Coupon code: MAY25
Use it before checkout
Until May 24, 2026
Disconnect your phone and power it on. You may see a "Red State" or "Orange State" warning during the splash screen; this is a normal indication that the bootloader is unlocked.
If you share these details, I can find the exact hex addresses or scatter files you need.
If SP Flash Tool returns a "BROM Error," it usually means the drivers are not communicating or the Auth Bypass failed. Always ensure you are using the correct scatter file for your specific chipset; using the wrong file can lead to a hard brick. sp flash tool unlock bootloader
Navigate to the "Format" tab and select "Manual Format Flash." You will need to input specific hex addresses for the unlock partition. These addresses vary by device. You can find them by opening your scatter file in a text editor and searching for the "partition_name: seccfg" or "unlock" section. Copy the linear_start_addr and the partition_size into the corresponding fields in SP Flash Tool. Step 4: Execute the Unlock
Power off your device completely. Run the Auth Bypass Tool on your PC. Click on the "Bypass" or "Disable Auth" button. Connect your phone to the PC while holding the Volume Up and Volume Down buttons simultaneously (the specific key combo may vary by model). Disconnect your phone and power it on
Open flash_tool.exe from your extracted folder. In the "Download" tab, click on "Choose" next to the Scatter-loading File and select the scatter text file from your device's firmware folder.
First, download the latest version of SP Flash Tool and extract the contents to a folder on your desktop. You will also need the "Auth Bypass Tool." Modern MediaTek chips use a secure boot architecture that blocks SP Flash Tool from communicating with the device without an authorized account. An Auth Bypass tool mimics this authorization locally. If SP Flash Tool returns a "BROM Error,"
Install the MTK drivers. If you are on Windows 10 or 11, you may need to disable "Driver Signature Enforcement" in the recovery settings to ensure the VCOM drivers install correctly. Step 2: Bypass MediaTek Secure Boot