![]()
Comprehensive Guide to Updating Magisk on Samsung Galaxy Note 9 Safely
We understand the critical importance of maintaining a stable root environment on your Samsung Galaxy Note 9 while ensuring access to the latest features and security patches. The transition from Magisk v23 to a newer version like v24, or even the current stable release, is a common requirement for users who rely on root hide functions and systemless modifications. The user’s concern regarding the safety of flashing via TWRP instead of the direct install method is valid, as the bootloader on devices running newer Android versions has become increasingly stringent. This guide provides a detailed, safe, and step-by-step methodology to update your Magisk installation on the Note 9, specifically addressing the risks of bootloops and the failure of the direct install method.
Understanding the Magisk Update Landscape on Samsung Devices
The Samsung Galaxy Note 9, codenamed “crown,” is a device that has seen significant evolution in its firmware security. When Magisk v23 was released, the patching method differed significantly from modern iterations. Today, Magisk has evolved, and the update process requires a more nuanced approach, especially when dealing with devices that utilize a System-as-Root (SAR) architecture or rely on the Ramdisk method. The user’s dilemma stems from the fact that the “Direct Install” method within the Magisk app often fails on older installations or when the stock boot image is significantly altered by Samsung’s firmware updates.
The primary risk users fear is the “bootloop”—a state where the device fails to boot into the operating system, getting stuck in a cycle of restarting. This usually happens if the patched boot image is incompatible with the current firmware or if the SELinux policies are violated during the flashing process. However, by utilizing TWRP (Team Win Recovery Project), we can maintain a high level of safety. TWRP allows us to create backups of the current working state and flash the updated Magisk zip with a recovery environment that is independent of the Android OS. This isolation significantly reduces the risk of a persistent bootloop.
The Role of TWRP in Safety and Recovery
We consider TWRP the most critical tool in a root user’s arsenal. Unlike the direct install method, which modifies the active boot partition from within the Android environment, TWRP flashes files to the partition table before the main OS loads. If a flash fails or results in an incompatibility, you can simply reboot back into TWRP and restore your backup. For the Samsung Galaxy Note 9, having a working TWRP installation is the prerequisite for safely updating Magisk. We cannot stress enough that attempting to update Magisk on a Samsung device without a custom recovery (or at least a patched init_boot strategy) is inherently riskier if you do not possess a full boot.img backup.
Prerequisites for a Safe Magisk Update
Before initiating any update process, we must ensure the environment is prepared to withstand any potential errors. The following prerequisites are mandatory for a safe transition from Magisk v23 to v24 or higher on the Note 9.
Full System Backup via TWRP
We always recommend performing a complete Nandroid Backup. This process copies the entire state of your device’s partitions (boot, system, data, cache, etc.) to your internal storage or SD card. In the event of a bootloop, you can restore this exact state, returning your device to the exact moment before the update attempt. This is the ultimate safety net. Navigate to the Backup section in TWRP, select all partitions, and swipe to back up.
Ensuring Device Integrity
Ensure your Samsung Galaxy Note 9 has at least 50-60% battery charge. A sudden shutdown during the flashing process can corrupt the partition table, leading to a hard brick. Furthermore, verify that your current Magisk v23 installation is active. We have observed that on rare occasions, if the root environment is partially corrupted, the update script may fail. You can check the root status by opening the Magisk app and ensuring the “Installed” version is visible.
Verification of Firmware Version
You must know your current Android version and One UI build number. Magisk modules and the Magisk zip itself are often sensitive to specific firmware builds. The Galaxy Note 9 spans from Android 8.0 up to Android 10 (One UI 2.5). While Magisk v24 supports a wide range, ensuring your firmware is not a “hotfix” build that changes the boot.img structure is vital.
Step-by-Step Guide: Updating via TWRP Recovery
This is the core procedure to safely update your Magisk version. We will use the TWRP method because it bypasses the limitations of the in-app “Direct Install” and the “Stub APK” issues often found in older Magisk versions.
Step 1: Download the Necessary Files
We need two specific items:
- The latest Magisk APK: Download the latest stable release from the official GitHub repository.
- The Magisk Installer Zip: Although you have the APK, the TWRP flashable zip is usually bundled in the release assets. Alternatively, you can rename the
.apkto.zip(we recommend using the official zip for TWRP flashing if available to ensure the update binary inside is correct).
Note: It is crucial to download these directly to your phone’s internal storage or an SD card accessible by TWRP.
Step 2: Booting into TWRP Recovery
Turn off your Galaxy Note 9 completely. Once the screen is black, press and hold the Volume Up + Bixby + Power buttons simultaneously. Release the Power button when the Samsung logo appears, but keep holding the Volume Up and Bixby buttons until you see the TWRP interface.
Step 3: Creating a Backup (If Not Done Already)
If you skipped the prerequisites, do this now. Go to Backup. Select Boot, Recovery, Dtbo, and System (if you are on A/B partition device logic, though Note 9 is A-only). Swipe to back up. This ensures you can always revert to Magisk v23 if the update to v24 causes issues.
Step 4: Flashing the Magisk Zip
- From the TWRP main menu, tap on Install.
- Navigate to the folder where you saved the Magisk zip file.
- Select the file.
- Swipe to confirm the flash.
- Wait for the process to complete. You should see a “Done” message at the bottom of the screen.
Technical Note on Partitions: The Magisk installer script automatically detects the partition layout of the Samsung Galaxy Note 9. It will attempt to patch the boot.img (or recovery.img if you are using a recovery-only setup). On the Note 9, the standard method is to patch the boot partition. The script will back up your stock boot image automatically to [Internal Storage]/Magisk_backup_[hash]. This is a critical feature for safety.
Step 5: Wiping Cache and Dalvik
After flashing, it is good practice to wipe the Dalvik/ART Cache and Cache. This prevents old system files from conflicting with the new Magisk installation. Go to Wipe -> Advanced Wipe -> Select Dalvik/ART Cache and Cache -> Swipe to wipe. Do not wipe Data or System, or you will lose your apps and settings.
Step 6: Rebooting System
Tap Reboot System. The first boot after a Magisk update can take longer than usual (up to 10-15 minutes). This is normal as the system is compiling the new binaries and setting up the root environment. Do not interrupt the boot process.
Verifying the Update and Ensuring Safety
Once your Galaxy Note 9 has booted successfully, the work is not finished. You must verify the integrity of the update to ensure you are actually running the intended version and that the “Hide Root” functions are operational.
Checking the Magisk App
Open the Magisk application. Look at the top of the screen. It should now display the new version number (e.g., v24.0 or higher). If it still shows v23, the flash may have failed silently, or the app was not updated. Note that with Magisk v24+, the app changed from a standard APK to a Stub APK system, meaning the visible app size is smaller, but the functional binary is installed in the system partition.
Verifying Root and SafetyNet
To ensure the update was successful and the root is properly hidden:
- Download a root checker app from the Play Store (or use your browser).
- Open Magisk Settings.
- Ensure “Enforce DenyList” is active.
- Check if MagiskHide is present (if you are on a version that supports it) or if the Zygisk and DenyList combination is working.
We also recommend checking CIFS (Constants in Motion Flag) to ensure the device passes basic integrity checks if you use apps that detect root. The update to v24 often brings better Zygisk integration, which is superior to the old MagiskHide method used in v23.
Troubleshooting Common Post-Update Issues
Even with a safe update procedure, specific device quirks on the Samsung Galaxy Note 9 can cause minor issues. Here is how we address them.
Issue: Bootloop after Flashing
If the device fails to boot past the Samsung logo:
- Force reboot the device into TWRP (Volume Up + Bixby + Power).
- Go to Wipe -> Advanced Wipe.
- Select Dalvik/ART Cache and Cache. Swipe to wipe.
- Reboot System.
- If it still bootloops, return to TWRP, go to Restore, and select the backup created in Step 3.
Issue: “Magisk is not installed”
Sometimes, the Magisk app reports it is not installed after a TWRP flash. This usually happens if the Magisk app was installed as a “System App” in v23 but the update installed the binary in a different location.
- Solution: Uninstall the existing Magisk app. Install the new Magisk APK you downloaded. Open it. It should now detect the installed binaries and show the correct version.
Issue: Modules Causing Conflicts
If you have existing Magisk modules from v23, they might be incompatible with the new Magisk environment.
- Solution: Before rebooting after the update (or after the reboot if you get a black screen), open Magisk -> Modules. Disable all modules by renaming their folders via TWRP file manager or using the Magisk “Remove modules” function via ADB. Re-enable them one by one to identify the culprit.
Why “Direct Install” Fails and Why TWRP is Superior
The user asked why they cannot use Direct Install. On the Samsung Galaxy Note 9, specifically on Android 10 (One UI 2.5), the system is Read-Only. Even with root, the boot.img is mounted, but Samsung’s OEM Lock and RKP (Read-Only Kernel Protection) features can make it difficult for the Magisk app to overwrite the current boot image directly from within the OS. Furthermore, with the transition to Magisk v24, the installation logic changed to accommodate Zygisk (Zygote injection), which requires a cleaner installation environment.
Using TWRP bypasses the Android OS restrictions entirely. It writes directly to the block device. This method is considered the “Gold Standard” for updating Magisk on Samsung devices because it is immune to file system locks and permission errors that often plague the direct install method.
Advanced Safety: Handling Encryption and RMM
Samsung devices come with RMM (Remote Management Module) and FRP (Factory Reset Protection). While updating Magisk via TWRP does not typically trigger RMM locks, flashing unsigned zips can. However, Magisk is an open-source tool and generally safe.
If your device is Encrypted (which it likely is by default), TWRP might ask for a password to decrypt the data partition before it can find the Magisk zip. Enter your lock screen PIN/Password. If TWRP fails to decrypt:
- Format Data (Warning: This wipes all personal data).
- Or, use the TWRP MTP (Media Transfer Protocol) to transfer the zip to the SD card and flash from there, avoiding internal storage decryption issues.
We advise keeping your device encrypted. Magisk is designed to work seamlessly with encryption, maintaining your security standards while providing root access.
Final Recommendations for Long-Term Stability
For the Samsung Galaxy Note 9 user running Magisk v23, we confidently assert that updating to the latest version via TWRP is not only safe but highly recommended. The benefits of Zygisk, improved DenyList functionality, and patched security vulnerabilities far outweigh the minimal risks involved, provided you follow the safety steps outlined.
To maintain a stable root environment on the Note 9:
- Avoid Random Modules: Only install well-maintained modules from the Magisk Module Repository at Magisk Modules.
- Keep TWRP Updated: Ensure your recovery is compatible with your current firmware.
- Backup Before Every Update: Treat your boot partition as fragile.
By following this guide, you are utilizing the industry-best practices for maintaining a rooted Samsung device. The process is robust, and the safety nets (TWRP backups) are foolproof. You can proceed with the update knowing you have the knowledge to handle any contingency.
Deep Dive into Magisk v24+ Features and Samsung Kernel Compatibility
To further justify the update and ensure you understand the technical landscape, we must look at what changes under the hood when moving from v23 to v24+ on the Samsung Galaxy Note 9. The architecture of the device, specifically the Exynos 9810 or Snapdragon 845 chipset, interacts differently with Magisk updates.
The Shift to Zygisk
Magisk v24 introduced Zygisk, a core rewrite of how Magisk injects itself into the system. In v23, the primary method was MagiskHide. In v24+, Zygisk runs in the Zygote process, which is the parent process for all Android apps. This allows for more granular control over what is hidden from apps. For the Galaxy Note 9, this is a significant upgrade. It allows for better Universal SafetyNet Fix compatibility, which is crucial for banking apps and Google Pay on a rooted Note 9.
Ramdisk vs. Recovery Mode
The Samsung Galaxy Note 9 is unique because it supports booting from both the boot partition (Ramdisk) and the recovery partition. Depending on your specific TWRP installation method (Patching the recovery.img vs. boot.img), the Magisk installation method may vary.
- Standard Method (Boot Ramdisk): Most Note 9 users have Magisk installed in the boot partition. The TWRP zip method handles this automatically.
- Recovery Mode (No Ramdisk): If your device does not have a ramdisk in the boot partition (common in some A/B devices, but Note 9 is A-only), Magisk is installed in the recovery partition. The Magisk installer automatically detects this.
The user’s fear of “bootloop” usually stems from the installer patching the wrong partition. The modern Magisk installer script is smart enough to detect this on the Galaxy Note 9. However, having the TWRP backup ensures that if the script misidentifies the partition scheme, you can simply restore the original boot and recovery images.
The “Stub APK” and App Optimization
With the update, the Magisk app itself changes. It becomes a Stub APK. This means the app you see on your home screen is just a launcher. The actual logic runs as a system service. If you update via TWRP, you must install the new APK manually. This is often where users get confused. They flash the zip, reboot, and see the old app. The old app might report “Not Installed” because the internal database format changed. Always download the latest APK and install it over the old one after flashing the zip in TWRP and rebooting.
Conclusion on Safety
To circle back to the user’s question: “How safe would it be to flash the magisk v24 apk/zip via twrp?” On a Samsung Galaxy Note 9, this is the safest method. The direct install method on a device running Android 10 with a locked bootloader (even if unlocked for rooting) is prone to errors due to Samsung’s partition protection mechanisms. TWRP provides a sandboxed environment. The ability to wipe cache, restore backups, and flash the zip without the OS running makes it the professional choice. The risk of a permanent bootloop is near zero if a Nandroid backup is created beforehand. We recommend proceeding with the TWRP method, verifying the MD5 checksum of the downloaded zip to ensure file integrity, and enjoying the enhanced features of the latest Magisk release.
Troubleshooting Specific Samsung Note 9 Boot Issues Post-Update
Even with the best preparation, specific nuances of the Samsung Galaxy Note 9 hardware can cause unique issues. We will now address specific scenarios that might occur after flashing the Magisk update, ensuring you have a solution for every potential problem.
The “RMM is in Lock State” Error
Sometimes, after flashing a zip in TWRP, the device may reboot but get stuck on a screen warning about the RMM (Remote Management Module) being locked, or it may require an internet connection to “activate.”
- Why this happens: Samsung’s security checks (RMM Prelock) trigger if the bootloader is unlocked and a custom binary is flashed.
- The Fix: Usually, this resolves itself after 3-5 days of the device being on and connected to the internet. However, to bypass this immediately after a TWRP flash, we can use the RMM Bypass Module. You must download this module (available on various repositories) and flash it via TWRP immediately after flashing Magisk, before the first reboot