• Introducing XDA Computing: Discussion zones for Hardware, Software, and more!    Check it out!

[GUIDE] Unlocking JioFi 3 JMR540 & JMR541 for all networks

Search This thread
That will need too much customization. It has only one channel. So receiving data and retransmiting on same channel will slow down the speed.
a little slow network is better than no net at all, I'm currently using a old rn5pro as a wifi repeater but due to it's range limitation the wifi keep disconnecting (hotspot works fine, and the range is good).
Jiofi already has a good amount of range so it would be really awesome if it could be used as a repeater
 

habib.my

Member
Apr 4, 2018
9
0
Xiaomi Redmi 5A
Redmi Note 8
a little slow network is better than no net at all, I'm currently using a old rn5pro as a wifi repeater but due to it's range limitation the wifi keep disconnecting (hotspot works fine, and the range is good).
Jiofi already has a good amount of range so it would be really awesome if it could be used as a repeater
Yes it can be used as a wifi repeater.
 

kamesh26

New member
Jul 21, 2021
1
0
Unlocked Firmware for JioFi 3 JMR540 & JMR541

Disclaimer
I am not responsible for any kind of damage to your device.
Use this firmware at your own risk
Post is for educational purpose only.


ONLY FOR JMR 540 & JMR 541


I was able to dump and reverse engineer JioFi 3's firmware to see if I can unlock the SIM restrictions. JioFi 3 is designed by Foxconn it uses generic firmware. Unlocking took time though. Tested with Vi, Airtel.



Guide

Make sure you're on same firmware version
  • JMR 540 - FXN_JMR540_R6.16
  • JMR 541 - FXN_JMR541_R3.10
If not please use the device for sometime it'll autoupdate.


1. Locate your device model and download the respective Firmware and extract it to a known location


2. Install drivers and tools (skip if already installed)

  • Install Fastboot drivers ( google it for mac and linux it's easy to find)
  • Install Fastboot ( google it for mac and linux it's easy to find)

3. Prepare device

  • Remove battery from JioFi 3
  • Locate reset pin hole button
  • Lay down JioFi 3
  • Use Paper Clip / SIM Ejector Tool to press button inside (using sharp object is not recommended)
  • Keep pressing button down and insert USB cable
  • Release button as soon as all the LEDs in Display turns RED. This means device is in boot loader mode

4. Flashing Unlocked Firmware

  • Open adb and fastboot tools terminal
  • Enter following to check if device is connected

  • fastboot devices

  • It will return something like this
  • baxxxxx fastboot

  • This means device is connected. If your device doesn't show up here please check drivers in Device manager
  • Now first erase the system partition

  • fastboot erase system

  • It will return something like this
  • erasing 'system'... OKAY [ 1.104s] finished. total time: 1.105s

  • Now flash the firmware
  • fastboot flash system "D:\system.img" ( replace path )

  • It should return something like this
  • sending 'system' (34306 KB)... OKAY [ 1.276s] writing 'system'... OKAY [ 9.462s] finished. total time: 10.741s

  • Now send reboot command to device
  • fastboot reboot

  • You'll notice device will reboot normally now you can unplug the cable.

Congratulations your device is now unlocked and you can reinsert battery and another SIM for testing.

Firmware will take long time than usual to boot do not panic.

4. Changing APN
  • Insert SIM connect with JioFi 3 wait it to intialize
  • Open Web UI from browser (http://jiofi.local.html/)
  • Now login (default username/pwd is administrator/administrator)
  • In Network Tab you'll find setting for changing APN
  • Put it on manual and enter "internet" as APN (without quotes)
  • Hit apply/save device will reboot again automatically and it'll auto connect
  • Just wait patience is the key here it'll connect.

If something goes WRONG or you want to UNDO you can re flash original firmware which is provided in this post.


Original backup




FAQs

  1. Q. My device is not visible in fastboot devices
    A. Confirm driver installation a faulty cable can also be the issue.
    .
  2. Q. Everything went well but still no changes in dashboard
    A. After successful flash if you still don't see the changes your device is probably booting from recovery partition. Try flashing recovery partition by
    fastboot erase recoveryfs
    fastboot flash recoveryfs "D:\system.img"
    .


  3. Q. After resetting device from pin hole button it shows INVALID SIM.
    A. This is supposed to happen just reboot the device it'll work again.
    .
  4. Q. Can I undo all this and get back to original firmware
    A. Yes just flash the original firmware provided in post and reset the device.







Mentions:
Thanks to
Karuppusamy for testing it on JMR541.


What about JioFi 2, 4, 5, 6?
Reverse Engineering takes lot of time and coffee. Until I get physical access to device I won't be able to unlock it. I'm constantly searching them on OLX as soon as I get hands on I'll surely try to RE and unlock it. I'll update the same here if there is no update here at the time of your reading then I haven't got the device yet so please don't spam for update hope you understand that I don't get anything by doing these things, I do it for liberation of locked hardware to meet it's real destiny and of course for the people. I also have a day job so no I cannot guide or teach you, hope you understand why.



Unlocked Firmware for JioFi 3 JMR540 & JMR541

Disclaimer
I am not responsible for any kind of damage to your device.
Use this firmware at your own risk
Post is for educational purpose only.


ONLY FOR JMR 540 & JMR 541


I was able to dump and reverse engineer JioFi 3's firmware to see if I can unlock the SIM restrictions. JioFi 3 is designed by Foxconn it uses generic firmware. Unlocking took time though. Tested with Vi, Airtel.



Guide

Make sure you're on same firmware version
  • JMR 540 - FXN_JMR540_R6.16
  • JMR 541 - FXN_JMR541_R3.10
If not please use the device for sometime it'll autoupdate.


1. Locate your device model and download the respective Firmware and extract it to a known location


2. Install drivers and tools (skip if already installed)

  • Install Fastboot drivers ( google it for mac and linux it's easy to find)
  • Install Fastboot ( google it for mac and linux it's easy to find)

3. Prepare device

  • Remove battery from JioFi 3
  • Locate reset pin hole button
  • Lay down JioFi 3
  • Use Paper Clip / SIM Ejector Tool to press button inside (using sharp object is not recommended)
  • Keep pressing button down and insert USB cable
  • Release button as soon as all the LEDs in Display turns RED. This means device is in boot loader mode

4. Flashing Unlocked Firmware

  • Open adb and fastboot tools terminal
  • Enter following to check if device is connected

  • fastboot devices

  • It will return something like this
  • baxxxxx fastboot

  • This means device is connected. If your device doesn't show up here please check drivers in Device manager
  • Now first erase the system partition

  • fastboot erase system

  • It will return something like this
  • erasing 'system'... OKAY [ 1.104s] finished. total time: 1.105s

  • Now flash the firmware
  • fastboot flash system "D:\system.img" ( replace path )

  • It should return something like this
  • sending 'system' (34306 KB)... OKAY [ 1.276s] writing 'system'... OKAY [ 9.462s] finished. total time: 10.741s

  • Now send reboot command to device
  • fastboot reboot

  • You'll notice device will reboot normally now you can unplug the cable.

Congratulations your device is now unlocked and you can reinsert battery and another SIM for testing.

Firmware will take long time than usual to boot do not panic.

4. Changing APN
  • Insert SIM connect with JioFi 3 wait it to intialize
  • Open Web UI from browser (http://jiofi.local.html/)
  • Now login (default username/pwd is administrator/administrator)
  • In Network Tab you'll find setting for changing APN
  • Put it on manual and enter "internet" as APN (without quotes)
  • Hit apply/save device will reboot again automatically and it'll auto connect
  • Just wait patience is the key here it'll connect.

If something goes WRONG or you want to UNDO you can re flash original firmware which is provided in this post.


Original backup




FAQs

  1. Q. My device is not visible in fastboot devices
    A. Confirm driver installation a faulty cable can also be the issue.
    .
  2. Q. Everything went well but still no changes in dashboard
    A. After successful flash if you still don't see the changes your device is probably booting from recovery partition. Try flashing recovery partition by
    fastboot erase recoveryfs
    fastboot flash recoveryfs "D:\system.img"
    .


  3. Q. After resetting device from pin hole button it shows INVALID SIM.
    A. This is supposed to happen just reboot the device it'll work again.
    .
  4. Q. Can I undo all this and get back to original firmware
    A. Yes just flash the original firmware provided in post and reset the device.







Mentions:
Thanks to
Karuppusamy for testing it on JMR541.


What about JioFi 2, 4, 5, 6?
Reverse Engineering takes lot of time and coffee. Until I get physical access to device I won't be able to unlock it. I'm constantly searching them on OLX as soon as I get hands on I'll surely try to RE and unlock it. I'll update the same here if there is no update here at the time of your reading then I haven't got the device yet so please don't spam for update hope you understand that I don't get anything by doing these things, I do it for liberation of locked hardware to meet it's real destiny and of course for the people. I also have a day job so no I cannot guide or teach you, hope you understand why.



my cable is in good condition why my device not showing in "fastboot devices"
 
Jul 12, 2021
7
2
  • Like
Reactions: ramesh_yadav

abhimortal6

Senior Member
Mar 6, 2014
164
194
Gwalior
Is there any way to use JioFi3 as a wifi repeater?
Yes it can, services are already written in the firmware, it can be used as pocket sniffer too with the help of an sdcard it's basically Android without SurfaceFlinger so whatever you can do with Android shell you can do it here and processor is quite powerful actually only thing is procedure is hectic for beginner. Fun fact: Firmware also have Bluetooth services written in it.
 

abhimortal6

Senior Member
Mar 6, 2014
164
194
Gwalior
Able to mount system.img using nandsim

@abhimortal6 @rahulkap123456oor

Were you able to decompile cgi-bin. I want to know how It checks for firmware updates and download it.

Repack to ubi with ubinize is not working.
Can you share any other alternative. I will try with jffs2 but you already did so please share how you did that and with what
You mean FXcgiMain? ( all the custom binaries starts with FX in this short for Foxconn I think). Yes I have but this is not the targeted binary as FXcgiMain simply triggers "\usr\sbin\firmware_upgrade" with file path also firmware_upgrade is not the binary which we are looking for. It's "sbin\cwmpCPE" which creates an TR69 connection with server. URL (which is actually a IP)is visible in configs and configs are saved in NV RAM which is accessible by executing binary "cfg " And there is a simple routine written for it which in certain interval makes a provisioning call to that IP which I think is dead or re-configured for other purposes as I remember I tried to catch all internal HTTP traffic, so nothing was received after call but it was clear when I REd the binary and the flow it was supposed to receive a FTP url and there is a partition specifically for storing downloaded firmware temporarily. I guess that's all the info anyone will require. I don't have enough bandwidth to work on this project but device have a lot of potential. I may start something in December till then I'm engaged.
 
Last edited:
  • Like
Reactions: ramesh_yadav

YOURKIN

Member
May 12, 2015
34
6
mstsc_rIoncvmNaf.png

@abhimortal6 i found the JIOFI M2S QDLoader mode but need help for backup firmware also need adb mode help please help me
 

abhimortal6

Senior Member
Mar 6, 2014
164
194
Gwalior
View attachment 5370267
@abhimortal6 i found the JIOFI M2S QDLoader mode but need help for backup firmware also need adb mode help please help me
You can backup whole firmware with QPST/Qfil you can use method available on internet. Backuped firmware via QPST is not easy to work with it’ll be good for restoration. But these methods requires an programmer that’s basically a partition map that contains protocol and map for accessing device storage and unfortunately most of the generic files that I’ve tested didn’t work in my case may be it’ll work in Jiofi 2. You can get those programmers by searching “All qualcomm firehose”. I personally won’t recommend that keep it as the last resort. Get shell access from hardware TTL where you can easily backup firmware to an sdcard or simply enable adb (shell via TTL is an Android shell).
For now only working method for enabling adb is via hardware hacking that I’ve described multiple times in this same thread so I’m not going to rewrite everything you can search your way through hope you understand and good luck.
 
Last edited:
  • Like
Reactions: YOURKIN

YOURKIN

Member
May 12, 2015
34
6
You can backup whole firmware with QPST/Qfil you can use method available on internet. Backuped firmware via QPST is not easy to work with it’ll be good for restoration. But these methods requires an programmer that’s basically a partition map that contains protocol and map for accessing device storage and unfortunately most of the generic files that I’ve tested didn’t work in my case may be it’ll work in Jiofi 2. You can get those programmers by searching “All qualcomm firehose”. I personally won’t recommend that keep it as the last resort. Get shell access from hardware TTL where you can easily backup firmware to an sdcard or simply enable adb (shell via TTL is an Android shell).
For now only working method for enabling adb is via hardware hacking that I’ve described multiple times in this same thread so I’m not going to rewrite everything you can search your way through hope you understand and good luck.
thank you thank you so so much . im trying to find rx tx pin but now i dont know , today i just found the QDLoader mode
 

abhimortal6

Senior Member
Mar 6, 2014
164
194
Gwalior
now tell me the command so i can enable debug mode plz
Great first backup the firmware read this guide

Then you can edit the build.prop directly from shell and add

Code:
persist.service.adb.enable=1
persist.service.debuggable=1
persist.sys.usb.config=mtp,adb
After reboot it’ll enable adb

Backup first it is important to keep firmware stock.
 
  • Like
Reactions: YOURKIN

YOURKIN

Member
May 12, 2015
34
6
Great first backup the firmware read this guide

Then you can edit the build.prop directly from shell and add

Code:
persist.service.adb.enable=1
persist.service.debuggable=1
persist.sys.usb.config=mtp,adb
After reboot it’ll enable adb

Backup first it is important to keep firmware stock.
thank you so so much
 

YOURKIN

Member
May 12, 2015
34
6
Great first backup the firmware read this guide

Then you can edit the build.prop directly from shell and add

Code:
persist.service.adb.enable=1
persist.service.debuggable=1
persist.sys.usb.config=mtp,adb
After reboot it’ll enable adb

Backup first it is important to keep firmware stock.
now my problem is that if i press user root nothing response

now it look like charging loop
also some times later it restart automatic and again charging loop
 
Last edited:

Quantlight1

Member
Jul 12, 2021
10
2

I am not getting network now Suddenly It just happened and I tried rebooting several times but nothing happened. Now it's not shutting down I also tried it several times so I removed the battery. I have not turned on till now can anyone help me Fix this. Even though I am using jio Sim after Unlocking. Should I flash the Original Firmware? It Happened when device was in Charging when I was Using it. But it was not First time.
Edit:- There is also Full network here of Jio. I checked through another Sim.
Edit 2:- Now I tried to flash original Firmware
2021-07-26 19_11_11-Window.jpg
Its now Shows Flash Write Failure
Tried 2nd time
2021-07-26 19_13_15-Window.jpg
Same As above
Now trying to Flash Unlocked System.img

2021-07-26 19_14_38-Window.jpg

Its Successfully Flashed
Trying to Flash Recovery Partition
2021-07-26 19_16_32-Window.jpg

Now It is also Successfully flashed
But Still Network is not Coming Please Help.
Edit 3: Power button is working.
Edit 4: Its Now Shows no Sim Even though Jio Sim is Inserted
2021-07-26 19_37_40-Window.jpg
 
Last edited:

Poojan Joshi

New member
Jul 26, 2021
2
0
Hi Abhi,
Would you mind if I make a YouTube tutorial of this?

As there are many fake ones on YouTube and yes I will give credit to you, thats sure thing :)
 

Top Liked Posts

  • There are no posts matching your filters.
  • 1
    thanks bro, it works for my JioFi 3, JMR541.
    1
    plss help i'm stuck in bootloop
    You should've backed it up first before experimenting.
    1
    Unlocked Firmware for JioFi 3 JMR540 & JMR541

    Disclaimer
    I am not responsible for any kind of damage to your device.
    Use this firmware at your own risk
    Post is for educational purpose only.


    ONLY FOR JMR 540 & JMR 541


    I was able to dump and reverse engineer JioFi 3's firmware to see if I can unlock the SIM restrictions. JioFi 3 is designed by Foxconn it uses generic firmware. Unlocking took time though. Tested with Vi, Airtel.



    Guide

    Make sure you're on same firmware version
    • JMR 540 - FXN_JMR540_R6.16
    • JMR 541 - FXN_JMR541_R3.10
    If not please use the device for sometime it'll autoupdate.


    1. Locate your device model and download the respective Firmware and extract it to a known location


    2. Install drivers and tools (skip if already installed)

    • Install Fastboot drivers ( google it for mac and linux it's easy to find)
    • Install Fastboot ( google it for mac and linux it's easy to find)

    3. Prepare device

    • Remove battery from JioFi 3
    • Locate reset pin hole button
    • Lay down JioFi 3
    • Use Paper Clip / SIM Ejector Tool to press button inside (using sharp object is not recommended)
    • Keep pressing button down and insert USB cable
    • Release button as soon as all the LEDs in Display turns RED. This means device is in boot loader mode

    4. Flashing Unlocked Firmware

    • Open adb and fastboot tools terminal
    • Enter following to check if device is connected

    • fastboot devices

    • It will return something like this
    • baxxxxx fastboot

    • This means device is connected. If your device doesn't show up here please check drivers in Device manager
    • Now first erase the system partition

    • fastboot erase system

    • It will return something like this
    • erasing 'system'... OKAY [ 1.104s] finished. total time: 1.105s

    • Now flash the firmware
    • fastboot flash system "D:\system.img" ( replace path )

    • It should return something like this
    • sending 'system' (34306 KB)... OKAY [ 1.276s] writing 'system'... OKAY [ 9.462s] finished. total time: 10.741s

    • Now send reboot command to device
    • fastboot reboot

    • You'll notice device will reboot normally now you can unplug the cable.

    Congratulations your device is now unlocked and you can reinsert battery and another SIM for testing.

    Firmware will take long time than usual to boot do not panic.

    4. Changing APN
    • Insert SIM connect with JioFi 3 wait it to intialize
    • Open Web UI from browser (http://jiofi.local.html/)
    • Now login (default username/pwd is administrator/administrator)
    • In Network Tab you'll find setting for changing APN
    • Put it on manual and enter "internet" as APN (without quotes)
    • Hit apply/save device will reboot again automatically and it'll auto connect
    • Just wait patience is the key here it'll connect.

    If something goes WRONG or you want to UNDO you can re flash original firmware which is provided in this post.


    Original backup




    FAQs

    1. Q. My device is not visible in fastboot devices
      A. Confirm driver installation a faulty cable can also be the issue.
      .
    2. Q. Everything went well but still no changes in dashboard
      A. After successful flash if you still don't see the changes your device is probably booting from recovery partition. Try flashing recovery partition by
      fastboot erase recoveryfs
      fastboot flash recoveryfs "D:\system.img"
      .


    3. Q. After resetting device from pin hole button it shows INVALID SIM.
      A. This is supposed to happen just reboot the device it'll work again.
      .
    4. Q. Can I undo all this and get back to original firmware
      A. Yes just flash the original firmware provided in post and reset the device.







    Mentions:
    Thanks to
    Karuppusamy for testing it on JMR541.


    What about JioFi 2, 4, 5, 6?
    Reverse Engineering takes lot of time and coffee. Until I get physical access to device I won't be able to unlock it. I'm constantly searching them on OLX as soon as I get hands on I'll surely try to RE and unlock it. I'll update the same here if there is no update here at the time of your reading then I haven't got the device yet so please don't spam for update hope you understand that I don't get anything by doing these things, I do it for liberation of locked hardware to meet it's real destiny and of course for the people. I also have a day job so no I cannot guide or teach you, hope you understand why.



    How to change Band in Jiofi ye bhi bata do please, band kaise Chang kare, Vi me band 3 connect hota agar band 41 connect ho to kaise kare please bhai
    1
    Connect the device to pc via USB and access the web panel inorder to change the password Incase your forgot your wifi password.
    How to reset password if i forget the once changed password already of jiofi 3
    I tried reset button but it doesn't reset it because i changed it on the jiofi website now i forgot the password that i changed a long ago and i can't connect my jiofi 3 so i can't change it.? Is there any other way for it?
  • 30
    Unlocked Firmware for JioFi 3 JMR540 & JMR541

    Disclaimer
    I am not responsible for any kind of damage to your device.
    Use this firmware at your own risk
    Post is for educational purpose only.


    ONLY FOR JMR 540 & JMR 541


    I was able to dump and reverse engineer JioFi 3's firmware to see if I can unlock the SIM restrictions. JioFi 3 is designed by Foxconn it uses generic firmware. Unlocking took time though. Tested with Vi, Airtel.



    Guide

    Make sure you're on same firmware version
    • JMR 540 - FXN_JMR540_R6.16
    • JMR 541 - FXN_JMR541_R3.10
    If not please use the device for sometime it'll autoupdate.


    1. Locate your device model and download the respective Firmware and extract it to a known location


    2. Install drivers and tools (skip if already installed)

    • Install Fastboot drivers ( google it for mac and linux it's easy to find)
    • Install Fastboot ( google it for mac and linux it's easy to find)

    3. Prepare device

    • Remove battery from JioFi 3
    • Locate reset pin hole button
    • Lay down JioFi 3
    • Use Paper Clip / SIM Ejector Tool to press button inside (using sharp object is not recommended)
    • Keep pressing button down and insert USB cable
    • Release button as soon as all the LEDs in Display turns RED. This means device is in boot loader mode

    4. Flashing Unlocked Firmware

    • Open adb and fastboot tools terminal
    • Enter following to check if device is connected

    • fastboot devices

    • It will return something like this
    • baxxxxx fastboot

    • This means device is connected. If your device doesn't show up here please check drivers in Device manager
    • Now first erase the system partition

    • fastboot erase system

    • It will return something like this
    • erasing 'system'... OKAY [ 1.104s] finished. total time: 1.105s

    • Now flash the firmware
    • fastboot flash system "D:\system.img" ( replace path )

    • It should return something like this
    • sending 'system' (34306 KB)... OKAY [ 1.276s] writing 'system'... OKAY [ 9.462s] finished. total time: 10.741s

    • Now send reboot command to device
    • fastboot reboot

    • You'll notice device will reboot normally now you can unplug the cable.

    Congratulations your device is now unlocked and you can reinsert battery and another SIM for testing.

    Firmware will take long time than usual to boot do not panic.

    4. Changing APN
    • Insert SIM connect with JioFi 3 wait it to intialize
    • Open Web UI from browser (http://jiofi.local.html/)
    • Now login (default username/pwd is administrator/administrator)
    • In Network Tab you'll find setting for changing APN
    • Put it on manual and enter "internet" as APN (without quotes)
    • Hit apply/save device will reboot again automatically and it'll auto connect
    • Just wait patience is the key here it'll connect.

    If something goes WRONG or you want to UNDO you can re flash original firmware which is provided in this post.


    Original backup




    FAQs

    1. Q. My device is not visible in fastboot devices
      A. Confirm driver installation a faulty cable can also be the issue.
      .
    2. Q. Everything went well but still no changes in dashboard
      A. After successful flash if you still don't see the changes your device is probably booting from recovery partition. Try flashing recovery partition by
      fastboot erase recoveryfs
      fastboot flash recoveryfs "D:\system.img"
      .


    3. Q. After resetting device from pin hole button it shows INVALID SIM.
      A. This is supposed to happen just reboot the device it'll work again.
      .
    4. Q. Can I undo all this and get back to original firmware
      A. Yes just flash the original firmware provided in post and reset the device.







    Mentions:
    Thanks to
    Karuppusamy for testing it on JMR541.


    What about JioFi 2, 4, 5, 6?
    Reverse Engineering takes lot of time and coffee. Until I get physical access to device I won't be able to unlock it. I'm constantly searching them on OLX as soon as I get hands on I'll surely try to RE and unlock it. I'll update the same here if there is no update here at the time of your reading then I haven't got the device yet so please don't spam for update hope you understand that I don't get anything by doing these things, I do it for liberation of locked hardware to meet it's real destiny and of course for the people. I also have a day job so no I cannot guide or teach you, hope you understand why.



    3
    bro is unlocking more 4g bands or manual selection of bands can be done ?
    Totally possible even 3G but it can't be done through WebUI it'll requires shell access.
    2
    1622625406032.jpeg

    This is completely genius! I am now able to use Airtel sim on my JioFi! Thanks!
    1
    successfully unlocked my jiofi 3 JMR541. tested with voda and its working well and good. Thanks a ton for this bro.
    I was late in checking this thread and got shipped airtel unlocked mifi from home.
    1
    successfully unlocked my jiofi 3 JMR541. tested with voda and its working well and good. Thanks a ton for this bro.
    I was late in checking this thread and got shipped airtel unlocked mifi from home.
    Can you show us dashboard screenshot. This will help other users to verify