Question Verizon Pixel 6 Pro Bootloader Unlock?

Search This thread

Namelesswonder

Senior Member
Jan 26, 2014
270
400
Google Pixel XL
Google Pixel 6 Pro
Pretty sure I already know the answer but I'm going to ask anyway.
I have a new in box Pro 6, from vzw sadly. Never powered it on.
Is there any possibility that I could get the bootloader unlocked prior to it connecting to a network of any kind?

Dirty pipe seems promising but there is no link between it and an unlocked vzw bootloader that I can find. Asking before I set up the device and likely kiss an unlocked bootloader goodbye for the life of this device.
There is none at the moment, and probably won't be for the foreseeable future. My best bet for you is to either just deal with it or resell/trade for an unlocked one.

You can do many things to compromise Android to gain root now, and certainly in the future, but it's just going to be a transient root. The attack surface of the bootloader is small, and most importantly, the knowledge is kept secret. Only Google and hardware vendors have access to the inner workings, and only Google is the one to be able to generate the unlock token for a device to allow it's bootloader to unlock itself.
You could try bruteforcing the token for a device, or the key and algorithm for all devices, but it's a numbers game with the odds so infinitesimally small for you. The number of unlock tokens is massive, more than the number of grains of sand on Earth, more than the number of stars in the universe, more than the number of stars in a billion universes. You can't bruteforce it, you're going to have to find a flaw in the bootloader. Problem is, Google has a vested interest in making sure there are no flaws, as they have already patched several of them before.
Previously you could unlock the Verizon Pixels via a flaw in the bootloader, which was patched. Later you could unlock them again along with the Verizon Pixel 2 due to an oversight on Google's part with them handing out unlock tokens, which was also patched. That's where it ended, there haven't been any exploits or oversights since.

It would be nice for an exploit to be discovered, because regardless of the differences in the unlockable variants versus the permanently locked variants, they are all going to be the same if (and a guaranteed when) Google is no longer is generating unlock tokens (read: they cease to exist or their servers go down.)

Which is actually the current situation of my Pixel 6a. It's unlockable, but I can't unlock it, because Google hasn't begun creating unlock tokens, because I got it two days before launch.
 
  • Like
Reactions: roirraW "edor" ehT

Talysdaddy

Senior Member
Apr 15, 2013
174
51
sEAtOWn, WA
I seriously doubt the "60 day sim unlock" allows the bootloader to be unlocked, otherwise we'd have a ton of VZW variant threads filled with development, and devices that are 61 days old, rooted, and running custom Roms.

But we don't. We don't have even have any developers working on VZW devices, regardless of age. So deductively thinking, the "60 day sim unlock" doesn't sound like it's currently an option.

Just my .02 (USD) worth 😁
The reason Verizon can easily unlock phones isn’t from their own choosing, it’s bcuz the FCC sold them a bunch of bands and one of the requirements with the sale was to allow users the freedom of choice and go with any carrier they chose hence them not carrier locking phones. This was way back before they even had the 60 day rule, Verizon phones came unlocked out of the box.. I’m no XDA writer, just a plain old dude that’s messed around with phones since the turn of the century. Your rant is a broken record that we see in every Verizon bootloader thread on every device here. There’s always someone who made the mistake and bought a Verizon device only to be butthurt when they discover they’re locked the funk down. What’s surprising is your lengthy resume here combined w/ the vast experience you say you have, yet still made that boo-boo.. You clearly didn’t write anything on Verizon, too bad, so sad.. We usually these sort of out bursts from newbies.. A few of them were pretty determined too, emailed everyone they could at Verizon hoping to over turn the way they conduct their business, only to be simply ignored.. womp womp..
The smarter ones gave up and bought an unlockable device.. curious on what an experienced XDA column writer would do,
besides starting to read what others here also wrote…?
 

Lughnasadh

Senior Member
Mar 23, 2015
3,905
4,179
Google Nexus 5
Huawei Nexus 6P
The reason Verizon can easily unlock phones isn’t from their own choosing, it’s bcuz the FCC sold them a bunch of bands and one of the requirements with the sale was to allow users the freedom of choice and go with any carrier they chose hence them not carrier locking phones. This was way back before they even had the 60 day rule, Verizon phones came unlocked out of the box.. I’m no XDA writer, just a plain old dude that’s messed around with phones since the turn of the century. Your rant is a broken record that we see in every Verizon bootloader thread on every device here. There’s always someone who made the mistake and bought a Verizon device only to be butthurt when they discover they’re locked the funk down. What’s surprising is your lengthy resume here combined w/ the vast experience you say you have, yet still made that boo-boo.. You clearly didn’t write anything on Verizon, too bad, so sad.. We usually these sort of out bursts from newbies.. A few of them were pretty determined too, emailed everyone they could at Verizon hoping to over turn the way they conduct their business, only to be simply ignored.. womp womp..
The smarter ones gave up and bought an unlockable device.. curious on what an experienced XDA column writer would do,
besides starting to read what others here also wrote…?
Think you're directing your unpleasantries at the wrong person.
 

Az Biker

Sr. Mod / Mod & RC-RT Committees / Shred'r of MTBs
Staff member
The reason Verizon can easily unlock phones isn’t from their own choosing, it’s bcuz the FCC sold them a bunch of bands and one of the requirements with the sale was to allow users the freedom of choice and go with any carrier they chose hence them not carrier locking phones. This was way back before they even had the 60 day rule, Verizon phones came unlocked out of the box.. I’m no XDA writer, just a plain old dude that’s messed around with phones since the turn of the century. Your rant is a broken record that we see in every Verizon bootloader thread on every device here. There’s always someone who made the mistake and bought a Verizon device only to be butthurt when they discover they’re locked the funk down. What’s surprising is your lengthy resume here combined w/ the vast experience you say you have, yet still made that boo-boo..
You clearly didn’t write anything on Verizon, too bad, so sad.. We usually these sort of out bursts from newbies.. A few of them were pretty determined too, emailed everyone they could at Verizon hoping to over turn the way they conduct their business, only to be simply ignored.. womp womp..
The smarter ones gave up and bought an unlockable device.. curious on what an experienced XDA column writer would do,
besides starting to read what others here also wrote…?
Not sure who this condescending, self adulating nonsense was intended for, but it certainly isn't me.
 

LLStarks

Senior Member
Jun 1, 2012
1,935
1,149
Would DirtyCred CVE-2022-2588 and it's higher privileges make this possible?
Assuming the Pixel is vulnerable, these exploits have only been useful for temporary root access. Sometimes only very narrow escalated access.

Maybe someone can be bold and try to rewrite the build.prop to allow OEM unlocking, but all of this is insanely risky and inviting permanent bricks.
 
  • Like
Reactions: roirraW "edor" ehT

Top Liked Posts

  • There are no posts matching your filters.
  • 9
    The fact that people still believe you can't unlocked the bootloader on any Verizon pixel, is your first sign there are no quality developers on this forum anymore.

    It's straightforward.

    Sim unlock your phone and boom.

    Or, continue to trust the below-average folks on these forums.

    Yet, here I am doing the same unlock method again, with the same result. This speaks volumes to how good the supposed developers are on XDA.


    Your insults directed at developers, and other members on Xda violate Forum Rules and are no longer welcome in the forums.


    Please make sure you fully understand the following:

    1) if you have a proven method to unlock the bootloader on VZW devices, open a thread, make yourself famous, and become the greatest Xda developer ever. If you can't or won't open your own thread and share your method, stop posting your self -righteous comments allover the forums.

    2) if you post any further insults directed at Xda members, your account will be restricted. Xda is about sharing and developing, not smoke & mirrors and insulting other members who have actually produced tons of legit development.

    No more warnings on this, check your PM.

    Thanks for your cooperation.
    8
    No, I've been rooting/modding phones since eclair and used to be an XDA News writer, I definitely understand the difference between sim and bootloader unlocking. Once the phone is sim unlocked, the "OEM UNLOCK" option should no longer be greyed out in the developer options. Once that setting becomes available after sim unlock, there shouldn't be anything in the way of unlocking the bootloader. The only thing that could be an issue is if the manufacturer then required a token to unlock the bootloader, but I'm gonna go with Google isn't requiring that. Now, this is all based on my own knowledge and experience, if anyone has more insight to either back me up or shoot me down, please, this is the whole reason we're here in these threads, to gain knowledge and information.
    If Verizon is so informal about sim unlocking their phones after 60 days, it really doesn't make sense for them to enforce bootloader locking at that point.
    I mean, what is the point once they cut you loose with your sim card? Check this out, I had this ****ty Nord 10 5G from Metro and a guy figured out which apps to remove via ADB to carrier unlock the phone, hence making the OEM UNLOCK choice available in developer settings. What I'm saying is sometimes things aren't as locked down as you think, I mean, Metro is pretty strict on carrier locking their phones and really don't like doing it after you've met all the requirements. So if it's as easy as getting rid of a few apps via sneaking through ADB, it's gotta be that way for all the phones it's not like they're running different software (other than version level) they're all Android. Maybe this information will inspire someone on here that knows way more than me to figure out how to unlock a Verizon locked bootloader. If I'm correct, they really don't have that power to lock the bootloader, only to take away our option to do so by "sim/carrier" locking the phone which the software is told to take away our ability to choose that option. Please, anyone, I honestly would like to know if I'm wrong, but don't just say I'm wrong, explain to me and the rest of us. Thanks guys and girls!!!
    I seriously doubt the "60 day sim unlock" allows the bootloader to be unlocked, otherwise we'd have a ton of VZW variant threads filled with development, and devices that are 61 days old, rooted, and running custom Roms.

    But we don't. We don't have even have any developers working on VZW devices, regardless of age. So deductively thinking, the "60 day sim unlock" doesn't sound like it's currently an option.

    Just my .02 (USD) worth 😁
    7
    Once the phone is sim unlocked, the "OEM UNLOCK" option should no longer be greyed out in the developer options.

    That has never happened on a VZ Pixel and it is not going to happen on this one. Why is this so hard for people to understand?
    7
    Why are we doing this dance yet again? It's pointless and counterproductive.
    Thank you.
    This same exact thread happened in the Pixel 5 forum.

    He won't provide proof.
    And he doesn't have to... It's that simple.
    Just ignore, please.
    6
    It's not necessarily true, according to Verizon, they Sim unlock their phones after 60 days. Once that is done, we should be able to to check oem unlocking option in developers options and unlock the bootloader. Am I missing something?
    Incorrect. SIM unlocking is not necessarily related to bootloader unlocking. While T-Mobile (and I think AT&T) users on here have found and reported that when they achieve SIM unlocking on their variants, that they can then bootloader unlock as well, Verizon has for a very, very long time enforced bootloader lock with all their will.

    The only exceptions that I've ever heard of were not by choice of Verizon, but by hacks/vulnerabilities. Such as the VS985 LG G3, there was an exploit that didn't actually bootloader unlock, but more made it so that the locked bootloader didn't really matter. On the Pixel 1, if you had the Verizon variant and were still on Android 7.10 or below, you could unlock the bootloader, but once the 7.11 OTA came out, if you hadn't already unlocked the bootloader (or at least toggled the toggle), then you were locked in until a foreign national found a hacking way to get in, but they charge for it. All this while Verizon phones have been ultimately SIM unlocked for similarly a very long time.