Bootloader unlocking: Difference between revisions

Content deleted Content added
Citation bot (talk | contribs)
Altered title. | Use this bot. Report bugs. | #UCB_CommandLine
 
(13 intermediate revisions by 9 users not shown)
Line 10:
Unlocking the bootloader allows installing and running unsigned code on a device, including user customized software. Operating outside the manufacturer specification might usually result in voiding any [[warranties]] and may make the device susceptible to [[data theft]], as the integrity of the operating system (as intended by the manufacturer) can no longer be guaranteed.<ref>{{Cite book |last=Tamma |first=Rohit |title=Learning Android forensics: a hands-on guide to Android forensics, from setting up the forensic workstation to analyzing key forensic artifacts |author2=Donnie Tindall |date=2015 |isbn=978-1-78217-444-8 |___location=Birmingham, UK |oclc=910639389}}</ref> On Chromebooks, enabling developer mode makes the system less secure than a standard laptop running Linux.<ref>{{Cite web |last=Porup |first=J. M. |date=2017-06-19 |title=How to install Linux on a Chromebook (and why you should) |url=https://arstechnica.com/gadgets/2017/06/how-to-install-linux-on-a-chromebook/ |url-status=live |archive-url=https://web.archive.org/web/20170619130103/https://arstechnica.com/gadgets/2017/06/how-to-install-linux-on-a-chromebook/ |archive-date=2017-06-19 |access-date=2021-09-06 |website=[[Ars Technica]] |language=en-us}}</ref> Unlocking the bootloader may require reinitialization, formatting to factory settings, or otherwise lead to data loss on Android and [[ChromeOS]] devices. This is due to the fact that some user data is impossible to back up without root permission. This will also lead to certain security apps not working, such as [[Samsung Knox]] for which the counter would be stuck at "0x1."
 
Sascha Segan from [[PCMag]] considered a locked bootloader a mistake on the Qualcomm Snapdragon Insiders phone, which is targeted at advanced users.<ref>{{Cite web |title=Qualcomm Smartphone for Snapdragon Insiders Review |url=https://www.pcmag.com/reviews/qualcomm-smartphone-for-snapdragon-insiders |url-status=live |archive-url=https://web.archive.org/web/20210816140636/https://www.pcmag.com/reviews/qualcomm-smartphone-for-snapdragon-insiders |archive-date=2021-08-16 |access-date=2021-09-06 |website=[[PCMag]] |date=16 August 2021 |language=en}}</ref>
 
== Platforms ==
Line 18:
 
{| class="wikitable sortable"
|+ Android bootloader unlocking as of 20242025
|-
! Manufacturer !! Difficulty level !! Method
|-
| [[Google Pixel|Google]]|| Easy (non-Verizon)<br>Medium<ref>{{cite web | title=Rooting your Bootlocked Pixel Phone (Verizon Edition) | url=https://joshspicer.com/root-pixel-1 }}</ref> (Verizon) || Command-line (unlocked variant, not restricted to carrier, and non-Verizon carrier variants when paid off fully)
|-
| [[Samsung Galaxy|Samsung]]|| Easy (global)<br>Unavailable (US, Canada and Japan)<br>Unknown (South Korea)Complicated
* Some very old Android versions - available with usual flashing tools.
| Enable option that allows OEM unlock (if it exist) in Development settings, then unlock bootloader in Download mode.
* North American versions
** Below March 2021 security update - Freely unavailable, commercially available (requred unlock tokens that are officially unobtainable, but obtainable by third parties through yet publicly unknown means, resold as paid shady services available in Telegram and Discord), additionally modified flashing tools and firmwares are required<ref>https://xdaforums.com/t/closed-android-unsamlock-bootloader-unlock-for-samsung-us-canada-devices.4215101/</ref><ref>https://xdaforums.com/t/2023-sm-g950u-u1-w-rev8-root-method-android-9-snapdragon-models-via-bootloader-unlock-token.4060701/</ref>.
** Above March 2021 security update - unavalable.
* Other versions
** Below One UI 8.0 - freely available.
** Any versions above One UI 8.0 - unavailable<ref>{{Cite web |date=2025-07-26 |title=Bootloader unlocking option removed from |url=https://xdaforums.com/t/bootloader-unlocking-option-removed-from-one-ui-8-0.4751904/ |access-date=2025-07-27 |website=XDA Forums |language=en-US}}</ref>
| Enable option that allows OEM unlock (if it existexists) in Development settings, then unlock bootloader in Download mode.
[[Samsung Knox]] (on supported<ref>{{Cite web |url=https://www.samsungknox.com/en/knox-platform/supported-devices |title=Device Compatibility Knox Solutions &#124; Samsung Knox |access-date=2024-12-05 |archive-date=2024-12-07 |archive-url=https://web.archive.org/web/20241207152737/https://www.samsungknox.com/en/knox-platform/supported-devices |url-status=live }}</ref> devices) will be permanently tripped if modified or custom firmware is flashed, so [[Samsung Wallet]], Secure Folder and applications made use of the Knox framework will be permanently unusable even if the bootloader is re-locked.
 
Prior to One UI 8.0, Devices sold outside of North America had the OEM Unlock option to unlock the bootloader.
 
From One UI 8.0, Samsung has removed the ability to unlock the bootloader in all regions.<ref>{{Cite web |date=2025-07-26 |title=Bootloader unlocking option removed from One UI 8.0 |url=https://xdaforums.com/t/bootloader-unlocking-option-removed-from-one-ui-8-0.4751904/ |access-date=2025-07-27 |website=XDA Forums |language=en-US}}</ref><ref>{{Cite web |last=Leon |first=Jean |date=2025-07-26 |title=One UI 8 Could Be Killing Part of the Core Essence of Android |url=https://www.androidheadlines.com/2025/07/samsung-one-ui-8-prevents-unlocking-bootloader-galaxy-phone.html |access-date=2025-07-27 |website=Android Headlines |language=en-US}}</ref>
|-
| [[OnePlus]]|| Easy (non-[[T-Mobile US|T-Mobile]])<br>Medium ([[T-Mobile US|T-Mobile]])|| Command-line, except on T-Mobile US variants where an unlock code is needed
|-
| [[Xiaomi]]|| Hard (MIUI powered devices)<br>Very Hard (non-Chinese HyperOS powered devices)<br>UnavailableImpossible (China Mainland)
| AddRequires Mia account, request code via Windows3-only7 software,day waitold forMi 3 days on HyperOS or 1 week for MIUIaccount (limited to one device per month and three devices per year).
On devices with [[Xiaomi HyperOS]] outside mainland China, you need to request for bootloader unlock permission for your Xiaomi accountpermissions in the Xiaomi Community app before you can proceedproceeding with bootloader unlocking. YourRequires Xiaomi account needs to be at leasta 1 -month -old toXiaomi be eligibleaccount.
 
For Mainland China devices with HyperOS, bootloader unlock ishas not been available since February 2025.
|-
| [[Asus]]|| UnavailableImpossible || Unavailable since August 2023, when first-party appapps were removed and servers were shut down.
|-
| [[Sony Mobile|Sony]]|| Medium || Command-line, request code at Sony website
Line 43 ⟶ 54:
|-
| [[Motorola]]|| Varies widely between model and SoC manufacturer<ref>{{Cite web |date=2020-04-08 |title=[Guide]Un/locking Motorola Bootloader |url=https://xdaforums.com/t/guide-un-locking-motorola-bootloader.4079111/ |access-date=2025-06-12 |website=XDA Forums |language=en-US}}</ref>
UnavailableMedium (Except Verizon, AT&T, TracfoneTracFone)
 
Impossible (Verizon, AT&T, TracFone)
| Command-line, request code at Motorola website
|-
| [[Realme]]|| Medium-Hard (China Mainland and India)<br>UnavailableImpossible (global) || Command-line, after installation of the in-depth test app and submitting an application for in-depth testing.
|-
| [[Nothing (company)|Nothing]]|| Easy || Command-line
|-
| [[Huawei]]|| Medium-Hard (Kirin SoCs, select Huawei phones)
UnavailableImpossible (others)
| Select Huawei phones using the Kirin SoC can have their bootloader unlocked unofficially via potatonv: https://www.xda-developers.com/huawei-honor-bootloader-unlock-potatonv/
For other devices, bootloader unlock ishas not been available since July 2018.
|-
| [[Oppo|OPPO]]|| Easy ([[MediaTek]]) or phones that bought in mainland China<ref>{{cite web | url=https://www.oppo.cn/thread-397164526-1 | title=帖子详情 - Oppo社区 }}</ref><br>Medium (Snapdragon).
| [[Oppo|OPPO]]|| Easy ([[MediaTek]]) or phones that bought in mainland China<ref>{{cite web | url=https://www.oppo.cn/thread-397164526-1 | title=帖子详情 - Oppo社区 }}</ref><br>Medium (Snapdragon). Only any phones in support list are possible to unlock Snapdragon-powered OPPO phone.<ref>{{cite web | url=https://drive.proton.me/urls/33N5W4XGHW#tdsu-ADk9YyA | title=Proton Drive }}</ref> Any phones that's not in support lists is still possible if using paid tool also known as UnlockTool. Without paid tool, It would be impossible to unlock. Unlocking is possible on some mediatek SoCs via MTKClient. Note that about fastboot binaries were removed, or locked by RSA key|| Snapdragon: https://us.docs.wps.com/l/sIIS95rToAcW2x7AG?v=v2<ref>{{cite web | url=https://www.reddit.com/r/Oppo/comments/1bx3kbt/comment/l3qzue1/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button | title=Tutorial can be foun… | date=12 May 2024 | access-date=9 July 2024 | archive-date=9 July 2024 | archive-url=https://web.archive.org/web/20240709115137/https://www.reddit.com/r/Oppo/comments/1bx3kbt/comment/l3qzue1/?utm_source=share&utm_medium=web3x&utm_name=web3xcss&utm_term=1&utm_content=share_button | url-status=live }}</ref>
|| Only certain Snapdragon-powered OPPO phones can be unlocked<ref>{{cite web | url=https://drive.proton.me/urls/33N5W4XGHW#tdsu-ADk9YyA | title=Proton Drive}}</ref>{{Better source needed|date=July 2025}} without a third-party paid tool such as UnlockTool.{{citation needed|date=July 2025}} Unlocking is possible on some MediaTek SoCs via MTKClient. Note that certain fastboot binaries have been removed, or locked by RSA key.
MediaTek: MTKClient, sometimes MTK bypass utility are required beforehand
 
MediaTek: MTKClient, which sometimes requires using MTK bypass utility are required beforehand.
Any phones that's bought from mainland China and in device support lists of depth-test: Unlock by depth test regardless of SoC, depth test app can be downloaded from https://www.oppo.cn/thread-397164526-1 then unlock via adb with simple command line while in fastboot state
 
Any phones that's bought from mainland China and in depth-test's device support lists of depth-test: Unlock by depthDepth test regardless of SoC, (the depth test app can be downloaded from https://wwwOppo's website).oppo.cn/thread-397164526-1 thenCommand unlockline viausing adb with simple command line while inand fastboot state.
If you are getting "Handshake failed" on MTKCilent, then it is necessary to [[test point]] to force boot into [[boot ROM]]
|-
| [[HMD Global|HMD]]-[[Nokia]]|| UnavailableImpossible || N/A
|-
|[[Vivo (technology company)|vivoVivo]]
|UnavailableImpossible as of May 2022.<ref>{{Cite web |title=vivo Smartphone FAQs {{!}} vivo India |url=https://www.vivo.com/in/support/questionList?categoryId=10047&FAQId=10204 |access-date=2022-11-29 |website=www.vivo.com |archive-date=2022-11-29 |archive-url=https://web.archive.org/web/20221129234638/https://www.vivo.com/in/support/questionList?categoryId=10047&FAQId=10204 |url-status=live }}</ref>
|N/A
Unless there are XDA forums that have methods to unlock, but some method cannot be used after updated phone patched exploit. The user can access fastboot, but the manufacturer has modified the bootloader so that it does not respond to any commands to unlock bootloader.
|Vivo X70 Pro+ https://xdaforums.com/t/vivo-x70-pro-bootloader-unlock-how-to-guide.4444989/ Vivo Y31 2021 https://xdaforums.com/t/unlocking-bootloader-rebooting-in-edl-without-testpoint-vivo-y31-2021.4440801/
|-
| [[LG]]|| Hard || [Possible<ref>{{cite web |title=V60 Bootloader Unlock and Magisk Root |url=https://xdaforums.com/t/v60-bootloader-unlock-and-magisk-root.4358785/ Possible],|website=XDA withForums the|date=8 helpNovember of2021 leaked|access-date=24 engineeringJuly bootloaders2025}}</ref>{{Better availablesource toneeded|date=July be2025}} flashedby viaflashing bootloaders with QFIL utility (Unofficial).
|-
| [[Tecno Mobile|Tecno]]|| Medium || Command-line,. (requiresRequires Tecno ID account onat the phone, registered inleast two weeks orold. more, to activate OEM unlocking.)
|-
| [[Infinix]]|| Medium || Command-line,. (requiresRequires InfinixInifinix ID account onat the phone, registered inleast two weeks orold. more, to activate OEM unlocking.)
|-
| [[Itel Mobile|Itel]]|| Medium || Command-line,. (requiresRequires Itel ID account onat the phone, registered inleast two weeks orold. more, to activate OEM unlocking.)
|-
| [[TCL Technology|TCL]]|| Medium (Ion V only)
Unknown (others)
| For the Ion V mobile phone, you can use a Python tool to reboot to a normally hidden fastboot,. then use the fastboot command 'fastboot flashing unlock' to unlock it.
|-
|[[Amazon (company)|Amazon]]
|Medium
|Command-line, requiresand unofficial. Requires using Linux to [[Brick (electronics)|brick]] the device temporarily.<ref>{{Cite web |date=2019-03-21 |title=[UNLOCK][ROOT][TWRP][UNBRICK] Fire HD 10 2017 (suez) |url=https://xdaforums.com/t/unlock-root-twrp-unbrick-fire-hd-10-2017-suez.3913639/ |access-date=2025-04-19 |website=XDA Forums |language=en-US |archive-date=2025-04-09 |archive-url=https://web.archive.org/web/20250409172641/https://xdaforums.com/t/unlock-root-twrp-unbrick-fire-hd-10-2017-suez.3913639/ |url-status=live }}</ref>{{Better source needed|date=July 2025}}
|}
 
==== History ====
 
The bootloaders of [[Google Nexus|Nexus]] and [[Google Pixel|Pixel]] devices can be unlocked by using thewith [[fastboot]] command <code>fastboot oem unlock</code> or if it doesn't recognize the command <code>fastboot flashing unlock</code>.<ref>{{Cite web |title=Factory Images for Nexus and Pixel Devices {{!}} Google Play services |url=https://developers.google.com/android/images |access-date=2022-11-07 |website=Google Developers |language=en |archive-date=2017-04-04 |archive-url=https://web.archive.org/web/20170404151606/https://developers.google.com/android/images |url-status=live }}</ref>
 
When [[Motorola]] released a bootloader unlocking tool for the Droid Razr, [[Verizon]] removed the tool from their models.<ref>{{Cite web |last=Ingraham |first=Nathan |date=2011-10-24 |title=GSM Motorola RAZR hits the FCC; Verizon model has locked bootloader |url=https://www.theverge.com/android/2011/10/24/2511339/droid-razr-att-verizon-fcc |access-date=2022-06-14 |website=[[The Verge]] |language=en |archive-date=2022-10-01 |archive-url=https://web.archive.org/web/20221001041223/https://www.theverge.com/android/2011/10/24/2511339/droid-razr-att-verizon-fcc |url-status=live }}</ref>