bootloader-unlock-wall-of-s.../README.md
2023-11-22 22:09:55 +07:00

11 KiB

Bootloader Unlock: Wall of Shame

Keeping track of companies that "care about your data 🥺"

Static Badge Hits

Why?

Over the past few years, a suspicious number of companies have started to "take care of your data", aka block/strictly limit your ability to unlock the bootloader on your own devices.

While this may not affect you directly, it sets a bad precedent. You never know what will get the axe next: Shizuku? ADB? Sideloading? I thought it might be a good idea to keep track of bad companies and workarounds.

If you know of specific details/unlocking methods, please PR them or drop them in the discussions

The list:

Reminder that no matter how nice a company is, you should not trust them unless their unlock process is 100% offline.

Avoid at all costs!

Huawei/Honor

In the past, Huawei allowed you to unlock with a special code you get by submitting some information to emui.com (IMEI, serial, model, and product ID), but in 2018 "corporate values have changed" and the site went down.
Worse, on Android 10+, the unlock command has been completely removed from fastboot.

Certain Kirin-based phones can use PotatoNV

Older models, through bruteforce:

Paid methods:
I don't recommend paid methods due to general sketchiness. I have used one of these tools a while ago, it was okay.
Through HCU-client (Not everything is supported + incredible prices hcu-client.com) or DC-Unlocker (Same problems as HCU dc-unlocker.com)

HMD Global/Nokia

In the flaming pile of HMD's "great" decisions to improve Nokia, one stands out more than others: They decided to follow the fresh "lock the bootloader" trend.
Why was this necessary? I don't know...

Well, anyway. On some models, hikari_calyx found the prototype ABL.

Vivo/IQOO

The BBK family has an unlocking problem. If in case of OPPO/Realme they at least offer an app in some regions, Vivo is locked completely.

Well, that is if xdaforums.com doesn't apply to you.

On pre-May 2022 firmware. I believe these methods were ~universal, but proceed with caution:

OPPO/Realme

I don't have a lot to say about OPPO.
The most annoying part about them is that you can unlock your bootloader, but only if you can enter fastboot. And guess what? They locked fastboot with an RSA key!

As per Realme, they decided that segregating people by race their phone's region is cool. If you didn't buy your phone in China or India, chances are you won't be unlocking anything anytime soon.

In April-May 2023 you could unlock any Realme phone using this script rmx3474-rooting, but on May 26th Realme posted this joke of an announcement on their forum c.realme.com. (They deleted the original announcement) Since then, they have forced their servers to return only "new struct" keys, making the Deep Testing app useless if your model is not supported.

As per China and India... Seeing how easily Realme dropped the ball on their global users, I personally would be worried about their future plans.

For now you can use any of the guides here c.realme.com (They're just copy-pasting the same info as the unlock process didn't change much at all). As of August, your applications can take up to 10 days to be approved.

If you need Deep Testing, try this: xdaforums.com.

Xiaomi/Redmi/POCO

While this (currently) only affects users in China, Xiaomi's new policy makes unlocking very annoying.

With this new policy You must have a Level 5 developer Xiaomi Community account.
And here's a list of things you have to do to get that:

  • You must be a citizen of China.
  • You have to use HyperOS and report at least 1 bug per day. (????)
  • You have to submit at least 1 HyperOS suggestion per month. (????)
  • You must be an active Xiaomi Community user.

Additional BS applies:

  • The permission to unlock is temporary and is granted for 1-year only.
  • You can only unlock 3 devices per-year.
  • You will not receive OTA updates.
  • your warranty will be void.

If your phone is not from China the standard 7+-day procedure applies.

Look here if you want to learn about how Ximi's bootloader works: Xiaomi-bootloader

Info kindly provided by n1ses!

Samsung

If you have a North American device, well, uh... If you're lucky enough not to update for a while, you can check out this paid service. (At your own risk)

If you bought your phone elsewhere, and it's not carrier locked, you can use the standard process, but brace yourself for all the breakage coming your way!

For example, unlocking will permanently trip Knox. As a result any Knox-based features will be broken even if you re-lock. This includes, but not limited to: Samsung Pay, Pass, Flow, Health, Secure Folder, Secure Wi-Fi, Smart View. Can you be denied warranty? Probably... Some of those features can be fixed with this LsPosed module KnoxPatch and this Magisk Module KnoxPatch#knoxpatch-enhancer.

In addition, some basic features can, and will probably break, like VoLTE, (thanks to Samsung's proprietary implementation) and in certain cases even the camera.

Info kindly provided by aries-ts-indo!

ZTE

Old devices (pre Android 8):
xdaforums.com

Proceed with caution!

Motorola

To start off, to unlock your bootloader you need to make a request on their website, which is pretty bad on its own (wink Huawei). But how do you know if your device is unlockable? Well...

  • This page says that "Most of our latest devices support our bootloader unlock program."
  • This page says only "Photon Q 4G LTE, DROID RAZR M(Developer Edition), DROID RAZR HD(Developer Edition CDMA-LTE), MOTOROLA RAZR HD (Rest of World -UMTS/LTE), MOTOROLA RAZR HD (Rogers Canada - UMTS/LTE) and MOTOROLA RAZR i are supported by the Bootloader Unlock site."
  • And from this conversation turistu had with their support: "most of our E devices doesn't support bootloader unlock program. Please see below a list of devices that support the bootloader unlock program : g100, g51 , g71 , g200 , g52 , g82 , g42 , g62 , g32"
  • There's also an unofficial way with CID to check if your device can be unlocked, check here: xdaforums.com

Moto used confusion! It seems pretty effective...

OnePlus

What? OnePlus? Aren't their phones super easy to unlock? - yes, but...
You probably heard about the OnePlus X OPPO os merger and while it did get called off, both companies started sharing a "unified codebase". You can probably see where I'm going.

If one day OnePlus decides to practice racism like Realme or go nuclear like OPPO/Vivo, they'll have those "unified" tools at their disposal.

SOC based

Universal methods for different SOCs.

Kirin

Kirin 620, 650, 655, 658, 659, 925, 935, 950, 960:
It's possible to unlock using testpoints and PotatoNV (Read the readme)

MediaTek

If you own a MediaTek device exploitable by mtkclient you can unlock the bootloader using that.
If it also happens to be an OPPO/Realme device and you need to access fastboot: oplus-unlock

Unisoc

If you own a phone with the Unisoc ud710 or ums512 SOCs you can look into this exploit: CVE-2022-38694_unlock_bootloader

Otherwise, you can also look into this: Spectrum_UnlockBL_Tool
This: xdaforums.com
Or this: subut

Qualcomm

There's no Universal Qualcomm method, unfortunately.

Although some of these might work for you:

The general exploit:
alephsecurity.com the bootloader unlock section.

Xiaomi Mi A1 and maybe all MSM89** manufactured before 2018:
EDLUnlock


Creative Commons License
Bootloader Unlock: Wall of Shame by https://github.com/melontini/bootloader-unlock-wall-of-shame is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.