![Banner. A lock and a key on fire on the left and the text 'Bootloader Unlock: Wall of Shame' on the right.](./misc/banner/banner.jpg) Keeping track of companies that "care about your data 🥺" [Switch to Russian translation](ru/README.md) ![Terrible](https://raw.githubusercontent.com/melontini/mini-badges/v1/personal/terrible.svg) [![License CC BY-NC-SA](https://raw.githubusercontent.com/melontini/mini-badges/v1/licenses/cc/cc-by-nc-sa-4.0.svg)](https://github.com/melontini/bootloader-unlock-wall-of-shame/blob/main/LICENSE)
mirrors

- GitHub: https://github.com/melontini/bootloader-unlock-wall-of-shame - Codeberg: https://codeberg.org/melontini/bootloader-unlock-wall-of-shame - tangled: https://tangled.sh/did:plc:rjhjcb3rgdsmdr6ykywuh63z/bootloader-unlock-wall-of-shame

## Why? Over the past few years, a suspicious number of companies have started to "take care of your data", aka block/strictly limit your ability to unlock the bootloader on your *own* devices. While this may not affect you directly, it sets a bad precedent. You never know what will get the axe next: Shizuku? ADB?

**They've already gone after [sideloading](https://mashable.com/article/google-android-sideloading-apps-security).**

I thought it might be a good idea to keep track of bad companies and workarounds. If you know of specific details/unlocking methods, please PR them or drop them in the [discussions](https://github.com/melontini/bootloader-unlock-wall-of-shame/discussions) # The list: > [!CAUTION] > Reminder that no matter how nice a company is,
> you should not trust them unless their unlock process is 100% offline! ## 🍅 Just terrible! The following manufacturers have made it completely impossible to unlock their devices without a workaround. ### [Alcatel](./brands/alcatel/README.md) ### [Amazon](./brands/amazon/README.md) ### [Apple](./brands/apple/README.md) ### [Asus](./brands/asus/README.md) ### [Cat](./brands/cat/README.md) ### [Coolpad](./brands/coolpad/README.md) ### [Doogee](./brands/doogee/README.md) ### [Energizer](./brands/energizer/README.md) ### [Huawei](./brands/huawei/README.md) ### [Meizu](./brands/meizu/README.md) ### [Panasonic](./brands/panasonic/README.md) ### [Samsung](./brands/samsung/README.md) ### [Sharp](./brands/sharp/README.md) ### [TCL/BlackBerry](./brands/tcl/README.md) ### [Vivo/IQOO](./brands/vivo/README.md) ### [Windows phones](./brands/winphones/README.md) ### Carrier Locked Devices > [!NOTE] > Phone brands handle carrier locks differently, so check your device manual or contact support. Carrier locked devices are the ones you get after making a commitment with a carrier of your choice. This is quite common in North America and (supposedly) allows you to save some money on your device. As a rule, almost all carrier locked devices do not allow the bootloader to be unlocked. This usually makes sense, as it would allow you to completely bypass the contract. The problem is that many devices still do not allow you to unlock the bootloader even after the carrier lock has been lifted. For more details, see the [carriers page](./carriers/README.md). ## ⛔ Avoid at all costs! The following manufacturers allow unlocking under certain conditions, such as region, model, SOC, etc., or require a sacrifice to unlock. ### [Hisense](./brands/hisense/README.md) ### [HMD/Nokia](./brands/nokia/README.md) ### [Honor](./brands/honor/README.md) ### [HTC](./brands/htc/README.md) ### [LG](./brands/lg/README.md) ### [Motorola/Lenovo/NEC](./brands/motorola/README.md) ### [OPPO/Realme](./brands/oppo/README.md) ### [Xiaomi/Redmi/POCO](./brands/xiaomi/README.md) ## ⚠️ Proceed with caution! The following manufacturers require an online account and/or a waiting period before unlocking. ### [Fairphone](./brands/fairphone/README.md) ### [Google/Nexus](./brands/google/README.md) ### [Infinix](./brands/infinix/README.md) ### [itel](./brands/itel/README.md) ### [OnePlus](./brands/oneplus/README.md) ### [Sony](./brands/sony/README.md) ### [Tecno](./brands/tecno/README.md) ### [ZTE/nubia](./brands/zte/README.md) ## ℹ️ "Safe for now" :trollface: ### [Blackview](./brands/blackview/README.md) ### [Cubot](./brands/cubot/README.md) ### [Micromax](./brands/micromax/README.md) ### [Microsoft](./brands/microsoft/README.md) ### [Nothing](./brands/nothing/README.md) ### [Oukitel](./brands/oukitel/README.md) ### [Shift](./brands/shift/README.md) ### [Teclast](./brands/teclast/README.md) ### [Teracube](./brands/teracube/README.md) ### [Ulefone](./brands/ulefone/README.md) ### [Umidigi](./brands/umidigi/README.md) ### [Volla](./brands/volla/README.md) # Misc info ## Custom AVB Keys Custom Android Verified Boot keys is a feature which allows you to run a custom OS with a locked bootloader. It's rare to see a device which supports custom AVB keys, but some devices can be found [here](https://github.com/chenxiaolong/avbroot/issues/299). ## Universal SOC-based methods ### Kirin Kirin 620, 650, 655, 658, 659, 925, 935, 950, 960:
It's possible to unlock using testpoints and [PotatoNV](https://github.com/mashed-potatoes/PotatoNV) (Read the readme) ### MediaTek If you own a MediaTek device exploitable by [mtkclient](https://github.com/bkerler/mtkclient) you can unlock the bootloader using that.
If it also happens to be an OPPO/Realme device and you need to access fastboot: [lkpatcher](https://github.com/R0rt1z2/lkpatcher) ([web version](https://lkpatcher.r0rt1z2.com/)) ### Qualcomm There's no Universal Qualcomm method, unfortunately. Although some of these might work for you: The general exploit:
[alephsecurity.com](https://alephsecurity.com/2018/01/22/qualcomm-edl-2/) the bootloader unlock section. Xiaomi Mi A1 and maybe all MSM89** manufactured before 2018:
[EDLUnlock](https://github.com/Giovix92/EDLUnlock) ### Unisoc If you own a phone with the Unisoc UMS9620 or older,you can use this exploit to achieve temporary secure boot bypass and persistently unlock bootloader(except some devices with modified uboot) [CVE-2022-38694_unlock_bootloader](https://github.com/TomKing062/CVE-2022-38694_unlock_bootloader) If you own a phone with the Unisoc UMS312 UMS512 UD710,you can use this exploit to achieve persistently secure boot bypass, which means all firmwares including splloader,uboot can be modified and resigned. [CVE-2022-38691_38692](https://github.com/TomKing062/CVE-2022-38691_38692) Otherwise, you can also look into this: [Spectrum_UnlockBL_Tool](https://github.com/zhuofan-16/Spectrum_UnlockBL_Tool)
This: [xdaforums.com](https://xdaforums.com/t/alldocube-t803-smile_1-bootloader-unlock-w-unisoc-t310.4393389/)
Or this: [subut](https://unisoc-android.github.io/subut/) ***