[Guide] OnePlus 6T [Fajita]: Unlock | Flash TWRP | Root | Nandroid & EFS Backup !!

[Funk Wizard]

[Guide] OnePlus 6T [Fajita]: Unlock | Flash TWRP | Root | Nandroid & EFS Backup !!

[Guide] OnePlus 6T [Fajita]: Unlock Bootloader | Flash TWRP | Root | Nandroid & EFS Backup !!

This Guide will not work on the T-Mobile Carrier Locked Device as it may have the 40 Day/Fully Pay off restriction set by the carrier

Before you start, OTA up to the latest System Update available.
Settings > System Updates > Download & Install the latest available

Thank You all for your support!!
Never Settle :fingers-crossed:​

 

[Funk Wizard]

Introduction​​

Unlock & Rooting OnePlus 6T would give you additional benefits like you can install special apps, Flash Custom ROMs & Custom Mods, you can streamline your phone performance and many extra features. The real performance of an Android smartphone can only be unlocked once it is rooted.

Rooting this device is actually quite a simple and easy process. Before you begin, it is recommended that you at least try to understand what each part of the process will do. Although this guide will elongate each step in order to show all of the details, the method used can be broken up into 3 main steps: ​

1. Unlocking the Bootloader
2. Installing a Custom Recovery
3. Gaining Root Access

Each new step relies on the previous step so please follow the entire process and a basic summary of each part is described as below:

Unlocking Bootloader​​

Opens the door to the internal memory of the device to be written on to. This allows you to flash images onto the main partitions of the phone.​

Installing a Custom Recovery​​

A custom recovery is flashed onto the recovery partition of the device and overwrites the stock recovery that exists by default. Custom recoveries bring lots of functionality and give you the ability to perform wipes, install flashable zips, create full backups of your device (Nandroid backup), and various other features. An unlocked bootloader is needed to install a custom recovery.

Gaining Root Access​​

You can gain root by either flashing via recovery a pre-rooted custom rom, or by Flashing Magisk Zip for a system less root.

After completing these steps your phone will be rooted, the phone will have a custom recovery installed and an unlocked bootloader. This, in my opinion, is the a practical and beneficial method for rooting your phone. It will give you some basic adb/fastboot knowledge, and should hopefully help you have a decent understanding of the entire process. This method will work regardless of any android version on the phone.

If you are confused by anything in this guide, I highly suggest getting it clarified being before moving on. Ask your question in this thread and I or someone else will likely answer. Also we would suggest that you read over the whole thread a few times before actually doing anything to the phone.​

 

[Funk Wizard]

Setup, Preparation & Prerequisites​​

Basic tasks that may be referred to throughout this guide:​​

Open Command Prompt: Press Shift + Right Click anywhere on the screen and select Open Command Window here

Enter Fastboot/Bootloader Mode: Turn the phone off. Hold volume up + power until the "fastboot" screen appears. [Alternatively, if Advanced Reboot is enabled, you can press Reboot > Bootloader from the power menu.]

Enter Recovery Mode: Turn the phone off. Hold volume down + power until the "OnePlus Logo" screen appears. [Alternatively, if Advanced Reboot is enabled, you can press Reboot -> Recovery from the power menu.]

ADB and Fastboot Drivers Installation​

1. Download & Update OnePlus 6T Drivers From Here
2. Download & Update Fastboot and ADB Binaries/Drivers from Here

3. Run the .exe file downloaded from above as Administrator.
4. Press 'Y' every time the installer asks for.
5. Continue Driver Installation.

Now, ADB and Fastboot have been installed on your PC and should be Working as desired.

Things To Remember​

Show File Extensions
Open a command prompt window and run "Control folders" (without the quotes). Go to the View tab and uncheck the "Hide extensions for known file types" option. This will help avoid confusion when renaming files.

Battery
Ensure that your phone has at least 60% battery remaining, and that your PC is plugged in and wont shut down spontaneously during the process. The procedure doesn't take very long , but its best to have enough charge in case something goes wrong.

Backup (Optional)
Unlocking the bootloader will/should completely wipe all data from the device. This includes apps, settings and even the contents of the internal sdcard (pictures, music, etc.). Copy all important files off the phone onto a PC or upload them to a cloud.

USB Debugging
On your phone go to Settings > About phone > Tap on Build number 7 times. This will enable Developer options. Now go back to Settings > Developer options > Enable USB debugging

Enable OEM Unlocking
On your phone go to Settings > Developer options. Then enable the 'OEM Unlocking' option. Also make sure that from now on, OEM unlocking option is enabled before you reboot as sometimes, it might get disabled itself.

Enable Advanced Reboot
On your phone go to Settings > Developer options > Enable the 'Advanced Reboot' option.

 

[Funk Wizard]

Unlocking Bootloader​

Turn the phone off. Then boot it into fastboot mode by holding volume up + power or select reboot to bootloader if advanced reboot is activated via developer options. The phone will display "fastboot" text indicating that it has successfully entered fastboot mode.

Plug the phone into your PC, then open a command prompt window on the desktop (Shift + Right Click -> Open Command Window here) and type:

fastboot devices

This command will list the connected devices. If your phones serial number shows up you are good to go and may continue. If the phone is NOT listed this indicates that your drivers are not installed correctly. In order for you to continue you must fix your drivers so that your phone is listed under fastboot devices.

If the phone has been recognized by the command above, proceed to unlocking the bootloader with the following command:

Remember this Step will WIPE EVERYTHING off the phone so Backup all your Data

fastboot oem unlock

You would be greeted with a Unlock Bootloader Warning page, Hit the Vol button to select Yes and turn it Blue and Hit the Power Button to Execute the selection

Your device will reboot, show you a Secure boot warning, reboot into stock recovery and wipe all data. Once done, your phone will reboot into the OS.

Please continue and follow the next post to install Custom Recovery

 

[Funk Wizard]

Flashing TWRP Recovery​

Downloads:
Official TWRP | TWRP Thread | Credits @mauronofrio

Root
Magisk
​

Wait until the phone has fully booted up into android, then adjust the following settings on the phone:

USB Debugging
On your phone go to Settings > About phone > Tap on Build number 7 times. This will enable Developer options. Now go back to Settings > Developer options > Enable USB debugging

Enable OEM Unlocking
On your phone go to Settings > Developer options. Then enable the 'OEM Unlocking' option and make sure that from now on, OEM unlocking option is enabled before you reboot. Sometimes, it might get disabled itself.

The OnePlus 6T uses the newer AB partition scheme first introduced on the Pixel 1. As such there is no recovery partition. Instead, the recovery is part of the boot image. You will temporarily boot TWRP to perform and later perform a more permanent TWRP installation.

Download all the files, place Magisk & TWRP installer zip on Device Internal Memory and TWRP img on your PC

Then boot it into fastboot/bootloader mode by holding volume up + power or selecting the reboot to bootloader via advanced reboot options.

Open a new command prompt in the same location and run the following commands:

fastboot boot twrp img name

You will temporarily boot into TWRP

Now in TWRP, tap on Install and browse to the zip and install it (the zip will probably be in /sdcard/Downloads). TWRP will now be installed to both slots. TWRP is now installed.

PS: DO NOT BOOT IN OS JUST YET & CONTINUE TO THE ROOTING POST

 

[Funk Wizard]

Gaining Root Access​

This is a continued post from the above post...

1. Boot into TWRP Recovery
2. If you want to stay systemless continue without swiping right else Swipe and enable modifications.
3. Select your preferred Language, Tap “Never show this screen on boot again,” and Swipe allow modification.
4. Navigate to Install and select Magisk to root.
5. Swipe to confirm the flash
6. Reboot System

Keep in mind that the first boot after wiping the phone may take longer than usual, as the phone will need to rebuild the dalvik cache and initialize other first boot and might reboot a few times.

* MTP, known as Media Transfer Protocol, is the same way you transfer files from your PC to your device when booted into system.

Congrats! Your Device now has an unlocked bootloader, a custom recovery installed and is rooted !!

Warning: Do not flash partial update OTAs (under 1 GB) on a modified device! If you want to use partial OTAs, you must first flash a full OTA that it applies to, and then flash the partial OTA from stock recovery. Flashing partial OTAs from TWRP will either fail or soft brick your device. You can return to a usable state by flashing full zips in recovery.

Enjoy :fingers-crossed:

 

[Funk Wizard]

Making a Nandroid Backup​

Warning: before you make a backup with TWRP you must remove all Lockscreen Security. If you do not do this you will not be able to unlock your device after restoring your backup (entering your pin/pattern/password will result in an "incorrect pin/pattern/password" message), you'll be forced to perform a factory reset to boot into Android.

To remove lockscreen security go to
Settings > Security > Screen Lock and set it to Swipe/None.

A Nandroid Backup is a very important thing to have before installing any custom software on your device. It's basically a backup of your stock system that you can fall back on if anything goes wrong or if you just want your stock ROM back.

You can also use Nandroid Bckup to create a backup of your favorite ROM set up exactly the way you like it. The backup you create can be easily restored using the restore tool in TWRP recovery.

To Create Nandroid Backup:

1. Boot into TWRP Recovery .
2. Go to Backup Menu and select all the listed partitions.
3. Name the Backup if needed (Optional)
4. Swipe to take Backup.
This proces should take 5 to 7 minutes depending upon the size of data.
5. Reboot System when done.

Your Nandroid will be stored in the Backup Folder inside TWRP Folder /sdcard/TWRP/BACKUPS

 

[Funk Wizard]

Restoring a Nandroid Backup​

1. Boot into TWRP Recovery
2. Go to Restore Menu and select the backup you want to restore.
3. Select the partitions you want to restore.
4. Swipe to Restore. The process will take 5 to 7 minutes.
5. Reboot system once done

Note: If you happened to forget to remove lockscreen security (PIN/Pattern/Password) before creating your backup, and you cannot get into your OS after restoring, you can do the following to fix the issue.

Boot into TWRP
Use the TWRP File Manager and Navigate to /data/sytem/ and delete the following files:

locksettings.db
locksettings.db-shm
locksettings.db-wal.
gatekeeper.password.key
gatekeeper.pattern.key

You may or may not have all the above files so delete the ones you have.

Reboot the phone and (if you've set a PIN) enter it to decrypt the storage one more time. After that you can simply unlock your phone with a swipe.

Upon Boot > Go into Settings > Security > set your preferred unlock method

Android will ask you if you want to set a boot-time code too so select as per convenience.

 

[Funk Wizard]

Making an EFS Backup
​

All too often, we've seen folks who have a corrupted or missing EFS Partition. This results in your IMEI being lost and no cellular activity on the device at all. This can be a royal PITA to fix, and some folks haven't been able to fix it at all. You can take a precautionary measure to safeguard yourself against this by taking a couple of minutes to back up your modemst files.

Download & Open up Terminal Emulator on your phone from here

Once it's open you'll be greeted with a command line prompt, in which you can enter text commands, the first thing you need to do is enable root access by entering this line (press the enter key on your on-screen keyboard after each command to issue it):

su

If this is the first time you've used Terminal Emulator a Superuser or SuperSU popup will appear, make sure you grant root access.

Now enter these two commands:

dd if=/dev/block/sdf2 of=/sdcard/modemst1.bin bs=2048

dd if=/dev/block/sdf3 of=/sdcard/modemst2.bin bs=2048

This will place two files (modemst1.bin & modemst2.bin) on your internal storage.

Make sure you copy them to your PC and Cloud immediately so that you have a backup there to use if you need to restore it in future.

That's it !! In case you ever need to restore Nanroid or EFS Backups, please continue and follow the next post...

 

[Funk Wizard]

Restoring an EFS Backup​

If by chance you end up with a corrupt EFS partition all you need to do is flash the files back to your device using fastboot.

Boot into fastboot mode (power + volume up) and connect your phone to your PC via usb cable.

Keep modemst1.bin and modemst2.bin (backed up earlier) on your desktop and open command window there.

These fastboot commands will restore the files:

fastboot flash modemst1 modemst1.bin

fastboot flash modemst2 modemst2.bin

Reboot your device.

fastboot reboot

Now disconnect phone from PC. Your IMEI should be back.

That's it for this guide, Enjoy :highfive:

 

[Funk Wizard]

Just in Case if you want to go back to stock, please follow the below to safely lock the bootloader and return to 100% Stock device:

Before you start, make sure you deactivate and uninstall all mods, magisk modules substratum overlays and any other system/build.prop mods that you may have executed/experimented with.

1. Download the latest full rom from my update thread.

2. Move the Downloaded file from the Downloads folder to the root of device internal storage.

3. Navigate to Settings > System Update > Settings > Local upgrade > Select latest OOS Full Zip

4. Flash the Full Zip

5. Upon Successful Flash > Reboot to Recovery

6. Factory Reset and Wipe internal from Recovery to Reset the device

7. Reboot To Fastboot/Bootloader Menu

8. Connect the device and execute the below command

fastboot oem lock

9. Select the Volume Button to Select Lock Bootloader and Power Button to Execute the command :good:

10. Device will Reboot and Lock the Bootloader and there would be no more secure boot prompt on the reboot to confirm :good:

Feel free to ask if you have any questions.
PS: Tested on Global Version, Please check T-Mobile thread for T-Mobile version, Thanks

 

[jpeckinp]

I assume this is only for non TMo devices for the first 40 days. Or will this unlock them also?

 

[LLStarks]

This is a boilerplate thread, it will not work with T-Mobile without modifying the instructions.

 

[Funk Wizard]

I assume this is only for non TMo devices for the first 40 days. Or will this unlock them also?

This is a boilerplate thread, it will not work with T-Mobile without modifying the instructions.

This guide will unlock all other versions which includes both Global and Chinese variants. T-Mobile Version may have the fully paid/40 days carrier restrictions.

I shall add the disclaimer on the OP for T-Mobile Users

 

[Gsopx19]

Hey Funk Wizard,

It is also possible to unlock bootloader and stop there right? In case i would like to root and/or flash custom recovery or roms later. Im asking so that i dont have to wipe my data to unlock the bootloader, but i want to keep my phone clean in the beginning.

Thanks in advance!

 

[cultofluna]

Hey Funk Wizard,

It is also possible to unlock bootloader and stop there right? In case i would like to root and/or flash custom recovery or roms later. Im asking so that i dont have to wipe my data to unlock the bootloader, but i want to keep my phone clean in the beginning.

Thanks in advance!

Unlocking the bootloader wipes everything in your phone
You can better unlock the bootloader before setting up your device
And finally , yes you can unlock the bootloader first & install twrp and root whenever you want

 

[g0ne_wild]

The guide makes very limited sense as of writing, as there is no TWRP version out yet for the OP 6T ...using TWRP for the OP 6 on the OP 6T will result in a crash.

 

[Pain-N-Panic]

Great tutorial funk. Easy to read and follow and good on you for going into detail on the EFS backup/restore. Hopefully is saves people from a bricked device!

 

[domnic79]

I'm getting my oneplus 6t tomorrow. Will root it right away.

---------- Post added at 03:49 AM ---------- Previous post was at 03:43 AM ----------

The guide makes very limited sense as of writing, as there is no TWRP version out yet for the OP 6T ...using TWRP for the OP 6 on the OP 6T will result in a crash.

Ya ur right. Blu_spark wil most probably make one once the official one gets released. His recovery is working great on oneplus 6.

 

[ittina]

Will there be a guide to root without installing TWRP? I prefer that because you can do the OTA with relative ease.