Tested on HyperOS 1.0.xx Android 13. NFC Support. Make sure Backup IMEI & Baseband after boot into TWRP. Credit goes to tapin. This file contain instan UBL & Fix DM verity.
The unlock bootloader status permanent, you can root it using flash stock or custom ROM.
Disclamer
Not recomended for newbie, failed can make your device hardbrick!
Use at your own risk! I am not responsible for your actions.
Make sure read all the instruction & watch the video carefully.
Prerequisite
- Use at your own risk! I am not responsible for your actions
- You can use this method on any condition
- Password is "ombob opreker" without quote if needed
- Dont flash stock ROM on EDL mode
Video Tutorial
next
When Do You Need Bypass UBL?
You can use this tutorial to solve problem to root or flashing custom rom
- You don’t want to wait 7 days using official way
- Your phone got brick
- You forgot your mi account and doesn’t have phone number or email to recover it
- You buy the phone second handed and it still have mi account
File Needed To Bypass UBL
- Universal_Adb_Driver
- Mediatek Driver
- USB DK
- Bypass UBL Tools for Fleur
- Custom Recovery Fleur
- Latest Magisk Official/ Delta (rename apk to zip for install in custom recovery)
Step To Bypass UBL
- Enable developer option
- enable OEM Unlock
- Turn off phone
- Open tool > Extra tab
- checklist backup security
- Press backup > Yes
- Press vol + down plug USB
- When finish unplug usb
- Press Unlock > Yes
- Press vol + down plug USB (again)
- When finish unplug usb
- Boot into fastboot (vol down + power)
- plug USB > main tab > Next > Hit Fix DM Verity, ori you can type
- fastboot oem cdms
- it will automaticly reboot into android
- Done! Now your bootloader has been unlock
Backup Boot And Root Using Magisk
- enable OEM
- Turn off phone
- Press backup boot.img and vbmeta
- hit Yes
- Press vol + down plug USB
- After finish you find boot and vbmeta backup in folder
- When finish upnlog usb, turn on phone
- adb reboot bootloader
- fastboot flash --disable-verity --disable-verification vbmeta vbmeta.img
- fastboot flash boot custom_recovery.img
- fastboot reboot recovery
- backup IMEI Baseband (FlashInfo, Nvdata, nvram, persis, ProInfo, Protect, Sec)
- copy backup to a safe place (sdcard/ computer)
- format data
- reboot recovery
- Menu > Check location of you boot slot : e.g slot_b
- copy boot_b.img and magisk into phone
- File > select boot e.g boot_b.img
- flash it into boot partition > swipe
- Flash current recovery
- Menu > More > Flash Current OrangeFox > swipe
- Back > file > select magisk > flash
- Finish > Reboot System
- Done!
