Rooting OnePlus 11, Android 14— Root, Flash, Backup, Update, Fix Play Integrity, Hide Root, Unbrick

asheroto
13 min readMay 2, 2024

Android 14

— — — — — — — — — — — — — — — — — —

Here is a guide on how to root the OnePlus 11, Android 14. It should work with any model of OnePlus 11. This should also work for other OnePlus 11 ROMs but is not guaranteed. This article is very detailed. You have been warned. 🤣

This process, if done correctly and in order, takes less than an hour, sometimes faster if you’re familiar with the process. Back up all of your data. I repeat, back up ALL of your data! Rooting will erase everything on your phone as if it were a brand-new phone.

This article covers the following:

  • Rooting OnePlus 11
  • Installing OnePlus 11 drivers and tools
  • Unlocking OnePlus 11 bootloader
  • Flashing OnePlus 11 with Magisk
  • Backing up OnePlus 11
  • Updating OnePlus 11 with OTA updates
  • Hiding root from apps
  • Fixing Netflix and other DRM issues
  • Unbricking OnePlus 11

DISCLAIMER: Following these instructions is at your own risk and not the fault of the guide creator if your phone is bricked. Please see the disclaimer at the end of the article for details.

OnePlus 11 comes in several model numbers for different regions:

  • PHB110: China
  • CPH2447: India
  • CPH2449_EEA: EU
  • CPH2449_GLO: International
  • CPH2451: North America

Important Notes

If you have a new OnePlus 11, do NOT attempt to change the active slot — you will find that there is no other working slot! Doing so may result in a soft/hard brick and you must use EDL mode to restore the data. Unfortunately, the MSM tool doesn’t work with OnePlus 11 anymore. So if this happens, you can either get ahold of OnePlus support (may have to send the phone back) or use NCUnlock.com’s remote service to fix it. See Unbrick section below for details.

As long as you don’t change the active slot, the process listed on this page should work fine. I’ve done it on my phone and helped another do the same without issue. Just don’t change the active slot!

Table of Contents

Phase 1: Unlocking the Bootloader

WARNING: This will erase all data on your phone. Always always always make a backup of ALL of your data. If you already have root, use a tool like Swift Backup to back up your app data so you can easily restore all of your apps. If you have an old phone that is rooted, you can use Swift Backup to bring the apps from your old phone into your new phone (along with data).

  1. Complete the initial setup. Don’t waste time signing into anything.
  2. Go to Settings -> About Device -> Version.
  3. Tap 7 times on Build number.
  4. Go back to settings -> Additional settings -> Developer options.
  5. Enable OEM unlocking and USB debugging.

Phase 2: Installing Drivers & Tools

If you don’t already have adb, fastboot, and the OnePlus drivers, download and install the drivers and tools (if you don't already have adb/fastboot/drivers) from this link.

Phase 3: Unlocking the Bootloader

  1. Connect the phone to the PC and accept the prompt on your phone.
  2. Open PowerShell on your computer.
  3. Enter the command adb devices. This command will print a list of all attached devices with USB Debugging enabled and return the serial number and state of the device【40†source】. It should return something like this:
List of devices attached
6g73s2t1 device

4. Reboot to bootloader using the command adb reboot bootloader. Sure, continuing from where we left off:

5. Once in the bootloader, enter the command fastboot devices. This command is similar to adb devices; it prints a list of all attached devices in fastboot mode. In response, it returns the serial number of the device.

6. WARNING: This will wipe all of your data!!!!! To unlock the bootloader, use the command fastboot flashing unlock.

7. Allow your phone to proceed with the unlocking process. Do not be alarmed by the Orange State warning message that appears after your phone restarts; this is a standard part of the process.

8. Begin setting up your phone. Don’t set up any accounts or anything that isn’t necessary until you have successfully set up a pin or password due to a known issue with OnePlus devices.

  • If you can set up a pin or password, skip to Step 10.
  • If your device hangs during the second entry, proceed to Step 9.
  • WARNING: This is very important! If you cannot set a password successfully, you need to fix this BEFORE you continue to root. Do NOT root before fixing this. 😊 Otherwise it could cause problems and result in a soft/hard brick and having to restore via EDL mode or send it back to OnePlus to repair!

9. This is the tedious part.

  • You may need to lock and unlock the bootloader multiple times until the pin or password setup works.
  • You might also need to toggle the OEM unlocking switch in the Developer Options between lock and unlock cycles.
  • To lock the bootloader, use the command fastboot flashing lock then repeat all the steps in Phase 1 and Phase 3 as necessary.
  • If you have done this 10+ times without success, perform fastboot flashing unlock, then after it reboots type adb reboot recovery and go to Format Data. It should reset the phone to factory defaults but should let you enter a pin/password and OEM unlocking should be enabled, although your OS may not know that it is. 😊 Try proceeding anyway - this is what I had to do.

10. Once you have successfully set up a pin or password, you can proceed with the rest of the phone setup or continue to Phase 4.

Phase 4: Download Firmware and Patch init_boot

Note: If you can find the Magisk patched boot files for your specific firmware online, you can skip this step and proceed to Phase 5. This step explains how to patch the firmware.

Check my list of stock firmware to see if yours is available.

  1. Download your phone’s firmware using Oxygen Updater.
  2. Use payload_dumper_go to extract the payload.bin file into the img files.
  3. Grab init_boot.img and copy it to your phone. You can type the following command to transfer it to your phone:
    adb push .\init_boot.img ./sdcard/init_boot.img
  4. Install the canary version of Magisk on your phone (download from the README by clicking the Magisk Canary button). Then install:
    adb install .\app-release.apk
  5. Open Magisk on your phone, tap Install button next to Magisk.
  6. Tap Select and Patch a File then navigate to the init_boot.img file and select it.
  7. Tap Let’s Go at the top right. The patched file will be put in your Downloads folder, which is /sdcard/Download.
  8. Rename the file to init_boot_magisk_patched.img then transfer it back to your computer using the command:
    adb pull /sdcard/Download/init_boot_magisk_patched.img init_boot_magisk_patched.img
  9. Reboot the phone into fastboot mode:
    adb reboot bootloader
  10. Flash the patched init_boot file to the phone using this command:
    fastboot flash init_boot init_boot_magisk_patched.img
  11. Reboot the phone again:
    fastboot reboot
  12. Your phone should boot up, and you have partial root. Open the Magisk app on your phone and you’ll be prompted to finish additional setup. Tap OK and the phone will reboot once again.

Now you should have full root. 😁

HIGHLY RECOMMENDED: This is the best time to archive your clean & patched boot files. That way if something goes wrong in the future you can refer to these saved boot files to boot to the original image. 👍

Fix Google Play Integrity

Although the phone is rooted at this point, you may notice that some apps (like banking/crypto/Netflix) won’t let you open them, because they may still detect that your phone is rooted. See the disclaimer for more details.

The recommended module to deal with Play Integrity issues is chiteroman/PlayIntegrityFix.

  1. Download the latest zip file.
  2. Transfer it to your phone:
    adb push PlayIntegrityFix_vX.X.X.zip /sdcard/PlayIntegrityFix_vX.X.X.zip
  3. Open Magisk on your phone.
  4. Tap Modules.
  5. Tap Install from storage.
  6. Select the zip file.
  7. Reboot the phone.

Hide Magisk

Some apps can detect if Magisk is installed. To Magisk, do the following:

  1. Open Magisk.
  2. Tap the settings gear at the top right.
  3. Tap Hide the Magisk app to create a shortcut.
  4. Make sure to give it a different name other than Magisk such as Settings or Mgk.

Hide Root Status

Some apps can detect if your phone is rooted. To hide root status with Magisk, we need to configure the DenyList.

  1. Open Magisk and tap the settings gear at the top right.
  2. Go down to Zygisk and toggle it on.
  3. Go to Enforce DenyList and toggle it on.
  4. To hide root from apps, tap Configure DenyList and toggle on for the apps you want to hide root from.
  5. You should find all of your finance and media apps in the list and check the checkbox so that root status is hidden from them. This includes apps like PayPal, Cash App, Netflix, etc.
  6. If you have issues with Google services not working, you may need to hide root status from these as well. Tap the hamburger menu at the top right of the DenyList to enable System and OS apps for selection. Here are some of the Google apps I’ve hidden with success:
- Android Services Library
- Android System Intelligence
- Android System WebView
- Carrier Services
- Cell Broadcast Service
- all the coms
- ConfigUpdater
- Google Partner Setup
- Google Play services
- Google Play Services for AR
- Google Play Store
- Google Safety Center Resources
- Google Services Framework

When done, just press the back arrow at the top left to back out of the DenyList.

If any Google apps such as the Play Store are experiencing issues, go to your phone settings, find these apps, and clear their data.

Restart your phone if root is still detected.

Backing Up Images

It is highly recommended that you back up your images before and after patching, just in case something goes wrong. It’s a good idea to back up boot.img and init_boot.img. You will need root to do this part.

Nowadays, OnePlus phones use dual-slots for booting. You only need to back up the active slot’s boot files.

  1. Determine your phone’s active slot by typing:
    adb shell /bin/getprop ro.boot.slot_suffix
  2. Then adjust the following commands to back up the boot files, where _x is the slot, so _a or _b from step 1 should be here in place of _x.
adb shell
su
dd if=/dev/block/by-name/boot_a of=/sdcard/boot_X.img
dd if=/dev/block/by-name/init_boot_a of=/sdcard/init_boot_X.img

3. That will put the files in your /sdcard folder.

Updating OTA Images

  1. Go into your Magisk DenyList and make a list of the apps you have checked to refer to later.
  2. Make a list of your installed modules.
  3. Uninstall Magisk and repeat Phase 4.

Alternative approach:

With Android 13, you could use KernelSU to gain temporary root, and then use Magisk to gain full root. Starting with Android 14, I’ve been unsuccessful in getting KernelSU to work with the OnePlus 11.

If someone knows of a better way to apply OnePlus updates with root, please let me know in the comments.

Unbrick Your Phone When it Won’t Boot

If you bricked your phone and it won’t boot, DO NOT change the active slot. For whatever reason, OnePlus 11 doesn’t ship with a working secondary slot. I thought this was just my problem, but had another user reach out to me with the same issue.

  1. Don’t freak out. It’s most likely fixable! There are just a few things you should try first.
  2. Determine if your phone can get into fastboot:
    In PowerShell, type:
    adb reboot fastboot
  • If that works, continue to step 4.
  • Immediately after rebooting the phone and before the boot logo, hold the Volume Down key, and release it when you see the fastboot screen
  • If it doesn’t do anything, hold down the Volume Up + Volume Down + Power keys until it vibrates, then immediately hold down the Volume Down key; release it when you see the fastboot screen

3. If you can’t get into fastboot, try getting into recovery:

  • In PowerShell, type:
    adb reboot recovery
  • If that works, continue to step 4.
  • Immediately after rebooting the phone and before the boot logo, hold the Volume Up key, and release it when you see the fastboot screen
  • If it doesn’t do anything, hold down the Volume Up + Volume Down + Power keys until it vibrates, then immediately hold down the Volume Up key; release it when you see the fastboot screen

4. As long as you can perform adb boot boot.img where boot.img is the image you want to boot to, then there's no big issue. Try booting into the original image and the patched images separately. If the patched image doesn't work but the original image does work, search the web for a fix or post in this thread.

5. If you can’t boot at all, or you can only get into recovery, just perform a Format Data to reset everything. After you perform this, you may need to go into fastboot and boot to the original image if you already patched the image.

6. If you can get to fastboot or recovery, but cannot boot, then for some reason you don’t have the correct boot image. Try using the original boot image from a backup.

Here are some helpful sites:

7. If you only get a black screen or can’t use fastboot or recovery, that means your only option is Emergency Download Mode (EDL mode). If you can boot using fastboot boot boot.img but can’t boot the phone normally, you should flash the boot image. See these articles for additional information

6. If you still can’t boot, and can only get into you’ll need to either contact OnePlus support or use NCUnlock.

Contact OnePlus support:

  • Have OnePlus support fix the phone. Not sure if they’ll want you to send back the phone or can fix it remotely. This is probably what you should try first as it is the official method to fix.
  • According to this source, rooting your OnePlus phone does not void its warranty, unless hardware damage arises from modifications. And another source. I haven’t tried it myself, though. You might research more if it comes to this.
  • I’ve personally used NCUnlock.com in the past and it was easy; it only costs $15 and takes < 30 minutes. I used this place and chatted with their team without any issues at all! Recommended!

Use the patched OnePlus Flash Tool:

  • The OnePlus flash tool is the tool that OnePlus support and NCUnlock uses. Typically there is an e-mail address and password you have to enter to use the tool.
  • This page describes how to use a hex editor to modify the tool to bypass the login. Or if you want one already prepared, check out this forum post.

NCUnlock remote support:

  • Note: I am not affiliated with NCUnlock.com and have only used them once in the past. You can purchase remote services from them and they perform the unlock. You don’t get a login to the app in the video, which I was a little bummed about, but they were super helpful. I highly recommend going through official OnePlus support first, but this is an alternate method I have tested and found success with.
  • YouTube video of the process.
  • If you decide to use them, go to this page and download the appropriate stock firmware and each of the flash files. Install the Qualcomm drivers and extract the data before you chat with NCUnlock.com’s support.
  • To purchase their services, go to this page and place the order. Then message them on Telegram (link at the bottom right of their page). They usually get back quickly, I chatted with them around 7 PM CST.
  • They’re using the official Flash Tool that OnePlus support uses, so I’m not sure if someone from OnePlus support just remotes-in or what. They did log in to a seemingly legitimate account and did not use the patched/leaked version that I can tell.
  • I tried using QLMFlasherPro but they only support OnePlus up to OnePlus 9 Pro. I contacted their support and asked them if it would work with OnePlus 11 and they said “no”. They said they could fix it and send me a screenshot of the same fix that NCUnlock.com uses. 😊

App Recommendations

  • Swift Backup
    Performs a backup of apps and app settings, requires root. Runs on a schedule, even supports cloud backup.
  • Revanced Manager
    Revanced manager application for Revanced Patches.
  • Revanced Patches
    Patches to hide ads on YouTube, Spotify, Reddit, Facebook, Twitter, and more.
  • AdAway
    Blocks ads in all apps. Enable Systemless Hosts in Magisk settings first.
  • HTTP Toolkit
    Great for monitoring HTTP requests through your Android.

Links

Unbrick Links

Firmware

Stock ROM — CPH2449 14.0.0.401(EX01)

Stock ROM — CPH2449 14.0.0.601(EX01)

Stock ROM — CPH2451 14.0.0.304(EX01)

Stock ROM — CPH2451 14.0.0.601(EX01)

Disclaimer

The information provided in this article is for educational purposes only. Rooting a phone can have risks and may void the device’s warranty. Users are solely responsible for any consequences that arise from rooting their devices. It is recommended to thoroughly research and understand the process before proceeding. Back up your data and proceed at your own risk. The author and publisher assume no liability for any damages or issues caused by rooting a phone.

The information presented here regarding DRM issues is intended for users seeking to restore the normal functionality of their media apps. It is important to note that these instructions should only be used for typical user operation and not for any other purposes. Modifying operations outside the Terms of Service of any app may not be permitted in your country.

Consider becoming a Medium member if you appreciate reading stories like this and want to help me as a writer. It costs $5 per month and gives you unlimited access to Medium content. I’ll get a little commission if you sign up via my link.

--

--

asheroto

🌎 Full Stack Developer 🔗 Systems Administrator 😎Innovation through Automation ✔ Privacy Advocate ♥ Startup Facilitator