Getting root-rights on smartphones Samsung is a task that requires not only technical skills, but also an understanding of the consequences. In 2026, the company tightened bootloader protection on most models, making the process more difficult than 2-3 years ago. If previously it was enough to unlock OEM Unlock and flash Magisk via TWRP, now on new devices (for example, Galaxy S23 Ultra or Galaxy Z Fold 5) you will need to bypass additional checks. Knox and VaultKeeper.
This article will help you figure out how to safely get root on Samsung, what tools you will need for this, and what to do if something goes wrong. We will look at both officially supported methods (for older models) and workarounds for new smartphones with One UI 6.0+. Important: the procedure will void the warranty and may lead to the brick device - so before you begin, make sure you understand all the risks.
What is root access and why do you need it on Samsung
root access (or superuser rights) give full control over the operating system Android. With their help you can:
- ๐งน Remove pre-installed applications (bloatware) that cannot be uninstalled using standard methods.
- โก Install custom kernels to overclock the processor or improve autonomy.
- ๐ Create full system backups, including application and settings data.
- ๐ ๏ธ Modify system files (for example, change
build.propto deceive applications). - ๐ Bypass manufacturer restrictions (for example, activate Wi-Fi Direct on uncertified devices).
However, there is a flip side to the coin. Samsung actively blocks the ability to obtain root on new models through:
- ๐ Knox โ a security system that records any changes in the firmware and can block the device.
- ๐ก๏ธ VaultKeeper โmechanism bootloader protection, which appeared in Exynos 2200 i Snapdragon 8 Gen 2.
- ๐ฑ RMM (Remote Mobile Management) - a service that can remotely block bootloader unlocking.
โ ๏ธ Attention: On devices with One UI 5.0+ unlocking the bootloader triggers the flagRMM State: Prenormal. This means that even after resetting the settings, the device will not return to a stateNormalwithout official software.
Preparation of the device: what needs to be done before getting root
Before you start unlocking, complete the required steps:
Backup data to PC or cloud
Checking model and firmware version
Installing Samsung USB drivers
Activating developer mode
Enable software debugging USB
Disabling Knox protection (if possible)
Checking the RMM status (via *#0808#)
-->
Pay special attention backup. After getting root, some applications (for example Samsung Pay, Netflix or banking services) may stop working due to triggering SafetyNet. It is also recommended:
- ๐ฑ Write down the IMEI of the device (dial
*#06#). - ๐ Charge the battery to 80% or more.
- ๐ Use the original USB cable to connect to PC.
Check the firmware version in the menu Settings โ Information phone โ Software version. On new devices (for example, Galaxy S24), root is only possible on unofficial firmware, since stock software blocks modifications.
โ ๏ธ Attention: If your device was purchased from a telecom operator (for example, MTS or Beeline), the bootloader may be locked at the firmware level. In this case, you will need to flash it. data-i="102">software version. unlocked-software version.
Official method: unlocking the bootloader via OEM Unlock
On devices Samsung till 2022 (for example, Galaxy S20, Note 10) you can unlock the bootloader through the standard menu. To do this:
- Activate developer modeby clicking 7 times on
Build numberin the menuSettings โ Phone information. - Go back to
Settings โ Developer optionsand enable:OEM Unlock(unlocking the bootloader).USB debugging.
adb reboot bootloader
fastboot flashing unlock
and confirm unlock on the smartphone screen.
After rebooting, the device will be reset to factory settings. Now you can flash TWRP and install Magisk to get root.
What to do if OEM Unlock is not in the menu?
On some firmware (especially from operators), the item OEM Unlock may be hidden. In this case, try:
1. Install the firmware for another region (CSC) via Odin.
2. bypass RMM (for example, Combination Firmware).
3. Wait 7 days after the device is turned on for the first time - sometimes RMM unlocks automatically.
Unofficial methods: bypass Knox and VaultKeeper on new models
Starting from Galaxy S22 i Galaxy Z Flip 4, Samsung implemented VaultKeeper a mechanism that blocks bootloader modification even after unlocking OEM UnlockTo bypass you will need:
- Flash Combination Firmware (service firmware) via Odin. It disables some of the checks. Knox.
- Install a patch for VaultKeeper (for example, via Shim or KnoxGuard Disabler).
- Flash TWRP or OrangeFox Recovery with support Samsung.
- Install Magisk to section
init_boot(on new devicesboot.imgprotected).
On devices with Snapdragon 8 Gen 2 (for example Galaxy S23) to unlock The bootloader may require a hardware module USB JIG or a special cable to bypass VaultKeeper. This method is risky and can lead to hard brick (irreparable damage).
| Device model | Unlocking method | Risks | Required tools |
|---|---|---|---|
| Galaxy S20/S21 | OEM Unlock + TWRP | Knox triggered, loss of Samsung Pay | Odin, Magisk, TWRP |
| Galaxy S22/S23 | Combination FW + VaultKeeper patch | Hard brick in case of error | Odin, Shim, USB JIG |
| Galaxy A52/A72 | OEM Unlock (if allowed) | Loss of warranty | ADB, Fastboot |
| Galaxy Z Fold 4/5 | Patched init_boot + Magisk | Unstable camera operation | Magisk Delta, OrangeFox |
Installing Magisk and obtaining root access
After unlocking the bootloader and installing custom recovery (TWRP or OrangeFox), you can begin installation Magisk:
- Download the latest version Magisk (for example Magisk Delta for new devices) from the official repository.
- Copy the file
Magisk-v26.4.zipto a memory card or internal memory. - Boot into recovery (
Volume Up + Powerwhen turned on). - Select
Installand specify the path to the archive with Magisk. - After installation, reboot the device.
- ๐ Forced reboot: press
Volume Down + Powerfor 10 seconds. - ๐ฑ Stock firmware: download the official firmware from SamMobile and flash through Odin.
- ๐ง Recovery through recovery: if installed TWRPtry doing
Wipe โ Format Data. - ๐ ๏ธ RMM Bypass: if the device is locked because RMM State: Prenormal, wait 7 days or use Combination Firmware.
- ๐ซ Loss of warranty: Samsung voids the warranty if modifications are detected.
- ๐ Blocking of services: Samsung Pay, Secure Folder, Knox will stop working.
- ๐ก๏ธ Problems with SafetyNet: some applications (banks, games) will refuse to start.
- ๐ฑ Unstable operation: possible lags, overheating or rapid battery drain.
- ๐ Problems with OTA updates: stock updates will no longer be installed.
- Use MagiskHide or Universal SafetyNet Fix to bypass checks.
- Make backups regularly via TWRP.
- Avoid modifying system files if you are not sure of their security.
To check root access, install the application Root Checker from Google Play. If everything went well, you will see a message Root access properly installed.
What to do if root does not work or the device is locked
If after the manipulations the smartphone does not turn on or is stuck on the logo Samsung, try the following steps:
If the smartphone turns into "brick" (does not respond to buttons, is not detected by the PC), the bootloader may be damaged. In this case, only JTAG repair or replacing the motherboard will help.
โ ๏ธ Attention: On devices with Exynos 2200 and newer, an attempt to flash incompatible firmware can lead to to permanent brick due to blocking VaultKeeper. Before experiments, make sure that the selected firmware is compatible with your model and region (CSC).
Risks and consequences of getting root on Samsung
Obtaining root access entails a number of restrictions:
To minimize risks:
FAQ: Frequently asked questions about root on Samsung
Is it possible to root a Samsung without unlocking the bootloader?
No. On all modern devices. Samsung installation Magisk or custom recovery requires an unlocked bootloader. The only exception is temporary root through exploits (for example, DirtyPipe), but it only works until a reboot and does not give full control.
Why did the camera stop working after getting root?
On new devices (for example, Galaxy S23), modification init_boot may break the operation of the camera drivers. Solution:
- Install the module Magisk to fix the camera (for example, Samsung Camera Patch).
- Use alternative shooting applications (for example, GCam).
- Return to stock firmware if the camera is critical.
How to hide root from banking applications?
Most banking applications (for example, SberBank Online or Tinkoff) check for root through SafetyNet. To bypass the check:
- Activate
MagiskHidein settings Magisk. - Install the module Universal SafetyNet Fix.
- Add the banking application to the list of hidden ones in Magisk.
- Use Island or Shelter to isolate applications in the sandbox.
If all else fails, consider using a second phone without root for banking transactions.
Is it possible to return the warranty after getting root?
Technically, no. However, you can try to return the device to its original state:
- Flash the official firmware via Odin.
- Reset counter Knox (on some models this is possible through Combination Firmware).
- Make sure that
OEM Unlockis disabled in the developer menu.
Please note: even after these steps, the service center can detect traces of modifications through the log Knox.
Which Samsung models are easiest to root in 2026?
The following devices are the most root-friendly:
- Galaxy S20 FE (Exynos) - unlocking via
OEM Unlock. - Galaxy A52/A72 - support TWRP i Magisk.
- Galaxy Note 10 Lite โstable work with custom firmware.
- Galaxy Tab S6 Lite โminimal restrictions Knox.
The most difficult thing to root is the flagships of 2023โ2026 (Galaxy S23 Ultra, Galaxy Z Fold 5) because VaultKeeper.