Xiaomi Trust Center

Xiaomi connects with hundreds of millions of people through mobile phones, IoT devices, apps, and Internet services every day. Leading security architecture and powerful IT solutions allow Xiaomi to protect your personal data and life.

Xiaomi Security Response Center

We provide you with continuous protection.

Xiaomi takes security and privacy vulnerabilities very seriously. Xiaomi Security Center drives Xiaomi's vulnerability disclosure program (VDP) which deals with the receipt, investigation, internal coordination, and disclosure of security vulnerability information related to the products or services of Xiaomi. We also have a dedicated team that provides regular security updates for our smartphones and IoT products and to make sure that the protection mechanisms for your devices are always up-to-date.

Security By Design

We put security as the primary goal of product design.

Xiaomi has established a comprehensive set of technical requirements and standardized management practices, covering mobile phones, pads, wearables, cars, IoT devices, and Internet services, to ensure that you can enjoy adequate and consistent security measures when using any product or service of Xiaomi.

Encrypt your data

We implement sufficient measures to protect your data both in transit and at rest. We use Transport Layer Security (TLS) and appropriate encryption algorithms to encrypt your data when it is being transmitted between your device and our servers. All your personal data is stored on our secure servers, and protected in controlled facilities.

Safeguard your device

We have the built-in malware scan and antivirus in the phones and pads which can detect security issues, neutralize Trojans, and optimize your system to avoid risks. You can also download the apps in GetApps (only avalible in some country or area) that have passed security and privacy tests conducted by our professional teams.

Protect your account

Your Mi Account is used to access the products and services provided by Xiaomi, such as Mi Cloud, Mi Store, Mi Home, etc. Xiaomi adopts standard practices in the industry to protect your account. To enhance the security of your Mi Account, you can choose to use two-factor authentication (2FA) to sign in, and we highly recommend that you do so.

IoT Security Baseline

We have developed a security baseline for consumer market IoT devices which applies to our IoT devices.

Our Industry Affiliates

We work with industry leaders and implement best practices.We align and collaborate with industry leaders in the fields of security, privacy, and compliance to ensure that Xiaomi can always keep up with industry best practices.

IoT Security Foundation

Xiaomi joins the IoT Security Foundation (IoTSF) as a corporate member with openness and pragmatism. We follow the security assessment framework of IoTSF, and build our internal security management system and process for IoT products, to ensure that our IoT products are sufficiently secured. Learn more...

HackerOne

Xiaomi cooperates with HackerOne, which provides the industry standard for hacker-powered security, to receive and respond to the discovered security vulnerabilities and threats information submitted by the overseas white hats. We have established Xiaomi Security Reward Program on Hackerone and provide dedicated rewards. The program covers all the products and services provided by Xiaomi, including smartphones, IoT devices, apps, and internet services. Learn more...