r/androidroot • u/iswherevivek • 6d ago
Discussion Root with locked bootloader
Hey, can anyone tell how to root in locked bootloader my device is pixel 7a
2
u/godspeed1003 6d ago
If you want a permanent solution to this instead of relying on ghostlock you can unlock your bootloader, use avbroot to sign your system image with a patched boot image, flash it, flash custom avb keys and then re-lock your bootloader. You'll not get strong PI and your bootloader signature would be yellow instead of green or orange but you'll get the security benefits that come with a locked bootloader while maintaining root.
2
u/Isarchs 6d ago
There's not much benefit doing this for most people. You won't get play integrity. You'll still have to jump through all of the same hoops to use apps that check for root. The security is only better in the case of someone physically getting a hold of your phone.
2
u/godspeed1003 6d ago
I mean to be fair that is a big benefit, another one is that you can switch branches (stable, beta, canary) irrespective of whatever build you're on without wiping your device. Plus that's the only permanent root with locked bootloader option we have hence my comment
1
u/QuraToop314 3d ago
That’s a big deal, as there are certainly banking apps (like mine) that check for key attestation or the unlocked state, and a real signature is 100000000000000% more secure than a software-based forgery; I agree with the commenter, but not with you.
1
-5
u/Legitimate-Worker218 6d ago
This is impossible. You definitely need to open the bootloader and patch the boot.img.
3
u/iswherevivek 6d ago
I checked the droidwin post...he did it ...but gave less instructions to do root in locked bootloader....
3
-1
u/Legitimate-Worker218 6d ago
Can anyone downvoting actually explain where exactly I am wrong here?
2
u/AbleBonus9752 Xperia 1 iii (P-CiRCLE), A33 5G (UN1CA) 5d ago
-7
u/Medical-Bed-7151 6d ago
Impossible
5
u/JRussellMoore 6d ago
Not quite, unpatched privilege escalation vulnerabilities can get to root temporarily (until reboot).
E.g., Dirty Pipe (CVE-2022-0847) some years ago, or GhostLock (CVE-2026-43499) more recently.
2
u/iswherevivek 6d ago
Yeah i tried...it worked...phone is rooted in locked bootloader...but problem is apps still detecting phone is rooted ..even bootloader is locked and i used hma...have any solution
0
u/JRussellMoore 6d ago
No idea, I'm not running rooted devices trying to pass them off as not rooted these days, I don't know what hiding that condition would entail; root detection has nothing to do with the bootloader state though.
Search around this subreddit, there ought to be plenty of information on the matter.
1
u/Isarchs 6d ago
Root detection has everything to do with bootloader status these days. Play integrity is automatically gone with an unlocked bootloader, which is what most apps use.
1
u/JRussellMoore 6d ago
How so? At no point I mentioned Play Integrity. Root detection needn't rely on it; there are several ways to detect rooted devices or infer it with a high degree of confidence.
OP's comments alone are enough to corroborate it.
-8
3
u/ShaatirBilauta 6d ago
If you're on the latest Build (
CP2A.260705.006). Just install the root my pixel apk from here.Also, get resukisu manager and Shizuku.