Devices from Google (Nexus, Pixel) and some Motorola or Sony models allow you to do this officially through the Fastboot command. For Chinese brands like Xiaomi or Huawei of that period, it was often necessary to obtain a special unlock code through the manufacturer's official website, which may not be available now.
fastboot oem unlockIt is this command, entered into the computer console in Fastboot mode, that initiates the process on many devices. A warning about data loss will appear on the smartphone screen. Confirmation is carried out using the volume buttons. After successful execution, the bootloader status will change to Unlocked.
What to do if the command does not work?
If the fastboot oem unlock command returns an error or nothing happens, then the manufacturer has closed this feature. In this case, you will have to look for vulnerabilities of a specific processor (for example, MediaTek or Qualcomm) and use engineering cables or specific exploits, which is much more difficult and dangerous.
⚠️ Attention: On devices with MediaTek processors, unlocking the bootloader may lead to the loss of the IMEI partition. Always dump the NVRAM partition before any manipulations with the bootloader.
Installing custom TWRP recovery
The stock recovery of Android 6.0.1 has extremely limited functionality and does not allow installing unsigned zip archives, which include packages for obtaining root access. Therefore, replacing the stock recovery with Team Win Recovery Project (TWRP) is a mandatory step for safe rooting.
You need to find a recovery image (.img file) created specifically for your device model. Using an image from another model, even with a similar name, is guaranteed to lead to a malfunction of the touch screen or complete inoperability of the touch screen in recovery mode. Download files only from trusted resources, such as the 4PDA forum or XDA Developers.
The firmware is installed via a computer in Fastboot mode. Connect your phone, make sure the drivers are installed, and run the command:
fastboot flash recovery twrp_image_name.imgAn important nuance for Android 6: immediately after flashing the firmware, you cannot boot into a regular system. If you do this, the stock recovery will automatically overwrite TWRP and your efforts will be in vain. You must immediately hold down the key combination to enter recovery mode (usually Volume Down + Power).
If the sensor in TWRP does not work, try the image marked "touch fix" or use the volume button controls (up/down - select, power - confirmation).
Selecting a method for obtaining root access
For Android 6.0.1, there are two main approaches to obtaining superuser privileges. The first is an outdated, but still working method using SuperSU binaries that directly modify the system partition. The second, more modern and preferred method is using Magisk, which works on the Systemless principle, without physically changing the files in the /system partition.
Using Magisk has a huge advantage: it allows you to hide the fact of having root access from banking applications and Google Pay services (at that time), which is critical for the everyday use of a smartphone. SuperSU is often detected by security systems as a sign of a compromised device.
| Characteristics | SuperSU (Classic) | Magisk (Modern) |
|---|---|---|
| Implementation method | Direct modification of /system | Systemless (change of boot image) |
| OS update | Difficult or impossible via OTA | Update over the air is possible (with nuances) |
| Hide root | Missing or works poorly | Built-in MagiskHide function (for versions of that time) |
| Modules | Limited support | Full support modules |
Despite the fact that the SuperSU project is officially abandoned, for very old devices on Android 6 it sometimes remains the only working option if Magisk is incompatible with the processor architecture. However, in 95% of cases it is recommended to look for the latest version of Magisk that supports old kernels.
Step-by-step installation via TWRP
After you loaded into the TWRP menu, first of all make a complete backup of the current system state (Nandroid Backup). This is your insurance: if something goes wrong, you can restore the phone to the state it was in before the firmware in just a couple of minutes.
Copy the archive with the firmware (zip file Magisk or SuperSU) to the internal memory of the smartphone or SD card. In the main recovery menu, select. item Install. Navigation is carried out by swiping or buttons. Find the downloaded archive and select it.
Before confirming the installation (swipe to the right), you can configure additional settings. For Android 6.0.1, it is often recommended to uncheck “Reboot after installation” in order to be able to check the installation logs or flash additional patches after the process is completed. message Done.
The main rule of TWRP: if you did not make a backup before installation, you act at your own risk. It is impossible to restore deleted data without a backup.
If the installation was successful, reboot the system. The first launch may take up to 5-10 minutes, as the system optimizes applications and checks the integrity of the changed files. Do not interrupt this process, even if the screen appears. frozen.
Checking rights and troubleshooting
After loading the operating system, find the icon of the installed root manager (Magisk Manager or SuperSU) in the application menu. Launch it. Often, when you first launch the application, it requires you to download additional files or update the database - agree with this.
To check its functionality, download a simple application from Google Play, for example, "Root Checker". Run the test and if you see a green checkmark and a message saying that root access has been granted, congratulations - mission accomplished. If access is not granted, it is possible that the binary file was not correctly embedded in the boot image.
⚠️ Attention: If after rooting the phone begins to quickly discharge or overheat, check the list of applications that have access to the superuser. Perhaps some system process is stuck in a loop due to a rights conflict.
In some cases, on Android 6.0.1, SELinux protection in Enforcing mode may work, blocking the operation of root scripts. To solve this problem, you may need to install a special patch through the same TWRP recovery, which switches SELinux to Permissive mode.
Why don't banking applications work?
Even if you have root access, banks can block access. In the Magisk settings, you need to enable the hiding function (DenyList) and add the banking and Google Pay applications there, as well as hide the Magisk application itself by renaming its package.
Frequently asked questions (FAQ)
Is it possible to get root on Android 6.0.1 without a computer?
Theoretically, yes, using old versions of applications like KingRoot or KingoRoot, which exploit kernel vulnerabilities. However, on Android 6, these vulnerabilities have already been largely closed, so this method rarely works and carries a high risk of installing malware. It is more reliable to use a PC and TWRP.
Will I be able to receive updates over the air (OTA) after rooting?
When using the classic method (SuperSU), OTA updates will come, but the installation will fail due to the modified system partition. When using Magisk with the "Install to inactive slot" function (if the device supports A/B partitions, which is rare for Android 6) or manually restoring the stock boot, updating is possible, but root access will be lost and will have to be restored.
What is a "Bootloop" and how to get out of it?
Bootloop is a cyclic Rebooting the phone when it cannot boot the system. Most often this happens due to module incompatibility or a firmware error. You can exit it by booting into Recovery mode (TWRP) and performing a data reset (Wipe Data/Factory Reset) or restoring a previously made backup.
Will a factory reset remove root access?
A normal reset through phone settings (Settings → Recovery and reset) does not remove root access, since they are located in the system partition or boot image, which are not affected when resetting user data. To remove root, you need to flash the stock image of the bootloader or use the "Full removal" function in the root access manager.