obtaining root access Root on controlled devices Android 10 is a powerful tool that opens up the user with limitless possibilities for customizing the system. However, the process has become significantly more complex compared to previous versions of the OS due to the introduction of strict security measures, such as data encryption and mandatory bootloader integrity checks. You must understand that interfering with system partitions always carries risks, up to turning the smartphone into a “brick.”
The modern de facto standard for rooting is the use of a utility Magiskthat allows you to obtain superuser privileges without modifying the system partition. system. This is achieved by patching the boot image and creating a virtual environment. This approach, known as systemless root, allows you to hide the fact of your rights from banking applications and Google Play services, although the fight against root-rights detectors continues constantly.
Before taking action, it is critical to understand the consequences. The procedure will inevitably lead to the complete loss of all user data, since unlocking the bootloader requires a factory reset. You will also forever lose the official warranty of the device manufacturer, if it was still valid. There is no way to roll back changes without completely flashing the stock image, which is not always easy to find in the public domain.
Preparation of the device and necessary tools
The success of the operation depends 90% on the quality of preparation of the workplace and the smartphone itself. You will need a computer with an operating system Windows, macOS or Linux, a working USB cable (preferably original) and a fully charged device battery. The first step is to activate the developer mode, which is hidden by default in the system settings.
Go to the menu Settings → About phone and find the item Build number. Click on it quickly seven times in a row until a notification appears indicating that you have become a developer. After this, a new section will appear in the main settings menu For developers, where you need to activate the item USB debugging. Without this function, the computer will not be able to send commands to the device via the ADB interface.
Next you need to install drivers for your specific manufacturer on computer. Universal Google USB Drivers often do not recognize specific bootloader modes (Fastboot or Download Mode) of Chinese brands. Download the package Platform Toolscontaining utilities adb and fastbootfrom the official Android Developers website. Unzip the archive to the root of drive C or to a convenient folder, the path to which does not contain Cyrillic characters.
☑️ Ready for rooting
⚠️ Attention: Make sure that the Find My Device function is disabled on the device and the screen lock (PIN code, pattern) is removed before starting to work with bootloader, otherwise the process may end with an authorization error.
Bootloader Unlock
This is the most critical stage, which differs for each manufacturer. The boot loader is the app that loads the operating system; by default it is locked by the manufacturer to prevent unauthorized access. Devices Xiaomi require a special Mi Unlock Tool and wait from 3 to 168 hours after linking the account. For Motorola i OnePlus the process is simpler and requires obtaining a unique unlock token on the official website.
Put your smartphone into Fastboot mode. This is usually done by turning off the device and holding down the combination of buttons Volume Down + Power when connecting to a PC. At your computer's command line, enter command fastboot devicesto make sure the device is visible. If the status is displayed correctly, you can send a command to unlock.
fastboot flashing unlockA warning about data loss will appear on the smartphone screen. Confirm the action with the volume buttons. The device will reboot and perform a factory reset. Once turned on, you will see a warning that the bootloader is unlocked (often with a wait timer of 5-10 seconds each time it starts). This is normal behavior for rooted devices.
Some Samsung devices use Download Mode instead of Fastboot, and the unlock command may be different (for example, OEM Unlock in Developer Options). Always check the specifications of your model on specialized forums.
Device owners Huawei and Honor should know that since 2018 the company has officially closed the possibility of receiving unlock codes. For these models, standard methods do not work, and paid services or hardware boxes are required, which is beyond the scope of this instruction.
Searching and preparing a boot image (Boot Image)
To implement superuser rights, we need to modify the file boot.imgthat contains the system kernel and ramdisk. The ideal option is to download the full firmware image (Stock Firmware), which exactly matches the OS version currently installed on your phone. The versions must match up to the last character (for example QQ3A.200805.001), otherwise you will get a cyclic reboot (bootloop).
Extract the file boot.img from the downloaded firmware. If the firmware is packaged in .zip or .payloadformat, additional utilities may be required for unpacking. Copy the resulting file boot.img to the internal memory of your smartphone. Next, download the latest version of the application Magisk in APK format from the official GitHub repository and install it as a regular application.
Launch Magisk on your smartphone. In the main menu, opposite the “Magisk” item, click the “Install” button. Select the Select and Patch a File method. In the file manager, specify the path to the previously copied boot.img. The patching process will take a few seconds, after which a new file with a name like this will appear in the folder Download a new file will appear with the name view magisk_patched_[random].img.
What to do if the firmware is in .ozip format?
Some manufacturers (for example, Realme or Oppo) use the .ozip format. In this case, you will need a special Python decryptor script or the OzipDecompressor utility to extract the boot.img image before patching. Copy the patched file back to the computer in the tools folder. For convenience, rename it to
Copy the patched file magisk_patched.img back to the computer in the tools folder Platform Tools. Rename it for convenience to boot.imgso as not to get confused in the commands. Now the device is ready to flash the modified kernel.
Flashing the modified kernel via Fastboot
Put the smartphone into Fastboot mode again by connecting it to the computer. Make sure the connection is stable. Now we will write the modified image to the bootloader section. The command may differ depending on the partition structure of your device (A/B partition or A-only).
For most modern devices with dynamic partitions, the command is used:
fastboot flash boot boot.imgIf you have a device with A/B architecture (seamless updates), you will need to specify the slot explicitly, although modern versions of fastboot usually do this automatically. After successful recording ("Finished" message), enter the command to reboot:
fastboot rebootThe first boot after rooting may take much longer than usual - up to 5-10 minutes. Don't panic and unplug the cable if you see the manufacturer's logo. The system optimizes applications and checks the integrity of Magisk. If the download is successful, you will see the Magisk application icon in the menu.
| Stage | Action | Risk of error |
|---|---|---|
| Unlock BL | Data reset and withdrawal protection | High (loss of warranty) |
| Search Boot Image | Downloading the exact firmware version | Medium (risk of Bootloop if there is a mismatch) |
| Patching Magisk | Modification of the kernel on the device | Low (application error) |
| Firmware via PC | Write image to boot section | High (brick when broken communication) |
If, after flashing the firmware, the device goes into an endless reboot, immediately boot into Fastboot mode and flash the original (unpatched) boot.img back to restore system functionality.
Checking rights and setting up hiding Root
After a successful download, open the Magisk application. If the version number is displayed at the top of the screen and the “Superuser” switch is active, congratulations, you have gained full access to the system. To check, install any application that requires root access, for example Root Checker or a file manager with access to system folders.
However, having superuser rights makes it impossible to work with many banking applications (Sberbank, Tinkoff), payment system Google Pay and some games with anti-cheat. They scan the system for signs of tampering. To get around this, in the Magisk settings you need to activate the function Zygisk and enable the exclusion list (DenyList).
Go to the Magisk settings (gear), turn on the toggle switch Zygisk and Enforce DenyList. Then click on the item Configure DenyList and check the boxes for all banking applications, Google Play Services and Google Play Store. After this, reboot your device. In some cases, it may be necessary to clear the data of problematic applications.
⚠️ Attention: Methods for hiding root access do not guarantee 100% results. Developers of banking applications are constantly updating detection algorithms, and a method that works today may stop functioning tomorrow.
Possible problems and ways to solve them
The rooting process Android 10 rarely goes perfectly smoothly for all users. One of the common problems is an error FAILED (remote: device is locked) when trying to flash the firmware. This means that the bootloader was not unlocked correctly or the command was entered in the wrong mode. Double-check the status with the command fastboot getvar all.
Another common situation is a “bootlap” (cyclic reboot). If the phone turns on, shows the logo and reboots again, then you have flashed an incompatible kernel image. There is only one solution: boot into Fastboot and restore the original boot.img. If Fastboot does not work, you will have to use Recovery mode or specific utilities like Odin for Samsung or SP Flash Tool for MediaTek.
Also, users often encounter the loss of the Widevine L1 function, which reduces the quality of content playback in Netflix and other streaming services to standard definition (480p). This occurs due to security flags being triggered when unlocking the bootloader. It is impossible to return L1 back using software methods on most modern devices, since this is a hardware binding of certificates.
⚠️ Attention: Menu interfaces and item names may differ depending on the manufacturer’s shell (MIUI, OneUI, ColorOS). Always check the latest guides for your specific model, as the structure of memory partitions may change.
Frequently asked questions (FAQ)
Will the phone reset to factory settings after receiving Root?
Yes, The bootloader unlocking step automatically initiates a full data reset (Wipe Data). Therefore, creating a backup copy before starting the procedure is a mandatory requirement. By itself, patching the Magisk image does not delete data, but the previous step is necessary.
Is it possible to get system updates over the air (OTA) with root access?
Standard OTA updates on rooted devices are usually not installed or lead to the loss of root access after installation. The system checks the integrity of the bootloader and sees modifications. It is recommended to disable automatic updates and flash new versions of Android manually through a computer, first saving a copy of the new boot.img for patching.
Is it safe to use banking applications with Magisk?
It is always a risk. Although the Zygisk module and DenyList effectively hide root access from most applications, there is no guarantee. At any time, the bank can update the protection and the application will stop running. For financial transactions, it is recommended to use a second, clean device without modifications.
What is TWRP and is it needed for Android 10?
TWRP (Team Win Recovery Project) is a custom recovery menu. It is not necessary to install Magisk on Android 10, since the boot.img patching method works directly. However, TWRP is convenient for creating full backups (Nandroid backup) and installing additional ZIP modules if you are planning a deep modification of the system.
Is it possible to return the phone to its original state (unroot)?
Yes, to do this, just unlock the bootloader again (if it was locked back) and flash the original stock firmware image through the computer. This will completely remove Magisk and return the partitions to the factory state, although traces of the unlocking may remain in the logs forever.