Rooting OnePlus 11 — Root, Flash, Backup, Update OTA, Hiding Root, Unbrick
Update 2024–02–04:
This article was written for Android 13. If you have Android 14, please read this first. You can then go to the top of that page for instructions on how to root. The process is not the same as the one shown below. The one shown below is for Android 13.
— — — — — — — — — — — — — — — — — —
Android 13
— — — — — — — — — — — — — — — — — —
Here is a guide on how to root the OnePlus 11. It should work with any model of OnePlus 11. This should also work for other OnePlus 11 ROMs but is not guaranteed. This article is very detailed. You have been warned. 🤣
This process, if done correctly and in order, takes less than an hour, sometimes faster if you’re familiar with the process. Back up all of your data. I repeat, back up ALL of your data! Rooting will erase everything on your phone as if it were a brand-new phone.
This article covers the following:
- Rooting OnePlus 11
- Installing OnePlus 11 drivers and tools
- Unlocking OnePlus 11 bootloader
- Flashing OnePlus 11 with Magisk
- Backing up OnePlus 11
- Updating OnePlus 11 with OTA updates
- Hiding root from apps
- Fixing Netflix and other DRM issues
- Unbricking OnePlus 11
DISCLAIMER: Following these instructions is at your own risk and not the fault of the guide creator if your phone is bricked. Please see the disclaimer at the end of the article for details.
OnePlus 11 comes in several model numbers for different regions:
- PHB110: China
- CPH2447: India
- CPH2449_EEA: EU
- CPH2449_GLO: International
- CPH2451: North America
Important Notes
If you have a new OnePlus 11, do NOT attempt to change the active slot — you will find that there is no other working slot! Doing so may result in a soft/hard brick and you must use EDL mode to restore the data. Unfortunately, the MSM tool doesn’t work with OnePlus 11 anymore. So if this happens, you can either get ahold of OnePlus support (may have to send the phone back) or use NCUnlock.com’s remote service to fix it. See Unbrick section below for details.
As long as you don’t change the active slot, the process listed on this page should work fine. I’ve done it on my phone and helped another do the same without issue. Just don’t change the active slot!
Once you get temporary root access with KernelSU, I recommend immediately backing up the clean boot files before you flash them, and backing up the patched Magisk boot files after you patch them with Magisk.
Table of Contents
- Phase 1: Unlocking the Bootloader
- Phase 2: Installing Drivers & Tools
- Phase 3: Unlocking the Bootloader
- Phase 4: Gaining Temporary Root Access and Installing Magisk
- Phase 5: Installing Needed Modules
- Backing Up Images
- Updating OTA Images
- App Recommendations
- Unbrick Your Phone When it Won’t Boot
- Links
- Credits
- Disclaimer
Phase 1: Unlocking the Bootloader
WARNING: This will erase all data on your phone. Always always always make a backup of ALL of your data. If you already have root, use a tool like Swift Backup to back up your app data so you can easily restore all of your apps. If you have an old phone that is rooted, you can use Swift Backup to bring the apps from your old phone into your new phone (along with data).
- Complete the initial setup. Don’t waste time signing into anything.
- Go to Settings -> About Device -> Version.
- Tap 7 times on Build number.
- Go back to settings -> Additional settings -> Developer options.
- Enable OEM unlocking and USB debugging.
Phase 2: Installing Drivers & Tools
If you don’t already have adb, fastboot, and the OnePlus drivers, download and install the drivers and tools (if you don't already have adb/fastboot/drivers) from this link.
Don’t install OPLocalUpdate_For_Android12.apk.
Phase 3: Unlocking the Bootloader
- Connect the phone to the PC and accept the prompt on your phone.
- Open PowerShell or CMD on your computer.
- Enter the command
adb devices. This command will print a list of all attached devices with USB Debugging enabled and return the serial number and state of the device【40†source】. It should return something like this:
List of devices attached
6g73s2t1 device4. Reboot to bootloader using the command adb reboot bootloader. Sure, continuing from where we left off:
5. Once in the bootloader, enter the command fastboot devices. This command is similar to adb devices; it prints a list of all attached devices in fastboot mode. In response, it returns the serial number of the device.
6. WARNING: This will wipe all of your data!!!!! To unlock the bootloader, use the command fastboot flashing unlock.
7. Allow your phone to proceed with the unlocking process. Do not be alarmed by the Orange State warning message that appears after your phone restarts; this is a standard part of the process.
8. Begin setting up your phone. Don’t set up any accounts or anything that isn’t necessary until you have successfully set up a pin or password due to a known issue with OnePlus devices.
- If you can set up a pin or password, skip to Step 10.
- If your device hangs during the second entry, proceed to Step 9.
- WARNING: This is very important! If you cannot set a password successfully, you need to fix this BEFORE you continue to root. Do NOT root before fixing this. 😊 Otherwise it could cause problems and result in a soft/hard brick and having to restore via EDL mode or send it back to OnePlus to repair!
9. This is the tedious part.
- You may need to lock and unlock the bootloader multiple times until the pin or password setup works.
- You might also need to toggle the OEM unlocking switch in the Developer Options between lock and unlock cycles.
- To lock the bootloader, use the command
fastboot flashing lockthen repeat all the steps in Phase 1 and Phase 3 as necessary. - If you have done this 10+ times without success, perform
fastboot flashing unlock, then after it reboots typeadb reboot recoveryand go to Format Data. It should reset the phone to factory defaults but should let you enter a pin/password and OEM unlocking should be enabled, although your OS may not know that it is. 😊 Try proceeding anyway - this is what I had to do.
10. Once you have successfully set up a pin or password, you can proceed with the rest of the phone setup or continue to Phase 4.
Phase 4: Gaining Temporary Root Access and Installing Magisk
- Download and install the KernelSU app; look under each Assets section until you find the latest APK file and install that.
- Open the KernelSU app on your phone to find the Kernel version you need to download. It should be formatted similarly to
5.15.41-android.... Note that this number is subject to change with each update and is different depending on your model, so always use the number displayed on your phone. - Based on the Kernel version, download the corresponding
boot.img.gzfile from the KernelSU releases page. For example, if your Kernel version is5.15.41-android13, you would download a file named likeandroid13-5.15.41_2022-05-boot.img.gz. This file will change with each app update, so always use the latest available file that matches your phone's Kernel version. Save the file in a convenient location. - Extract the
.imgfile from the downloaded.gzfile. You can use WinRAR or 7-Zip to do this. - Reboot your phone to the bootloader using the following command:
adb reboot bootloader - BOOT the downloaded kernel.
IMPORTANT: DO NOT FLASH THIS TO THE PHONE!
Use the following command to boot the kernel:fastboot boot {downloaded_img_file_name}.img
For example:fastboot boot android13-5.15.41_2022-05-boot.img
At this point, you essentially have temporary root access.
HIGHLY RECOMMENDED FOR NEEDED OTA UPDATES LATER: This is the best time to make a backup of your clean boot files (see Backing Up Images section). That way if something goes wrong you can at least boot to the original image (which can be hard to find with OP11 as the stock image is not publicly available at this time). After you type su you may need to allow superuser access with KernelSU temporarily. If you don’t backup the init_boot files here, and later the OTA update causes a bootloop, you’ll have to hunt down the associated init_boot files unless you have a clean backup.
7. Download and install Magisk Canary or Magisk Debug. The Stable version does not work (links are also found on the main page of the Magisk repo.
8. Open the KernelSU app on your phone and select the middle Superuser tab.
9. Scroll down in the Superuser tab and toggle on Magisk.
10. Open the Magisk app and perform a direct install.
11. If you see any warnings or errors related to boot init_boot or vbmeta (or any variant) then tap Reboot but when your phone reboots, open Magisk and repeat step 10 until you don't see any warnings or errors (usually just once more).
12. Set up DenyList (hide root from certain apps):
- Open Magisk and tap the settings gear at the top right.
- Go down to Zygisk and toggle it on.
- Go to Enforce DenyList and toggle it on.
- To hide root from apps, tap Configure DenyList and toggle on for the apps you want to hide root from.
13. If any Google apps such as the Play Store are experiencing issues, go to your phone settings, find these apps, and clear their data.
Phase 5: Installing Needed Modules
Although the phone is technically rooted at this point, you may notice that some apps (like banking/crypto/Netflix) won’t let you open them, because they may still detect that your phone is rooted. See the disclaimer for more details.
Note: I asked the Magisk team about this but they simply closed the Issue without comment. So I’m not sure what the official response is. If using a Magisk stable version, you may be able to install these modules from the Modules listing, but the listing doesn’t appear in the debug version.
Here’s the workaround:
- Download safetynet-fix-v2.4.0-MOD_1.2. This is a Magisk module that will work around Google’s SafetyNet attestation.
- Download Magic mount extend and liboemcrypto disabler odm. These are Magisk modules that will work around Google’s Play Integrity attestation.
- Go to Magisk > Modules > Install from Storage > find
magisk_mount_extend.zipin Downloads and let it install. Reboot. - Go to Magisk > Modules > Install from Storage > find
liboemcryptodisablerodm_26_magicmount.zipthe file in Downloads and let it install. Reboot.
3. If any Google apps such as the Play Store are experiencing issues, go to your phone settings, find these apps, and clear their data.
Backing Up Images
The boot files will either be the boot_a.img or boot_b.img files, depending on which slot the system is currently in. There is only one persist.img file, and it changes with each update, so make sure you save it.
It is highly recommended that you back up your images before and after patching. The OnePlus 11 stock images are not officially available, so that way if something goes wrong you can at least boot back into the stock image.
You may need these files again when performing the OTA update, please make sure and backup the files! If you currently have temporary root with KernelSU, type su in shell and all it through KernelSU, otherwise allow it through Magisk.
Steps to perform the backup:
- Type these commands in PowerShell or CMD:
adb shell
su
dd if=/dev/block/by-name/boot_a of=/sdcard/boot_a.img
dd if=/dev/block/by-name/boot_b of=/sdcard/boot_b.img
dd if=/dev/block/by-name/init_boot_a of=/sdcard/init_boot_a.img
dd if=/dev/block/by-name/init_boot_b of=/sdcard/init_boot_b.img
dd if=/dev/block/bootdevice/by-name/persist of=/sdcard/persist.img
dd if=/dev/block/bootdevice/by-name/vbmeta_a of=/sdcard/vbmeta_a.img
dd if=/dev/block/bootdevice/by-name/vbmeta_b of=/sdcard/vbmeta_b.img2. These commands will create a copy of your system’s boot and persist images and save them to your phone’s SD card.
3. Once these files are saved, you can then move them from your phone to your computer for safekeeping. To do this, you can use the file transfer feature of your phone when it is connected to the PC via USB.
By completing this phase, you have successfully backed up your system files. Keep them safe as they could be instrumental in recovering your phone in case of a malfunction or mishap.
Warning: You must unroot your device first before proceeding with the OTA update. Failure to do so may result in system instability or a bricked device.
Backup Recommended: If you wish to back up the new stock boot_a.img, boot_b.img, init_boot.img, and persist.img files before rooting the update, check the previous step.
Updating OTA Images
It’s important to follow these steps in order to ensure that your phone remains rooted after the update.
- Download the update using Oxygen Updater.
- Restore images in Magisk (do not reboot).
- Use Local Upgrade to install the update (do not reboot). You can do this under
About > OxygenOS > hamburger menuat the top right. If you don’t have that option, you can use OPLocalUpdate_13. - Install to inactive slot in Magisk (do not reboot with Magisk). Use Local Upgrade to reboot.
Alternative approach:
If for some reason you lose root in the process, just skip to the KernelSU phase again and repeat that section to re-root. Magisk data should still be there when you reboot, but you will need to reinstall Magisk, the modules, enable Systemless Hosts, and possibly configure deny lists. When I did it this way, the deny lists were still intact, but I have to handle the other items.
Unbrick Your Phone When it Won’t Boot
If you bricked your phone and it won’t boot, DO NOT change the active slot. For whatever reason, OnePlus 11 doesn’t ship with a working secondary slot. I thought this was just my problem, but had another user reach out to me with the same issue.
- Don’t freak out. It’s most likely fixable! There are just a few things you should try first.
- Determine if your phone can get into fastboot:
In PowerShell or CMD, type:adb reboot fastboot
- If that works, continue to step 4.
- Immediately after rebooting the phone and before the boot logo, hold the Volume Down key, and release it when you see the fastboot screen
- If it doesn’t do anything, hold down the Volume Up + Volume Down + Power keys until it vibrates, then immediately hold down the Volume Down key; release it when you see the fastboot screen
3. If you can’t get into fastboot, try getting into recovery:
- In PowerShell or CMD, type:
adb reboot recovery - If that works, continue to step 4.
- Immediately after rebooting the phone and before the boot logo, hold the Volume Up key, and release it when you see the fastboot screen
- If it doesn’t do anything, hold down the Volume Up + Volume Down + Power keys until it vibrates, then immediately hold down the Volume Up key; release it when you see the fastboot screen
4. As long as you can perform adb boot boot.img where boot.img is the image you want to boot to, then there's no big issue. Try booting into the original image and the patched images separately. If the patched image doesn't work but the original image does work, search the web for a fix or post in this thread.
5. If you can’t boot at all, or you can only get into recovery, just perform a Format Data to reset everything. After you perform this, you may need to go into fastboot and boot to the original image if you already patched the image.
6. If you can get to fastboot or recovery, but cannot boot, then for some reason you don’t have the correct boot image. Try using the original boot image from a backup.
Here are some helpful sites:
- How to Flash ROM & Unbrick OnePlus via Fastboot Enhance Tool
- Root OnePlus 11 Via Magisk Patched Init_Boot/Boot
7. If you only get a black screen or can’t use fastboot or recovery, that means your only option is Emergency Download Mode (EDL mode). If you can boot using fastboot boot boot.img but can’t boot the phone normally, you should flash the boot image. See these articles for additional information
6. If you still can’t boot, and can only get into you’ll need to either contact OnePlus support or use NCUnlock.
Contact OnePlus support:
- Have OnePlus support fix the phone. Not sure if they’ll want you to send back the phone or can fix it remotely. This is probably what you should try first as it is the official method to fix.
- According to this source, rooting your OnePlus phone does not void its warranty, unless hardware damage arises from modifications. And another source. I haven’t tried it myself, though. You might research more if it comes to this.
- I’ve personally used NCUnlock.com in the past and it was easy; it only costs $15 and takes < 30 minutes. I used this place and chatted with their team without any issues at all! Recommended!
NCUnlock remote support:
- Note: I am not affiliated with NCUnlock.com and have only used them once in the past. You can purchase remote services from them and they perform the unlock. You don’t get a login to the app in the video, which I was a little bummed about, but they were super helpful. I highly recommend going through official OnePlus support first, but this is an alternate method I have tested and found success with.
- YouTube video of the process.
- If you decide to use them, go to this page and download the appropriate stock firmware and each of the flash files. Install the Qualcomm drivers and extract the data before you chat with NCUnlock.com’s support.
- To purchase their services, go to this page and place the order. Then message them on Telegram (link at the bottom right of their page). They usually get back quickly, I chatted with them around 7 PM CST.
- They’re using the official Flash Tool that OnePlus support uses, so I’m not sure if OnePlus support would just remote in. They did log in to a seemingly legitimate account and did not use the modded/leaked version that I can tell.
- I tried using QLMFlasherPro but they only support OnePlus up to OnePlus 9 Pro. I contacted their support and asked them if it would work with OnePlus 11 and they said “no”. They said they could fix it and send me a screenshot of the same fix that NCUnlock.com uses. 😊
App Recommendations
Swift Backup
Performs a backup of apps and app settings, requires root. Runs on a schedule, even supports cloud backup.
Revanced Manager
Revanced manager application for Revanced Patches.
Revanced Patches
Patches to hide ads on YouTube, Spotify, Reddit, Facebook, Twitter, and more.
AdAway
Blocks ads in all apps. Enable Systemless Hosts in Magisk settings first.
HTTP Toolkit
Great for monitoring HTTP requests through your Android.
Links
XDA-Developers OnePlus 11 Forum
Your go-to resource for anything Android.
—
magic_mount_extend.zip and lib
—
NCUnlock OnePlus 11 Unbrick YouTube Video
Unbrick OnePlus 11 Remote Services
Unbrick OnePlus 11 Tools & Images (contains some stock ROM)
—
Stock ROM OTA updates — 13.0.0:
—
Stock ROM — 13.1.0.580 (EX01):
CPH2449_11_13.1.0.580(EX01)_BootFiles.zip
boot.img, ini_boot.img, vbmeta.img, vendor_boot.img
CPH2449_11_13.1.0.580(EX01)_Full_Dumped_Payload.zip
dumped payload.bin using payload-dumper-go
CPH2449_11_13.1.0.580(EX01)_Full.zip (payload.bin)
CPH2449_11_13.1.0.580(EX01)_Incremental.zip (payload.bin)
in case you want the incremental, but the previous version is required to dump
Other ROM:
—
Mirror of tools/drivers mentioned in this article all in one place
Credits
Thanks to g96818 for posting the original rooting instructions. I have tested everything above on a OnePlus 11 except for the OTA updates section, however, I’ve performed those same steps on other OnePlus phones without issue, and the article states that it should work as well.
Disclaimer
The information provided in this article is for educational purposes only. Rooting a phone can have risks and may void the device’s warranty. Users are solely responsible for any consequences that arise from rooting their devices. It is recommended to thoroughly research and understand the process before proceeding. Back up your data and proceed at your own risk. The author and publisher assume no liability for any damages or issues caused by rooting a phone.
The information presented here regarding DRM issues is intended for users seeking to restore the normal functionality of their media apps. It is important to note that these instructions should only be used for typical user operation and not for any other purposes. Modifying operations outside the Terms of Service of any app may not be permitted in your country.
Consider becoming a Medium member if you appreciate reading stories like this and want to help me as a writer. It costs $5 per month and gives you unlimited access to Medium content. I’ll get a little commission if you sign up via my link.
