Obtaining superuser rights, or root access, remains one of the most popular procedures for advanced Android users. This opens access to system files, allows you to remove pre-installed software, change the system kernel and install specialized modules. However, the process comes with risks, including loss of warranty and the possibility of turning the device into a brick. In this article, we will analyze in detail modern methods of obtaining privileges on current versions of Android.
The modern Google ecosystem has significantly complicated the rooting procedure compared to the times of Android 4.0 or 6.0. Now the key step is unlocking the bootloader (Bootloader), without which installation of a modified recovery or patched kernel is impossible. You will need not only technical training, but also an understanding of the architecture of your firmware. We will look at a method based on Magisk, which is currently the industry standard for system rooting without changing the system partition.
Before taking active steps, it is critical to evaluate the appropriateness of this step for your purposes. If your goal is simply to speed up your phone or free up space, there are less drastic optimization methods. But if you want complete control over your device, follow the instructions below with extreme caution.
Preparing your device and backing up your data
The first and most important step is to save all your important information. The bootloader unlocking procedure, which is a prerequisite for getting root, initiates a full reset of the device to factory settings. All your photos, contacts, messages and installed applications will be permanently deleted. Therefore, creating a full backup is not a recommendation, but a strict requirement.
Use built-in Google tools to synchronize contacts and calendar, and use external drives or cloud storage for media files. It is also recommended to do a full system dump if you already have access to a custom recovery, but in our case we are going with stock firmware. Make sure that the battery charge is at least 60% so that the device does not turn off at the critical moment of interaction with the bootloader.
⚠️ Warning: Unlocking the bootloader on many devices (especially Samsung, Huawei and some Xiaomi models) irreversibly triggers the Knox security trigger or its equivalent. This can permanently disable banking apps, Samsung Pay, and Secure Folder, even if you subsequently lock the bootloader back.
In addition to backing up, you need to activate developer mode on your smartphone. To do this, go to Settings, find the section About phone and quickly click 7 times on the item Build number. After a message appears stating that you have become a developer, return to the main settings menu and open a new item For developers. Here you need to activate USB debugging and, if available, Unlock OEM. Without the last point, further actions will be impossible.
☑️ Ready for the procedure
Bootloader Unlock
Unlocking the bootloader is the process of removing manufacturer restrictions on running unsigned software. Methods for performing this procedure vary dramatically depending on the brand of device. For example, on smartphones Xiaomi you need to wait from 3 to 168 hours after linking your account, while on Google Pixel or OnePlus this is done almost instantly via Fastboot.
For devices with processors MediaTek or Qualcomm specific utilities are often used, such as MCT Bypass or tools from the manufacturer. The universal method via a computer is as follows: connect the switched off phone to the PC by holding down the combination of buttons (usually Volume down + Power) to enter the mode Fastboot. In the command line of the computer where the platform-tools are installed, enter the command to check the status:
fastboot oem device-infoIf the status shows Device unlocked: false, you must send an unlock command. On pure Android this is usually fastboot flashing unlock, but on older devices fastboot oem unlock. A warning about data loss will appear on the smartphone screen. Confirm the action with the volume buttons. The device will reboot and reset. Only after successful unlocking can you proceed to the next stage.
What to do if the "OEM Unlocking" item is inactive?
If the "OEM Unlocking" switch is gray and cannot be pressed, this may mean that the device is locked by the telecom operator, or it has a special firmware version installed (for example, for the corporate sector). Also, this option may be hidden if the phone was recently reset - try connecting to Wi-Fi and waiting 24-72 hours without rebooting. In some cases (Huawei Honor after 2018), official unlocking has become impossible.
Installing Magisk and obtaining superuser rights
Today Magisk from the developer topjohnwu is the most effective tool for obtaining root access. Its main advantage is the “less modification” system, which allows you to pass the SafetyNet security check (or its new analogue Play Integrity API), while maintaining the ability to operate banking applications. The installation process begins by obtaining the original bootloader image (boot.img) from the firmware of your device.
Download the official firmware for your model and version of Android, which fully matches the one that is currently installed. Extract the file from the archive boot.img (sometimes init_boot.img for new devices on Android 13-14). Transfer this file to your smartphone, install the Magisk APK app and open it. In the section Installation select item Select and patch the file, specify the path to the extracted image. The application will create a patched file with a name like magisk_patched_[random].img in the downloads folder.
Return the patched file to your computer and put the phone in Fastboot mode. Execute the command to flash the modified image:
fastboot flash boot magisk_patched_[file_name].imgAfter successful recording, enter the command fastboot reboot. When loading for the first time, the process may take longer than usual. After turning on the system, open the Magisk application. If the "Magisk Version" line displays a version number rather than "Not Installed", then you have successfully received root access. Now you can install modules and grant applications superuser rights through pop-up requests.
Alternative methods and specifics of different processors
The method with firmware boot.img via Fastboot is universal, but not the only one. For processor-based devices MediaTek a utility SP Flash Tool or specialized scripts that work through the BROM protocol are often used. In this case, the phone is connected in the off state with the volume button held down, and the image is flashed directly into memory without switching to bootloader mode. This is convenient, but requires precise selection of the scatter file.
Device owners Samsung are faced with a unique firmware architecture. Here, instead of boot.img a file AP (or system in older versions) is often used, which is flashed through the app Odin. The procedure looks like this: we patch the AP file in Magisk, then in Download Mode we flash this file into the AP slot via Odin, keeping the remaining partitions intact. Incorrectly flashing the wrong partition on a Samsung can lead to serious system malfunctions.
Below is a table illustrating the differences in approaches for popular platforms:
| Platform / Brand | Flashing tool | Key file | Features |
|---|---|---|---|
| Qualcomm (Pixel, OnePlus) | Fastboot | boot.img / init_boot.img | Standard procedure, high compatibility |
| Samsung (Exynos/Snapdragon) | Odin | AP (patched) | Knox trigger, triggering flag 0x1 |
| MediaTek (Xiaomi, Realme) | SP Flash Tool / Fastboot | boot.img / scatter.txt | Firmware via BROM is possible without unlocking BL |
| HiSilicon (Huawei) | DC-Unlocker / Test Point | recovery.img | Official unlocking closed since 2018 |
It is important to understand that for devices with an encrypted data partition (which is standard for Android 10 and above), unlocking the bootloader automatically removes the encryption keys. This means that without a hard reset, the encrypted data cannot be read. That is why the backup step described at the beginning of the article is critical.
Setting up hiding Root and working with SafetyNet
After obtaining superuser rights, many users encounter a problem: banking applications, Google Pay and some games refuse to launch when they detect a system modification. To solve this problem, Magisk implements a function Zygisk and an exception list. Go to Magisk settings, enable Zygisk and reboot the device.
Next you need to configure the exclusion list (DenyList). In the settings, enable the “Follow exclusion list” option and click on the item itself. In the list that opens, find applications that should see the phone as “clean” (banks, payment systems, games with anti-cheat). Check the boxes next to these applications and all their subprocesses. This will force Magisk to hide the presence of root access for selected apps.
⚠️ Attention: Since October 2026, Google has tightened the Play Integrity API requirements. Simply adding to DenyList may not be enough. You may need to use additional modules such as Play Integrity Fix or Shamiko, which are downloaded through the Magisk repository. Stay tuned to the developer community for updates.
It is also recommended to rename the Magisk application to hide its presence from simple verification scripts. In the app settings, select Hide Magisk App, choose a neutral name (such as Settings or Calculator) and confirm. The application will be reinstalled with a new name and package, which will make it more difficult to detect.
If the banking application still crashes after setting it to hide, try clearing its cache and data in Android settings before launching it for the first time after rooting. Sometimes the application remembers the state of the system when it was first installed.
Possible problems and ways to resolve them
The rooting process does not always go smoothly. One of the common problems is bootloop (cyclic reboot). If, after flashing the patched image, the phone constantly reboots and does not boot the system, do not panic. In most cases, this can be solved by flashing the original (unpatched) file boot.img back via Fastboot. This will return the system to its original state without root access, but with data saved (if BL was not unlocked at this moment).
Another common situation is the lack of Internet after unlocking the bootloader on some Xiaomi or Huawei models. This is due to the fact that an unlocked bootloader may interfere with the operation of some network modules or require re-authorization into your Mi/Google account. The solution is usually a complete reset of the network settings or flashing the stock recovery.
If the Magisk application is installed, but when you click on it, a “Not Found” error occurs or it does not see rights, there may be a version conflict or damage to the data partition. Try reinstalling the Magisk APK file with the same version that was used for the patch. In extreme cases, when the device is not detected by the computer in Fastboot mode, you may need to enter Emergency Download Mode to restore it through service utilities, but this is a task for experienced specialists. EDL (Emergency Download Mode) for recovery through service utilities, but this is a task for experienced specialists.
The golden rule of modification: always have on hand the original bootloader image (stock boot.img) specifically for your current firmware version. This is the only guaranteed way to bring your phone back to life if rooting fails.
Frequently asked questions (FAQ)
Will root access reset the warranty on my smartphone?
In most cases, yes. Unlocking the bootloader to root is a violation of many manufacturers' warranties. Even if you lock the bootloader back, service centers may see traces of tampering in log files or in the Knox counter (on Samsung). However, in some countries (for example, in the USA, according to the Magnuson-Moss Act), the very fact of having root cannot be the only basis for denying a warranty if the breakdown is not caused by user actions.
Is it possible to get system updates over the air (OTA) with root access?
A standard OTA update will most likely not install or will lead to the loss of root access and even to the bootlap, as it checks the integrity of the system partition. To update, you will need to download the full image of the new firmware, extract the new boot.img, patch it in Magisk and flash it manually via Fastboot or Odin, or temporarily unroot, update, and then repeat the rooting procedure for the new version.
Is it safe to use banking applications after rooting?
Use is possible, but not on 100% safe in theory. Magisk allows you to effectively hide the fact of rooting from most applications thanks to the DenyList feature and hiding modules. However, you rely on third-party software to manage access. If the configuration is correct, the banks work stably, but the risk of theoretically compromising security keys remains higher than on a stock device.
What is Zygisk and how does it differ from the old MagiskHide?
Zygisk is a modern implementation of injecting Magisk code into the Zygote process, which is the parent of all processes in Android. This allows the modules to work more deeply and efficiently. The old MagiskHide has been removed in new versions, its functionality for hiding root is now implemented through the DenyList mechanism in conjunction with Zygisk, which provides better compatibility with new versions of Android and Play Integrity protection.
Is it possible to remove root access and return the phone to its factory state?
Yes, it is possible. The cleanest way is to open the Magisk app, select "Uninstall Magisk" from the menu and confirm the full wipe. The phone will reboot and return to its non-rooted state. However, if the boot has been unlocked, the unlock flag will remain active until you manually lock the bootloader back via command fastboot flashing lockwhich will again result in a complete data reset.