The Android mobile operating system is built on the Linux kernel, which theoretically gives the user complete control over the device. However, smartphone manufacturers and telecom operators restrict this access by default for security and system stability reasons. Gaining superuser rights, or root access, removes these restrictions, allowing access to system files and functions that would otherwise be hidden.
The process of gaining privileged access varies depending on the device model, operating system version, and manufacturer. Modern methods, such as using Magisk, allow you not only to gain full control, but also to maintain the ability to operate banking applications thanks to the mechanism for hiding the root. It is important to understand that any manipulation of the system partition carries risks.
In this article we will examine in detail legal and safe ways to activate superuser mode. We will look at the necessary preparatory steps, working with the bootloader and installing specialized software. If you are ready to take responsibility for the integrity of the firmware, let's start studying the technical details.
Device preparation and backup
Before starting any manipulations with the system software, it is critical to create a full backup copy of your data. The process of unlocking the bootloader, which is a mandatory step for rooting, often results in the complete removal of all user data from the internal storage. Use cloud services or connect your phone to a PC to copy photos and documents.
You also need to activate developer mode on your smartphone. To do this, go to the section Settings → About phone and click seven times in a row on the item Build number. After this, a new section will appear in the menu For developers, where you need to enable USB debugging.
☑️ Preparation for receipt Root
Make sure the battery level is at least 50-60%. Interrupting the firmware or unlocking process due to a low battery may result in the device turning into a “brick” and requiring complex restoration through a service center. Also download and install on your computer a minimum set of tools Platform-tools (ADB and Fastboot).
Unlocking the bootloader
A bootloader is a app that runs before the operating system and verifies the digital signature of the loaded software. It is blocked by default to prevent the installation of modified images. Unlocking is the first and most important step, which makes it possible to record a modified recovery or kernel image.
The procedure differs for different manufacturers. Devices Xiaomi require official unlocking through the Mi Unlock utility with account linking and waiting from 7 to 168 hours. Smartphones Google Pixel i OnePlus allow you to do this almost instantly through the Fastboot command. Owners Samsung must toggle the OEM Unlock switch in the developer menu and use the button combination.
⚠️ Warning: Unlocking the bootloader on most devices will void the manufacturer's warranty. In addition, on some models (for example, older Sony or devices with MediaTek processors), this procedure may be technically impossible without the use of paid services.
To put the phone into bootloader mode, turn it off, then hold down the button combination (usually Volume down + Power) and connect the cable to the PC. In the computer command line, enter the command to check the connection:
fastboot devicesIf the device is displayed in the list, you can send an unlock command. For many devices it looks like fastboot flashing unlock or fastboot oem unlock. A warning about data loss will appear on the phone screen; confirmation must be done using the volume buttons.
What is VLKM and why is it important?
VLKM (Verified Boot) is a mechanism for checking the integrity of the system. When the bootloader is unlocked, the VLKM status changes, and the system can warn about this every time you turn it on. Some banking applications block operation when they detect an unlocked bootloader, even if the root itself is hidden.
Installing custom recovery and Magisk
After unlocking, the standard recovery menu (Stock Recovery) will not allow you to install modified files. You will need to install a custom recovery, the most popular and functional of which is TWRP (Team Win Recovery Project). It allows you to install ZIP archives, make full backups (Nandroid) and manage the file system.
Download the TWRP image corresponding to your device model (file with .img extension). Place it in the ADB tools folder and flash the firmware with the command:
fastboot flash recovery twrp_image_name.imgImmediately after flashing, you must boot into recovery to prevent the stock menu from returning. This is usually done by pressing the buttons Volume up + Power immediately after the screen goes dark after flashing. Inside TWRP, download the installation ZIP file Magisk to your phone or transfer it from your PC.
| Tool | Purpose | Support status |
|---|---|---|
| Magisk | root access management, modules | Relevant |
| TWRP | Custom recovery, backups | Relevant |
| SuperSU | Outdated rights manager | Not supported |
| KingRoot | One-click root (Chinese software) | Not recommended |
Install the Magisk ZIP archive via the Install menu in TWRP. After rebooting, the Magisk application will appear on the system. This is what will manage access rights for other applications. The old method using SuperSU is considered outdated and incompatible with new versions of Android.
If you have a smartphone with a MediaTek processor, it is sometimes easier to use the paid MCT Bypass service or similar utilities for temporary unlocking if official unlocking is not possible. However, this requires caution.
Alternative methods: One-Click Root and patching
Not all users are ready to go through the difficult path of unlocking the bootloader and flashing the recovery firmware. There are applications that promise to gain superuser rights in one click directly from the operating system. Examples of such solutions in the past were KingRoot, KingoRoot or Framaroot.
The effectiveness of such methods on modern devices with Android 10, 11, 12 and higher tends to zero. Manufacturers have strengthened kernel security and exploits used by these applications have been patched in security updates. Moreover, installing such software from unverified sources carries a high risk of infecting the device with miners or spyware.
A more modern and secure “alternative” method is patching the boot image through the Magisk application without installing a custom recovery. This method is suitable for devices for which it is difficult to find ready-made TWRP. You extract boot.img from the stock firmware, open it in the Magisk application (the “Install” button → “Select and patch file”), and then flash the resulting file via Fastboot.
Rights management and hiding from banks
After successful installation, a rights manager such as Magisk, will ask for confirmation every time any application tries to access superuser functions. You can configure the rules: allow access forever, only for one time, or reject the request. In the application settings, you can also enable logging (logs) to track activity.
The main problem with rooted devices is the inability to launch banking applications, Google Pay and games with anti-cheat (for example, Pokémon GO). These applications detect the presence of root access or an unlocked bootloader. To solve this problem, Magisk has implemented a function Zygisk and a list of exceptions (DenyList).
Enable Zygisk in the Magisk settings and reboot the device. Then go to the “Set up DenyList” section and check the boxes for banking applications and Google Play services. This will force the system to hide the presence of modifications specifically for these apps. However, it is worth remembering that bank developers are constantly updating detection methods.
⚠️ Attention: Banking application interfaces and methods of protecting them are regularly updated. What worked yesterday may no longer work after you update your banking app. Always check the latest bypass methods on specialized forums (for example, 4PDA or XDA) before updating financial software.
Using Zygisk and DenyList allows you to hide root access from most applications, but does not provide a 100% guarantee. Some banks may block access to accounts on devices with an unlocked bootloader, regardless of software tricks.
Opportunities, risks and refusal of Root
Why do you need root at all? Full rights allow you to remove system garbage (bloatware) that cannot be removed by standard means, change fonts and animations at the system level, make full backups of applications with data via Titanium Backup or Swift Backup, as well as overclock the processor or undervolt it to save energy.
However, the risks are significant. An error when editing system files through the terminal or the wrong module can lead to an endless reboot (bootloop). In the worst case, the phone will stop turning on. Additionally, some apps, such as Netflix, may lose the ability to play high-definition (HD/4K) content due to Widevine DRM violations.
If you decide to unroot, the process is usually simple. Open the Magisk app, click the Uninstall button and select Complete Uninstall. The device will reboot and superuser rights will be revoked. However, the status of the unlocked bootloader (if you have unlocked it) will remain the same unless you perform the locking procedure back through Fastboot, which can be dangerous on some devices.
- 🚀 Full control: Ability to remove any system applications and change the behavior of the OS.
- 🛡️ Security: Risk of catching a virus with administrator rights increases many times over.
- 💸 Banks: Constant struggle with security updates for banking applications.
- 🔋 Battery: Possibility of fine-tuning energy saving, but the risk of rapid discharge if overclocked incorrectly.
Frequently asked questions (FAQ)
Will obtaining root access reset the warranty on the phone?
In most cases, yes. Unlocking the bootloader, which is required for root installation, is an action that will void the manufacturer's warranty. Some brands (for example, Xiaomi in some regions) may refuse warranty repairs even with a locked bootloader if they find traces of tampering, but most often it is enough to return the stock firmware and lock the bootloader to formally restore the status.
Is it possible to get system updates over the air (OTA) with root access?
Usually no. The presence of a modified system partition or custom recovery blocks the installation of official OTA updates. Trying to install an update may result in an error or loss of root access. Most often, you have to download the full firmware manually and install it again, after which you get root again.
Is it safe to enter bank card details on a rooted phone?
Technically, if you use Magisk Hide (DenyList) and do not grant superuser rights to dubious applications, the risk is minimal. However, the very fact that there are security vulnerabilities makes the device theoretically more susceptible to attacks than a stock phone. Be extremely careful when installing APK files from unknown sources.
What to do if the phone went into Bootloop after receiving Root?
If you have a custom recovery installed (TWRP), boot into it and remove the latest installed Magisk modules or wipe the cache. If there is no recovery, you will have to reflash the stock boot.img image via Fastboot mode on the computer. In the most difficult cases, a complete flashing of the device is required through the manufacturer’s special utilities (Odin for Samsung, Mi Flash for Xiaomi).
Do you need Root on Android 13 or 14?
The need for root is decreasing, as Android developers are implementing many functions (screen recording, dark theme, permission management) into the stock system. However, for deep customization, system-level ad blocking and the operation of specific utilities, root still remains a popular tool for enthusiasts.