Obtaining superuser rights on a device with MIUI or HyperOS shell is a complex but exciting process that opens up endless possibilities for customization. Smartphone owners Xiaomi, Redmi and POCO often face system limitations that prevent them from removing pre-installed software or using specialized tools for deep optimization. It is Root access that allows you to remove these shackles and gain full control over the file system of your gadget.
However, the path to obtaining administrator privileges is not easy and requires careful preparation. You will have to go through the process of unlocking the bootloader, which will inevitably lead to the complete removal of all data from the device. It is important to understand that any manipulations with system partitions carry the risk of turning the phone into a “brick” if the actions are performed incorrectly.
In this article we will analyze in detail each stage: from officially unlocking Bootloader to installing a modern rights manager Magisk. We will not use outdated methods like SuperSU, since they are incompatible with new versions of Android installed on current Xiaomi models.
Preparing the device and unlocking the bootloader
The first and most critical step is unlocking the bootloader. Without fulfilling this condition, installing a modified recovery or obtaining root access is technically impossible. The company Xiaomi has implemented strict security measures that require linking your Mi account to the device and waiting for a certain period of time.
First, you need to activate developer mode. Go to your phone settings, select “About phone” and quickly click 7 times on the shell version MIUI or HyperOS. After this, a new section “For Developers” will appear in the advanced settings, where you need to activate the “Factory unlock” item.
⚠️ Attention: The process of unlocking the bootloader initiates a complete reset of the device to factory settings. All photos, contacts and applications will be permanently deleted, so be sure to create a backup copy of important data in the cloud or on your computer before starting the procedure.
Next you will need a utility Mi Unlock Toolwhich should be downloaded from the official website and installed on a computer running Windows. Connect your smartphone in Fastboot mode (by holding down the volume down and power buttons when the device is turned off) and log in to the same Mi account that was linked in the phone settings. The system may require you to wait from 7 to 168 hours before attempting to unlock again - this is a mandatory security requirement.
☑️ Preparing for unlocking
Installing custom Recovery TWRP
After successful unlocking, the standard recovery menu (Stock Recovery) will not allow installation modified firmware files. For these purposes, we use TWRP (Team Win Recovery Project) a third-party recovery with touch control support and advanced functionality.
You need to find a recovery image that strictly matches the code name of your device model. For example, for Xiaomi Mi 9 this is cepheus, and for Redmi Note 10 Pro — sweet. An incorrectly selected file may make it impossible to boot the system. The downloaded file with the extension .img needs to be placed in the platform tools folder on the computer.
The firmware process is carried out via the command line. Connect the phone in Fastboot mode and run the command:
fastboot flash recovery twrp_image_name.imgImmediately after entering the command, the phone must be switched to Recovery mode manually by holding down the button combination so as not to reboot into the stock system, which can overwrite the installed TWRP back to stock. In the TWRP menu, first of all, make a full backup of the partitions Boot and System in case a rollback is necessary.
What to do if TWRP is not installed?
If the fastboot command gives an error or the image is not flashed, you may have a device with a MediaTek processor or a new one AVB protection version 2.0. In such cases, you may need to use the MCT Bootloader utility or patch the image through Magisk Manager before flashing the firmware.
Integration of Magisk to obtain root access
Today, the de facto standard for managing superuser rights is the project Magisk. Unlike old methods, Magisk works system-safely (systemless), which allows you to hide the fact of having root access from banking applications and Google Pay services.
To install, download the latest version of the Magisk apk file from the official GitHub repository. Rename the file extension from .apk to .zip and copy it to the internal memory of your smartphone. Reboot into the previously installed TWRP, select “Install”, find the archive and swipe to confirm installation.
- 🚀 Systemless Interface: Magisk makes changes to the boot image partition without affecting the system partition, which allows you to pass the system integrity check (SafetyNet/Play Integrity).
- 🛡️ Magisk Hide: Allows you to selectively hide root access for specific applications that refuse to work on modified devices.
- 🧩 Modules: Support for installing modules that change system parameters, fonts, audio drivers and camera functionality without flashing the entire device.
After installation, restart your smartphone in normal mode. The Magisk icon will appear in the application menu. When you first launch the application, you may request additional configuration or installation of additional components - accept this. Now you have full access to the file system.
If after installing Magisk the phone goes into an endless reboot (bootloop), boot into TWRP and use the “Wipe” → “Advanced Wipe” → select only “Dalvik / ART Cache”, then reboot. This often solves the problem of cache conflicts.
Checking rights and access control
You can verify the success of the procedure using specialized utilities, such as Root Checkeravailable on Google Play. However, a more reliable method is to try to run commands through the terminal or view the status in the Magisk application itself, where the “Superuser” section should show the status “Installed.”
Access control is done in the Magisk interface. The first time any application requests superuser rights, a pop-up window will appear on the screen asking for confirmation. You can grant access forever, only once, or deny the request. It is recommended to reject requests from unknown applications by default.
| Application | Access status | Notifications | Comment |
|---|---|---|---|
| Termux | Allowed | Enabled | Necessary for working with the console |
| Greenify | Allowed | Disabled | For deep hibernation of background processes |
| SD Maid | Allowed | Enabled | Cleaning system debris |
| Banking application | Prohibited | Disabled | Security of financial transactions |
Remember that the presence of an active rights request window may indicate an attempt by malware to gain control of the system. Always check the package name and application icon before clicking the confirmation button.
Risks, guarantees and system security
Obtaining root access to Xiaomi carries a number of serious consequences that the user should be aware of before starting the procedure. The most obvious is the loss of official warranty. Service centers can easily determine the fact that the bootloader is unlocked and the presence of modified software, which is a legal basis for refusing free repairs.
⚠️ Attention: When the bootloader is unlocked on Xiaomi devices, the counter is irreversibly triggered
fw_ver. Even if you lock the bootloader back and return the stock firmware, traces of the intervention will remain in the device’s service logs, which will void the manufacturer’s warranty.
In addition, data security is reduced. Malware that gains root access can steal confidential information, intercept SMS messages, or take hidden screenshots. Also, some applications, especially banking and streaming services with DRM protection (for example, Netflix in HD quality), may refuse to work or limit functionality.
Working with system files requires high qualifications. Removing a critical file from a directory /system or /vendor may cause the phone to stop turning on. Recovery in this case is only possible through the EDL (Emergency Download Mode), access to which on new Xiaomi models is often paid and requires an authorized service center account.
Unlocking the bootloader and obtaining Root is an irreversible action from a warranty point of view. If your smartphone is the only communication device and you are not prepared to risk data loss or damage, it is better to refrain from this procedure.
Frequent problems and ways to solve them
During the modification process, users often encounter common errors. One of the most common is “Bootloop” (cyclic reboot). This happens if the installed Magisk module is incompatible with the Android version or if the bootloader image has been corrupted.
Another problem is the inability to pass the Google Play Integrity security check. Banking applications see root and block launch. To solve this problem, you need to activate the “Zygisk” function in Magisk settings, enable “Enforce DenyList” and add all banking applications and Google Play services there. Sometimes it is necessary to use additional script modules that mask the presence of an unlocked bootloader.
If the phone does not see the internal memory after flashing TWRP, this means that the file system is encrypted with the stock recovery key. The solution is to format the Data section (not just wipe, but Format Data) inside TWRP by entering the word yes. After this, the memory will become writable.
Is it possible to get Root on Xiaomi without unlocking the bootloader?
No, this is not possible on modern Xiaomi devices with Android 6.0 and higher. Old exploits (for example, KingRoot) do not work on new security versions and often contain malicious code. The only legal and safe way is official unlocking via Mi Unlock.
Will Root be reset after updating the firmware over the air (OTA)?
Yes, installing the official MIUI/HyperOS update will overwrite the modified boot image, and the superuser rights will disappear. However, the Magisk application itself will remain on the system. To save root, you need to use the “Install to Inactive Slot” function in the Magisk application before updating, and after the OTA update, do not reboot immediately, but open Magisk again and complete the installation.
Does Root affect camera performance and photo quality?
Root access itself does not degrade the quality of pictures. However, if you install modules that change image processing algorithms, the result may change for the better or for the worse. Some modules allow you to enable the functions of flagship cameras on budget models.
What is EDL mode and when is it needed?
EDL (Emergency Download Mode) is a deep firmware mode for Qualcomm processors. It is used when the phone does not boot at all (black screen, reaction only to vibration). On Xiaomi, entering this mode is often blocked and requires an authorized Mi account for flashing the firmware via the MiFlash utility.