Getting root-rights on smartphones Samsung is a task that requires not only technical skills, but also an understanding of the consequences. In 2026, the company tightened bootloader protection on most models, making the process more difficult than 2-3 years ago. If previously it was enough to unlock OEM Unlock and flash Magisk via TWRP, now on new devices (for example, Galaxy S23 Ultra or Galaxy Z Fold 5) you will need to bypass additional checks. Knox and VaultKeeper.

This article will help you figure out how to safely get root on Samsung, what tools you will need for this, and what to do if something goes wrong. We will look at both officially supported methods (for older models) and workarounds for new smartphones with One UI 6.0+. Important: the procedure will void the warranty and may lead to the brick device - so before you begin, make sure you understand all the risks.

๐Ÿ“Š Why do you need root access?
Removing built-in applications
Installing custom firmware
Overclocking the processor
Backing up system data
Other

What is root access and why do you need it on Samsung

root access (or superuser rights) give full control over the operating system Android. With their help you can:

  • ๐Ÿงน Remove pre-installed applications (bloatware) that cannot be uninstalled using standard methods.
  • โšก Install custom kernels to overclock the processor or improve autonomy.
  • ๐Ÿ”„ Create full system backups, including application and settings data.
  • ๐Ÿ› ๏ธ Modify system files (for example, change build.prop to deceive applications).
  • ๐Ÿ”“ Bypass manufacturer restrictions (for example, activate Wi-Fi Direct on uncertified devices).

However, there is a flip side to the coin. Samsung actively blocks the ability to obtain root on new models through:

  • ๐Ÿ”’ Knox โ€” a security system that records any changes in the firmware and can block the device.
  • ๐Ÿ›ก๏ธ VaultKeeper โ€”mechanism bootloader protection, which appeared in Exynos 2200 i Snapdragon 8 Gen 2.
  • ๐Ÿ“ฑ RMM (Remote Mobile Management) - a service that can remotely block bootloader unlocking.
โš ๏ธ Attention: On devices with One UI 5.0+ unlocking the bootloader triggers the flag RMM State: Prenormal. This means that even after resetting the settings, the device will not return to a state Normal without official software.

Preparation of the device: what needs to be done before getting root

Before you start unlocking, complete the required steps:

Backup data to PC or cloud

Checking model and firmware version

Installing Samsung USB drivers

Activating developer mode

Enable software debugging USB

Disabling Knox protection (if possible)

Checking the RMM status (via *#0808#)

-->

Pay special attention backup. After getting root, some applications (for example Samsung Pay, Netflix or banking services) may stop working due to triggering SafetyNet. It is also recommended:

  • ๐Ÿ“ฑ Write down the IMEI of the device (dial *#06#).
  • ๐Ÿ”‹ Charge the battery to 80% or more.
  • ๐Ÿ”Œ Use the original USB cable to connect to PC.

Check the firmware version in the menu Settings โ†’ Information phone โ†’ Software version. On new devices (for example, Galaxy S24), root is only possible on unofficial firmware, since stock software blocks modifications.

โš ๏ธ Attention: If your device was purchased from a telecom operator (for example, MTS or Beeline), the bootloader may be locked at the firmware level. In this case, you will need to flash it. data-i="102">software version. unlocked-software version.

Official method: unlocking the bootloader via OEM Unlock

On devices Samsung till 2022 (for example, Galaxy S20, Note 10) you can unlock the bootloader through the standard menu. To do this:

  1. Activate developer modeby clicking 7 times on Build number in the menu Settings โ†’ Phone information.
  2. Go back to Settings โ†’ Developer options and enable:
    • OEM Unlock (unlocking the bootloader).
    • USB debugging.
  • Connect the device to the PC and run the command:
    adb reboot bootloader
  • In mode Fastboot enter:
    fastboot flashing unlock

    and confirm unlock on the smartphone screen.

  • After rebooting, the device will be reset to factory settings. Now you can flash TWRP and install Magisk to get root.

    What to do if OEM Unlock is not in the menu?

    On some firmware (especially from operators), the item OEM Unlock may be hidden. In this case, try:

    1. Install the firmware for another region (CSC) via Odin.

    2. bypass RMM (for example, Combination Firmware).

    3. Wait 7 days after the device is turned on for the first time - sometimes RMM unlocks automatically.

    Unofficial methods: bypass Knox and VaultKeeper on new models

    Starting from Galaxy S22 i Galaxy Z Flip 4, Samsung implemented VaultKeeper a mechanism that blocks bootloader modification even after unlocking OEM UnlockTo bypass you will need:

    1. Flash Combination Firmware (service firmware) via Odin. It disables some of the checks. Knox.
    2. Install a patch for VaultKeeper (for example, via Shim or KnoxGuard Disabler).
    3. Flash TWRP or OrangeFox Recovery with support Samsung.
    4. Install Magisk to section init_boot (on new devices boot.img protected).

    On devices with Snapdragon 8 Gen 2 (for example Galaxy S23) to unlock The bootloader may require a hardware module USB JIG or a special cable to bypass VaultKeeper. This method is risky and can lead to hard brick (irreparable damage).

    Device model Unlocking method Risks Required tools
    Galaxy S20/S21 OEM Unlock + TWRP Knox triggered, loss of Samsung Pay Odin, Magisk, TWRP
    Galaxy S22/S23 Combination FW + VaultKeeper patch Hard brick in case of error Odin, Shim, USB JIG
    Galaxy A52/A72 OEM Unlock (if allowed) Loss of warranty ADB, Fastboot
    Galaxy Z Fold 4/5 Patched init_boot + Magisk Unstable camera operation Magisk Delta, OrangeFox

    Installing Magisk and obtaining root access

    After unlocking the bootloader and installing custom recovery (TWRP or OrangeFox), you can begin installation Magisk:

    1. Download the latest version Magisk (for example Magisk Delta for new devices) from the official repository.
    2. Copy the file Magisk-v26.4.zip to a memory card or internal memory.
    3. Boot into recovery (Volume Up + Power when turned on).
    4. Select Install and specify the path to the archive with Magisk.
    5. After installation, reboot the device.
    6. To check root access, install the application Root Checker from Google Play. If everything went well, you will see a message Root access properly installed.

      What to do if root does not work or the device is locked

      If after the manipulations the smartphone does not turn on or is stuck on the logo Samsung, try the following steps:

      • ๐Ÿ”„ Forced reboot: press Volume Down + Power for 10 seconds.
      • ๐Ÿ“ฑ Stock firmware: download the official firmware from SamMobile and flash through Odin.
      • ๐Ÿ”ง Recovery through recovery: if installed TWRPtry doing Wipe โ†’ Format Data.
      • ๐Ÿ› ๏ธ RMM Bypass: if the device is locked because RMM State: Prenormal, wait 7 days or use Combination Firmware.

      If the smartphone turns into "brick" (does not respond to buttons, is not detected by the PC), the bootloader may be damaged. In this case, only JTAG repair or replacing the motherboard will help.

      โš ๏ธ Attention: On devices with Exynos 2200 and newer, an attempt to flash incompatible firmware can lead to to permanent brick due to blocking VaultKeeper. Before experiments, make sure that the selected firmware is compatible with your model and region (CSC).

      Risks and consequences of getting root on Samsung

      Obtaining root access entails a number of restrictions:

      • ๐Ÿšซ Loss of warranty: Samsung voids the warranty if modifications are detected.
      • ๐Ÿ”’ Blocking of services: Samsung Pay, Secure Folder, Knox will stop working.
      • ๐Ÿ›ก๏ธ Problems with SafetyNet: some applications (banks, games) will refuse to start.
      • ๐Ÿ“ฑ Unstable operation: possible lags, overheating or rapid battery drain.
      • ๐Ÿ”„ Problems with OTA updates: stock updates will no longer be installed.

      To minimize risks:

      • Use MagiskHide or Universal SafetyNet Fix to bypass checks.
      • Make backups regularly via TWRP.
      • Avoid modifying system files if you are not sure of their security.

    FAQ: Frequently asked questions about root on Samsung

    Is it possible to root a Samsung without unlocking the bootloader?

    No. On all modern devices. Samsung installation Magisk or custom recovery requires an unlocked bootloader. The only exception is temporary root through exploits (for example, DirtyPipe), but it only works until a reboot and does not give full control.

    Why did the camera stop working after getting root?

    On new devices (for example, Galaxy S23), modification init_boot may break the operation of the camera drivers. Solution:

    1. Install the module Magisk to fix the camera (for example, Samsung Camera Patch).
    2. Use alternative shooting applications (for example, GCam).
    3. Return to stock firmware if the camera is critical.

    How to hide root from banking applications?

    Most banking applications (for example, SberBank Online or Tinkoff) check for root through SafetyNet. To bypass the check:

    • Activate MagiskHide in settings Magisk.
    • Install the module Universal SafetyNet Fix.
    • Add the banking application to the list of hidden ones in Magisk.
    • Use Island or Shelter to isolate applications in the sandbox.

    If all else fails, consider using a second phone without root for banking transactions.

    Is it possible to return the warranty after getting root?

    Technically, no. However, you can try to return the device to its original state:

    1. Flash the official firmware via Odin.
    2. Reset counter Knox (on some models this is possible through Combination Firmware).
    3. Make sure that OEM Unlock is disabled in the developer menu.

    Please note: even after these steps, the service center can detect traces of modifications through the log Knox.

    Which Samsung models are easiest to root in 2026?

    The following devices are the most root-friendly:

    • Galaxy S20 FE (Exynos) - unlocking via OEM Unlock.
    • Galaxy A52/A72 - support TWRP i Magisk.
    • Galaxy Note 10 Lite โ€”stable work with custom firmware.
    • Galaxy Tab S6 Lite โ€”minimal restrictions Knox.

    The most difficult thing to root is the flagships of 2023โ€“2026 (Galaxy S23 Ultra, Galaxy Z Fold 5) because VaultKeeper.