dd if=/dev/block/by-name/nvdata of=/sdcard/nvdata.img dd if=/dev/block/by-name/persist of=/sdcard/persist.img dd if=/dev/block/by-name/boot of=/sdcard/boot.img
Move these to cloud or external storage. If an unlock corrupts your IMEI or Wi-Fi MAC, you can restore.
pkg update && pkg upgrade -y
pkg install wget unzip tar nano
If your device is already rooted (Magisk), you can use:
su -c "fastboot oem unlock"
or for Pixels:
su -c "fastboot flashing unlock"
But caution: Running fastboot from inside Android, even with root, is risky because the bootloader is not in fastboot mode. The safer way? Use Termux to reboot to bootloader, then run commands.
Once fastboot recognizes the device:
fastboot flashing unlock
(For older devices: fastboot oem unlock)
Use volume keys on your phone to confirm. Your device will wipe data and reboot. unlock bootloader using termux better
We’ll use a Google Pixel as an example (the process is similar for most AOSP-based devices).
fastboot devices
Should return serial number + fastboot.
Connect your phone to itself? No—Termux communicates internally using the Android Debug Bridge over TCP/IP (local). Run: dd if=/dev/block/by-name/nvdata of=/sdcard/nvdata
adb devices
You should see your device listed. If not, run:
adb kill-server
adb start-server
adb devices
A prompt will appear on your phone to allow USB debugging (even though it’s localhost). Accept it.
Many users search for a command like:
termux-setup-storage -> su -> oem unlock Move these to cloud or external storage
This does not work for two reasons: