All Xiaomi HyperOS BootLoader Unlock Restriction Bypass

📲 Unlocking requirements

An valid device:
- A unbanned* Xiaomi, Redmi or POCO device.
- Your device is running the official version of HyperOS.
- (Update 2023/11/23) Your device is not forced to verify account qualification by Xiaomi.
An valid SIM card:
- * Except for tablets that cannot use SIM cards.
- SIM card must not be out of service.
- SIM card needs to be able to access the internet.
- Only 2 devices per valid SIM card are allowed to be unlock to a valid SIM card within a three-month period.
An valid Xiaomi account:
- A unbanned* Xiaomi account.
- Each account can only unlock 1 phone in a month and 3 phones in a year period.
You have read and understood the Warning above.
* According to the unlocking instructions provided by Xiaomi, it will prohibit some accounts and devices from using the unlocking tool, which is called “risk control”.

Download and install PHP 8.0+ for your system from the official website.
Enable OpenSSL and Curl extension in php.ini. (And/or set extension_dir to your PHP’s ext directory if script not work.)
Place adb.php in php-adb to the directory.
Download platform-tools and place them in libraries. Note: Mac OS needs to rename adb to adb-darwin.
Open a terminal and use PHP interpreter to execute the script.

Tap repeatedly on the Settings - About Phone - MIUI Version to enable Development Options.
Enable OEM Unlocking, USB Debugging and USB Debugging (Security Settings) in Settings - Additional Settings - Development Options.
Log in an valid* Xiaomi account.
Connect phone to PC via wired interface.
Check Always allow from this computer and click OK.
Wait and follow the prompts of script.
After successful binding, you can use the official unlock tool to check the time you need to wait.
During the waiting period, please use the device normally, keep the SIM card inserted, do not log out of your account or turn off Find My Phone, and do not re-bind the device until it is successfully unlocked. The device will automatically send HeartBeat packets to the server every once in a while.

Q: Why does the unlock tool still remind me to wait 168/360 (or more) hours?
- A: By principle, this PoC only bypasses the restrictions added for HyperOS. You still need to comply with the restrictions for MIUI.
Q: The device shows Couldn't verify, wait a minute or two and try again.
- A: This is normal, the binding request on the device side has been blocked by our script. The actual binding result is subject to the script prompt.
Q: Binding failed with error code 401.
- A: Your Xiaomi account credentials have expired, you need to log out and log in again in your device.
Q: Binding failed with error code 20086.
- A: Your device credentials have expired, you need to reboot your device.
Q: Binding failed with error code 20090 or 20091.
- A: Device’s Security Device Credential Manager function failure, contact after-sales.
Q: Binding failed with error code 30001.
- A: Your device has been forced to verify the account qualification by Xiaomi. Xiaomi lost its ‘geek’ spirit a long time ago, and there’s nothing we can do about it.
Q: Binding failed with error code 86015.
- A: The server has rejected this bind request, please try again.