[GUIDE] How to unlock your bootloader, install TWRP and gain root access

[SWEVEX]

I have latest firmware with locked bootloader

 

[biRonic]

I need assistance with getting TWRP installed.

I successfully used this same process before on my other Turbo. So, I know it works.
However, on this one, I'm getting stuck.

Sunshine unlocked it just fine.

However, once I get to the process for installing TWRP, it doesn't work.

I follow the steps, run the flash command, and I get this...

C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot flash recovery recovery.img
(bootloader) has-slot:recovery: not found
target reported max download size of 536870912 bytes
sending 'recovery' (12824 KB)...
OKAY [ 0.461s]
writing 'recovery'...
OKAY [ 0.340s]
finished. total time: 0.833s


Then, when I send the reboot command, that works, but when I try to get into recovery, it's still stock recovery. :/

Can somebody help me troubleshoot this?

 

[ChazzMatt]

I need assistance with getting TWRP installed.

I successfully used this same process before on my other Turbo. So, I know it works.
However, on this one, I'm getting stuck.

Sunshine unlocked it just fine.

However, once I get to the process for installing TWRP, it doesn't work.

I follow the steps, run the flash command, and I get this...

C:\Program Files (x86)\Minimal ADB and Fastboot>fastboot flash recovery recovery.img
(bootloader) has-slot:recovery: not found
target reported max download size of 536870912 bytes
sending 'recovery' (12824 KB)...
OKAY [ 0.461s]
writing 'recovery'...
OKAY [ 0.340s]
finished. total time: 0.833s


Then, when I send the reboot command, that works, but when I try to get into recovery, it's still stock recovery. :/

Can somebody help me troubleshoot this?

Here's the problem. You are probably rebooting the phone BEFORE locking in the TWRP installation. This negates your TWRP installation.

AFTER TWRP installation, you have to confirm the TWRP recovery/lock it in by booting to TWRP recovery FIRST from the bootloader screen, BEFORE rebooting the phone. While in TWRP, you also want to allow write access...

Post-installation, while still on the bootloader screen, use the volume buttons to arrow up through the menu to "recovery", use the power button to choose "recovery", boot to TWRP custom recovery. THEN, from TWRP custom recovery GUI you can reboot the phone and TWRP will stick.

BUT, if you "install" TWRP from bootloader screen and then immediately reboot the phone (without actually booting to TWRP first), you will not have TWRP recovery. You will still have stock recovery.

The instructions are in the OP:

10. Type "fastboot flash recovery TWRP.img" without quotes and press enter. It should tell you that the flash was successful. You might see some "not found" errors. These are normal and can be ignored.
11. Highlight "Recovery mode" on your phone using the volume up and down buttons.
12. Press the power button to boot into TWRP.
13. TWRP will boot, and it will ask you if you want to allow write access to the system partition. IT IS VERY IMPORTANT THAT YOU ALLOW THIS. Check the box that says to never ask this question again.
14. Select Reboot, followed by System to boot the phone normally.

SEE? After TWRP installation, you have to boot to TWRP first before rebooting your phone.

 

[biRonic]

Wow! Thanks, bud!!!
Ya...for some reason, even though this is the thread I followed before, this time, I followed instructions that included the direction to run the command 'fastboot reboot' immediately after running the flash command.

I tried it again by doing what you said, and it (of course) worked.

So, thanks a lot for saving me from my own stupidity. lol

 

[biRonic]

One more question...

First, I have successfully completed this entire process (unlocked via Sunshine, installed TWRP via Fastboot, and rooted via TWRP).

Now, I want to do a factory data reset in order to sell this phone to somebody, and make sure all of my stuff is gone, and there are no lingering aspects that relate to me (or whatever).

So, can I do a FDR without losing root?

If not, can I do a FDR, and then just reroot the same way I just did via TWRP?

If not, is there another way?

 

[sd_shadow]

One more question...

First, I have successfully completed this entire process (unlocked via Sunshine, installed TWRP via Fastboot, and rooted via TWRP).

Now, I want to do a factory data reset in order to sell this phone to somebody, and make sure all of my stuff is gone, and there are no lingering aspects that relate to me (or whatever).

So, can I do a FDR without losing root?

If not, can I do a FDR, and then just reroot the same way I just did via TWRP?

If not, is there another way?

Factory reset doesn't change the /system,
Root files are in /system
Other than supersu app maybe in /data
But if that is the case, just reinstall supersu from play store

Sent from my sailfish using XDA Labs

 

[biRonic]

Factory reset doesn't change the /system,
Root files are in /system
Other than supersu app maybe in /data
But if that is the case, just reinstall supersu from play store

Sent from my sailfish using XDA Labs

Thanks!
That's the refresher I needed.

 

[LenAsh]

Thread cleaned.

This is not the place to debate when something (that the community finds invaluable) is ready or not. Nor is it the place to become somewhat unpleasant when things don't go entirely your way or happen in an instant.

Those people (whomever they are) who dedicate their own time for the benefit of others don't deserve, need or desire having demands made of them.

 

[ChazzMatt]

I have latest firmware with locked bootloader

@jcase sent and email

Hi @jcase
Good news about Droid turbo I am ready to help and sent email to you

I got a new Droid Turbo as a gift from my Gf .
It comes loaded with the latest firmware and there is no further updates available for the phone.

All of you are in luck. Just released:

From @jcase:

[Root && Unlock] Droid Turbo 6.0.1 mcg24.251-5-5
https://forum.xda-developers.com/dr...t-unlock-droid-turbo-6-0-1-mcg24-251-t3639618

 

[KARIM9377]

@ChazzMatt thanks

 

[Claps1775]

Thank you.

 

[TheSt33v]

Guide updated for people on -5-5. Hopefully I got the instructions right. If someone sees something wrong, please let me know.

Also, -SuperSU -obsolete safetynet kernel patch +Magisk.

 

[jyazzie110]

 

[Mansoor4139]

please tell me any other method of unlocking bootloader .
.
sunshine requires 25$ donation which i cannot pay in any way

 

[ChazzMatt]

please tell me any other method of unlocking bootloader .

sunshine requires 25$ donation which i cannot pay in any way

Do you mean you don't want to pay or you don't know how to pay? There's alternate ways of paying -- Paypal, Amazon gift card, Western Union money transfer (those exist in many, many countries).

Whereas if you just don't want to pay, sorry there's no other way to unlock the Verizon locked-down bootloader.

You have to factor Sunshine in when you buy a Verizon phone like this. Everyone knows Verizon locks down their bootloaders. You easily could have bought a non-Verizon Motorola phone -- even a "Quark" phone exactly like this, with easily unlocked bootloader. Quark =

• Moto XT1254 (Droid Turbo),
• Moto XT1250 (U.S. Moto Maxx),
• Moto XT2225 (Moto Turbo, "international" Moto Maxx).

Motorola gives free unlock code to all those, EXCEPT for the Droid Turbo because Verizon demands the bootloader stay locked down. I own THREE of the Moto XT1225. Very easy to unlock.

All the Quarks have the exact same specs, except for radio bands or internal storage (either 32GB/64GB). Only Verizon's XT1254 has the locked down bootloader. U.S. Moto Maxx XT1250 even has the exact same radio bands (including LTE band 13 used by Verizon, as well as CDMA bands). The XT1254 (Droid Turbo) and XT1250 (U.S. Moto Maxx) are exact clones of each other, with even the same FCC ID. Those two different model numbers only exists because Verizon wanted to pretend they had an "exclusive", but they never did. The XT1254 is really just a U.S. Moto Maxx XT1250, and the only thing exclusive about it is the locked down bootloader. The XT1225 ("international" Moto Maxx, but also sold under "Moto Turbo" name in India) has a slightly different mix of LTE bands (not LTE 13), but more LTE bands (LTE 5 and 17), plus even more HSPA bands than the U.S. models, but no CDMA.

So, if you insist on buying a phone like the Verizon Moto XT1254 (Droid Turbo), you have to say the REAL price is price + $25. Why do you think the phone was as cheap as it was? It's not the real final price.

The exploit Sunshine uses has been publicly discussed. If you know coding, you can build your own version of "Sunshine". But no other devs have done that out of respect for the Sunshine team. Without them, there would be no method of unlocking this bootloader. They not only unlocked it in November 2015, but have also kept up with the cat-and-mouse game with Verizon to KEEP it unlocked after all the bogus "security updates" Verizon has released over the past 1.5 years to stop Sunshine from working. Sunshine has stayed in the game, so they deserve their due.

Other than that, all I can tell you is you have to research phones here on XDA before you buy them. What I just told you has been said over and over and over. You would have learned everything in 5 minutes of reading or even if you had asked this question here before you bought the phone.

 

[Mansoor4139]

Do you mean you don't want to pay or you don't know how to pay? There's alternate ways of paying -- Paypal, Amazon gift card, Western Union money transfer (those exist in many, many countries).

Whereas if you just don't want to pay, sorry there's no other way to unlock the Verizon locked-down bootloader.

You have to factor Sunshine in when you buy a Verizon phone like this. Everyone knows Verizon locks down their bootloaders. You easily could have bought a non-Verizon Motorola phone -- even a "Quark" phone exactly like this, with easily unlocked bootloader. Quark =

• Moto XT1254 (Droid Turbo),
• Moto XT1250 (U.S. Moto Maxx),
• Moto XT2225 (Moto Turbo, "international" Moto Maxx).

Motorola gives free unlock code to all those, EXCEPT for the Droid Turbo because Verizon demands the bootloader stay locked down. I own THREE of the Moto XT1225. Very easy to unlock.

All the Quarks have the exact same specs, except for radio bands or internal storage (either 32GB/64GB). Only Verizon's XT1254 has the locked down bootloader. U.S. Moto Maxx XT1250 even has the exact same radio bands (including LTE band 13 used by Verizon, as well as CDMA bands). The XT1254 (Droid Turbo) and XT1250 (U.S. Moto Maxx) are exact clones of each other, with even the same FCC ID. Those two different model numbers only exists because Verizon wanted to pretend they had an "exclusive", but they never did. The XT1254 is really just a U.S. Moto Maxx XT1250. The XT1225 ("international" Moto Maxx, but also sold under "Moto Turbo" name in India) has a slightly different mix of LTE bands (not LTE 13), but more LTE bands (LTE 5 and 17), plus even more HSPA bands than the U.S. models, but no CDMA.

So, if you insist on buying a phone like the Verizon Moto XT1254 (Droid Turbo), you have to say the REAL price is price + $25. Why do you think the phone was as cheap as it was? It's not the real final price.

The exploit Sunshine uses has been publicly discussed. If you know coding, you can build your own version of "Sunshine".

Other than that, all I can tell you is you have to research phones here on XDA before you buy them. What I just told you has been said over and over and over. You would have learned everything in 5 minutes of reading or even if you had asked this question here before you bought the phone.

i dont need unlocked bootloader for installing custom recovery .
i am on MCG24.251-5-5 firmware version . I tried every single method of flashing stock firmware .
I firstly downloaded the kitkat version but then i heard i cannot downgrade to kitkat without unlocked bootloader .
Then i downloaded the MCG24.251-4 marshmallow but i still cannot flash it on locked bootloader .
Do you think i will be able to flash the exact MCG24.251-5-5 firmware on locked bootloader with RSDlite , mfastboot or any other method ???
Actually i haved played with my Droid and it bootloops sometimes . I just want to reflash a stock firmware .

 

[ChazzMatt]

i dont need unlocked bootloader for installing custom recovery .

So you do not want to permanently root or install TWRP custom recovery?

What do you want unlocked bootloader for then? Just to downgrade firmware? Wow, that's waste of an unlocked bootloader! I mean, yeah, you can downgrade firmware, but you might as well also root and have TWRP recovery (with at least one good saved backup). You can also flash modules to improve audio or even update to latest Motorola camera (which Motorola is only giving to phones getting official Nougat -- but thanks to XDA we can also have it). But you need root and TWRP.

i am on MCG24.251-5-5 firmware version .

I tried every single method of flashing stock firmware .
I firstly downloaded the kitkat version but then i heard i cannot downgrade to kitkat without unlocked bootloader .
Then i downloaded the MCG24.251-4 marshmallow but i still cannot flash it on locked bootloader .
Do you think i will be able to flash the exact MCG24.251-5-5 firmware on locked bootloader with RSDlite , mfastboot or any other method ???
Actually i haved played with my Droid and it bootloops sometimes . I just want to reflash a stock firmware .

MCG24.251-5-5 (which you have) is the latest, most recent stock firmware from March 2017. You aren't making any sense. You were already on the latest firmware, so why do you need to reflash stock firmware? OK, you sort of say you have messed up your phone trying to do stuff you shouldn't have done.

That's right, you can NOT downgrade to any lower firmware without unlocked bootloader. That's true for any Motorola phone. If you have messed up your phone trying to flash lower versions of firmware with a locked bootloader, yes you can use RSDLite or mfastboot to re-flash MCG24.251-5-5. Just make sure it IS MCG24.251-5-5 --, because the previous version of firmware to MCG24.251-5-5 was MCG24.251-5 (without the extra -5 on the end). Very easy to confuse the two if you are in a hurry.

If you ever do unlock the bootloader and wish to downgrade, you still can't just flash the other version of firmware. You have to omit "gpt.bin" from the flash commands, otherwise you will bootloop.

 

[Mansoor4139]

So you do not want to permanently root or install TWRP custom recovery?

What do you want unlocked bootloader for then? Just to downgrade firmware? Wow, that's waste of an unlocked bootloader! I mean, yeah, you can downgrade firmware, but you might as well also root and have TWRP recovery (with at least one good saved backup). You can also flash modules to improve audio or even update to latest Motorola camera (which Motorola is only giving to phones getting official Nougat -- but thanks to XDA we can also have it). But you need root and TWRP.



MCG24.251-5-5 (which you have) is the latest, most recent stock firmware from March 2017. You aren't making any sense. You were already on the latest firmware, so why do you need to reflash stock firmware? OK, you sort of say you have messed up your phone trying to do stuff you shouldn't have done.

That's right, you can NOT downgrade to any lower firmware without unlocked bootloader. That's true for any Motorola phone. If you have messed up your phone trying to flash lower versions of firmware with a locked bootloader, yes you can use RSDLite or mfastboot to re-flash MCG24.251-5-5. Just make sure it IS MCG24.251-5-5 --, because the previous version of firmware to MCG24.251-5-5 was MCG24.251-5 (without the extra -5 on the end). Very easy to confuse the two if you are in a hurry.

If you ever do unlock the bootloader and wish to downgrade, you still can't just flash the other version of firmware. You have to omit "gpt.bin" from the flash commands, otherwise you will bootloop.

Thanks Man

 

[Mansoor4139]

So you do not want to permanently root or install TWRP custom recovery?

What do you want unlocked bootloader for then? Just to downgrade firmware? Wow, that's waste of an unlocked bootloader! I mean, yeah, you can downgrade firmware, but you might as well also root and have TWRP recovery (with at least one good saved backup). You can also flash modules to improve audio or even update to latest Motorola camera (which Motorola is only giving to phones getting official Nougat -- but thanks to XDA we can also have it). But you need root and TWRP.



MCG24.251-5-5 (which you have) is the latest, most recent stock firmware from March 2017. You aren't making any sense. You were already on the latest firmware, so why do you need to reflash stock firmware? OK, you sort of say you have messed up your phone trying to do stuff you shouldn't have done.

That's right, you can NOT downgrade to any lower firmware without unlocked bootloader. That's true for any Motorola phone. If you have messed up your phone trying to flash lower versions of firmware with a locked bootloader, yes you can use RSDLite or mfastboot to re-flash MCG24.251-5-5. Just make sure it IS MCG24.251-5-5 --, because the previous version of firmware to MCG24.251-5-5 was MCG24.251-5 (without the extra -5 on the end). Very easy to confuse the two if you are in a hurry.

If you ever do unlock the bootloader and wish to downgrade, you still can't just flash the other version of firmware. You have to omit "gpt.bin" from the flash commands, otherwise you will bootloop.

Current Version:-

Version To Download:-

This Will Work For Me ???

 

[ChazzMatt]

Current Version:-
View attachment 4231460
Version To Download:-
View attachment 4231461
This Will Work For Me ???

Yes.

you can also download from here:

[FXZ] Official Stock Firmware 6.0.1 MCG24.251-5-5
https://forum.xda-developers.com/dr...-official-stock-firmware-6-0-1-mcg24-t3569334