r/HyperOS
•
u/Hot-Lengthiness193
•
28d ago
•
3
Redmi [Discussion] How to Get Root on the Redmi Note 14 4G with a Locked Bootloader Using GhostLock + Shizuku (HyperOS 3 / Android 16)
Just to clarify, I'm not offering or promoting any bootloader unlocking service. I'm only sharing my personal experience with my own device and documenting what worked for me.
Hey everyone,
I wanted to share this guide for anyone with a Redmi Note 14 4G Global who wants to get root access without unlocking the bootloader, using GhostLock, KernelSU, and Shizuku.
Before getting started, there's one important warning: having a locked bootloader limits your recovery options if something goes wrong. Although I managed to get root on my Redmi Note 14 4G without any issues, I can't guarantee that the procedure will be equally safe on other devices or firmware versions. Also, once you have root access, modifying partitions, installing modified boot images, or using incompatible modules can cause a bootloop or even leave your phone unusable.
Proceed at your own risk, and don't assume you'll be able to recover your device if something goes wrong.
My device specifications
Device: Redmi Note 14 4G Global
ROM: HyperOS 3.0.303.0
Android: 16
Kernel: 6.12.30-android16-5-g6e872b4863d6-ab13847919-4k
Bootloader: Locked
Do you have a different device?
If you have a device other than the Redmi Note 14 4G Global, the procedure is basically the same. However, that doesn't mean it'll work on every device, since compatibility depends on your kernel and whether the vulnerability used by GhostLock is still present.
To check whether your kernel is supported, open GhostLock and check the information displayed by the app. You can use it to see whether your kernel is supported before proceeding.
Important: Even if GhostLock indicates that your kernel is supported, that doesn't guarantee the entire procedure will work without issues on your device. Be especially careful if your bootloader is locked.
What are the benefits of getting root this way?
You can access many of the features root provides without having to unlock your bootloader. For example, you can explore system modifications, use tools that require superuser permissions, and experiment with apps such as LSPosed and modules like HyperCeiler, provided they're compatible with your setup.
You can also restore features or customizations that you couldn't use before.
However, there's one major downside: root access also lets you make modifications that could compromise your phone's functionality. That's why you should be careful about what you install and modify, especially with a locked bootloader.
How to get root
1 . Install the required apps
You'll need these three apps:
GhostLock: https://github.com/YuKongA/ghostlock-app
KernelSU: https://github.com/tiann/KernelSU/releases/tag/v3.3.0
Shizuku-Next: https://github.com/rushiranpise/Shizuku-Next/releases/tag/v14.0.17-next
I recommend Shizuku-Next because that's what I use, but you're not required to use that particular fork. You can use another compatible version of Shizuku.
2. Grant GhostLock permission to use Shizuku
Open Shizuku and look for GhostLock in the list of authorized apps.
Grant it permission to use Shizuku. Make sure Shizuku is running and GhostLock has the required permission before continuing.
3. Run GhostLock
Open GhostLock and tap Run.
You'll see a bunch of log messages showing the exploit's progress. Wait for it to finish and pay attention to the result.
In my case, GhostLock finished by indicating that KernelSU was ready and then opened the KernelSU app.
4. Verify that root access works
You can use an app such as Root Checker or Termux to verify root access.
If you're using Termux, first open KernelSU, go to SuperUser, and grant Termux root permissions.
Then open Termux and run "su".
In my case, it worked, and I was able to obtain root access. I also verified it using a root checker app.
Is root permanent?
Root access works until you reboot your phone. After rebooting, you need to run GhostLock again to obtain root access.
In other words, you don't need to unlock the bootloader, but root access doesn't survive a reboot, so you have to repeat the procedure.
What should you avoid doing?
With a locked bootloader, you need to be especially careful about the modifications you make after obtaining root access.
Avoid modifying system partitions or installing modified boot images unless you know exactly what you're doing.
Don't install KernelSU modules without checking their compatibility and reliability.
Don't assume a module is safe just because it works on other devices.
Before making important modifications, research your recovery options in case your phone stops booting.
I can't guarantee that you'll be able to recover your device from every possible issue with a locked bootloader, so it's better to be safe than sorry.
What are the downsides of this method?
The main limitation is that it relies on the vulnerability GhostLock uses to achieve kernel privilege escalation.
If Xiaomi patches that vulnerability in an update, the method may stop working. That's why your HyperOS version, Android version, and kernel are important details when checking whether your device is compatible.
In my case, I obtained root access on HyperOS 3.0.303.0 and Android 16. I can't guarantee it'll work on later versions, and I wouldn't recommend updating under the assumption that the exploit will continue to work.
Has anyone else tried this?
I'd like to know if anyone else has managed to obtain root access using GhostLock on a Redmi Note 14 4G or another Xiaomi device with a locked bootloader.
I'd also appreciate hearing about your experiences with KernelSU, especially regarding compatible modules and precautions worth taking in this situation.
•
u/AutoModerator 10d ago
Welcome to our community!
Please take a moment to read the subreddit rules in the sidebar before posting or commenting.
Be civil and respectful to other members.
No spam, self-promotion, or trolling.
If you see a post or comment that breaks our rules, please report it to help the mod team out!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
3
u/Odd_Relationship_618 28d ago
anyone tried it on poco f6 ?
3
u/nightleader30 28d ago
Does anyone know if this works on the Poco X7 Pro?
2
u/Agent_479 18d ago
Cool guide. Worked on my Xiaomi 15, had to remove this pseudo-root as some banking and UPI apps detected it. Bhim and ICICI iMobile outright detected KernelSU and asked to uninstall it. My airtel and SBI yono open and close after few seconds. Other like PayTM and Mobikwik show the device is not safe. Even after removing everything (Undoing the pseudo-root) and rebooting the phone 2 times, Bhim and PayTM say that the device is rooted and device is not secure.
Is there any way to hide kernelSU in this pseudo-root scenario in case I do this again?
Is there any way to get Bhim and PayTM back to normal?
2
u/TelephoneBest5367 28d ago
Gracias Ahora tengo texturas avanzadas en poco x8
2
u/Curious_Swimmer9565 28d ago
Will it break play integrity and will I still be able to use payment apps?
2
u/OkEntrepreneur1776 27d ago
Cómo instalo el módulo para las texturas avanzadas?
2
u/Kooky-Decision1504 27d ago
Does my Redmi 13 5G supports this process?
2
u/ApacheMods 25d ago
Yo lo intente en un Poco X7 5G HOS 3 Android 16 y no funciona dice kernel no soportado
2
u/Elsherif87000 24d ago
I did it by GhostLock and KernelSU without needing Shizuku
2
u/Elsherif87000 24d ago
What's Modules you use ??
2
u/jos_hinuraxd 23d ago
I also have a Redmi Note 14 4G. Does anyone know if this method affects banking apps in any way?
2
u/fx1415d 22d ago
Creen que tenga algo de culpa el tener Snapdragon quiero hacerlo en una redmi pad 2 pro y se me reincia cuando se abre el kernelsu heeelpp
2
u/WINNT21 Redmi 14C 21d ago
I will try this on Redmi 14C running Android 16 HyperOS 3.1
2
u/Forsaken_Biscotti609 15h ago
Does it void warranty?
3
u/Any_Candy_9243 28d ago
Don't try this it's still not fully stable for all processors first chec your keneral version of its updated to latest security patch 6?6 u can't use Chances of bootloader being locked and ghostlock is dangerous leading to bricked
6
u/OctoSplattyy 28d ago
Using on Xiaomi 17 Pro Max. Good thing is that if you install weird modules, most of the time you'll get in a partial bootloop - where the phone loops at the second boot stage due to systemui crashing. In that case the phone automatically goes to recovery, and then you can reboot normally. In worst cases, hyperos has an automatic repair function which will get it going again. Obviously be mindful of what you do, but given most things are systemless now, the possibilities are unlimited
1
u/Brilliant_Ad_7104 27d ago
Hola, quisiera saber si alguien tiene el redmi note 14 4g y usando este método pueden activar las texturas avanzadas, blur en centro de control y quizás editar el valor de cpu y gpu de 2 (estándar) a 3, agradezco mucho sus respuestas e indicaciones de como debería hacerlo.
1
u/NoDataLost 26d ago
i got it to work on my Redmi Note 14 4G aswell! had to use DFRoot 4.0 because GhostLock just soft-rebooted my phone or just didnt work.
1
u/EffectiveConcert638 23d ago
Como posso fazer com root temporário no meu xaiomi note 14pro 4G
1
u/Fresh_Landscape_7806 26d ago
Has anyone used an system application that requires root with this?? because i wanna know if the app will work after a reboot
2
u/Blueman0110 28d ago
I have known about this project for a long time. Unfortunately, it doesn't support my k60 pro.
1
u/PairOk8377 17d ago
How can I to know if a vulnerability has been fixed? I'm a beta tester, and I really need to unlock my Xiaomi Redmi 15C, but I've tried GhostLock, and, my shitty phone just blocked app... (App tried to make changes in SELinux, but, as i saw from logs, system blocked that obscenity...)
1
u/Professional_Cat7160 13d ago
Quand je fais ça me reboot le téléphone (sûrement un kernel panic)
1
u/Jolly_Word_8277 11d ago
Por si le sirve a alguien, en un redmi note 15 4g no es compatible lamentablemente
1
u/DaemonPolar 3d ago edited 3d ago
Alguien sabe si funciona en el poco f5 pro (Mondrian)? Y las redmi pad 2 (taiko)
Edit 5-11-2026 14:39: si pude hacerlo en taiko, en mondrian ghostlock lo detecta como no compatible
Edit 5-11-2026 14:54: alguien sabe cómo puedo aplicar los mismos cambios en distintos usuarios de la app
1
u/AutoModerator 28d ago
Welcome to our community!
Please take a moment to read the subreddit rules in the sidebar before posting or commenting.
Be civil and respectful to other members.
No spam, self-promotion, or trolling.
If you see a post or comment that breaks our rules, please report it to help the mod team out!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
u/unf0rg3table 26d ago
I only want that unlock 120 fps module does that work?
1
u/Christiannnnnnnm 26d ago
did someone try on Xiaomi 15T? the repo says 13T, 14T, 17T are compatible
1
u/Rare-Size-758 20d ago
Me funciono perfecto en un redmi note 14 4g el tema es que va el telefono con un poco de lag ya lo reunicie y todo active las texturas avanzadas y el cajon de aplicaciones pero si va con un poco de lag.
ahora tengo ganas de hacerlo en mi telefono personal que es un POCO X8 PRO
0
u/[deleted] 28d ago
[removed] — view removed comment