This post is a Step-by-Step Guide for attaining S-Off, Unlocking Bootloader, and Installing TWRP Custom Recovery on a Verizon HTC One M8. Doing this constitutes permanently Rooting your Verizon HTC M8. I in no way take any credit for process. All the credit and thanks go to jcase, beanups, firewater, and Team Win Recovery Project. I wrote this Guide to consolidate the information, and to make it easier for a Novice user, using a MacBook.
On the Verizon HTC M8
1. Make sure any pattern lock, password lock or facial lock are turned off. (slide up to unlock is okay)
2. Disable “Fast Boot”
a. Setting>Power>Uncheck Fast Boot
3. Enable “USB Debugging”
a. Settings>About>Software Information>More>Tap 6-8 times on Build Number to enable Developer Options
b. Settings>Developer Options>Check USB Debugging
4. Download jcase’s “Weaksauce” Temporary Root Exploit at [Root] WeakSauce APK - 1.0.1 - xda-developers. The downloadable file is located at the bottom of https://developer.android.com/sdk/index.html?hl=skInstall “Weaksauce” app which can be found in the Downloads Folder
5. Download and install “SuperSU” or “SuperUser”
6. Reboot Device and wait until it says that “Root is activated”
On the Mac
1. Download and install HTC Sync Manager
a. HTC Sync Manager
b. Close the HTC Sync Manager after the program is installed
2. Download and install the Android SDK
a. https://developer.android.com/sdk/index.html?hl=sk
b. Select “Downloads for Other Platforms” at the bottom of the page
c. Under ADT Bundle, Select “Mac OS X 64 bit” to download
d. In the downloads folder, select the “adt-bundle-mac-x86_64-20140321” folder
e. Go to SDK>Platform Tools>adb
f. Right click adb and select Get Info>Where and copy where the adb file is located
g. Open a Terminal Window and type “cd [paste where the file is located]”, Enter
h. Connect the phone to the Mac using a USB cable
i. Then type “./adb devices” and the Mac should detect the phone
3. Download Firewater
a. firewater s-off
4. Copy “Firewater” from the Downloads folder to the adt-bundle-mac-x86_64-20140321>SDK>Platform Tools folder
5. Open Terminal Window
6. Copy and enter the following commands to the terminal window
a. ./adb reboot (this command is very important)
b. ./adb wait-for-device push firewater /data/local/tmp
c. ./adb shell
d. su
e. chmod 755 /data/local/tmp/firewater
f. /data/local/tmp/firewater (6 beers will be chugged)
7. Type “Yes” to agree to the Terms and Conditions
8. Confirm S-Off and Unlock Bootloader was achieved
a. Go to adt-bundle-mac-x86_64-20140321>SDK>Platform Tools>adb>right click Get Info>copy Where file is located
b. Open Terminal
c. Type “cd [paste Where file is located], enter
d. Type “./adb reboot-bootloader”, enter – the screen on the phone should show that the bootloader is unlocked and that we have S-Off.
TO FLASH TEAM WIN RECOVERY PROJECT (TWRP v2.7.0.2) – Fast Boot Method
1. Download TWRP Recovery .img file
a. TeamWin Projects - TWRP 2.7 - HTC One m8 2014 Verizon | TeamWin
2. Copy the .img file from Downloads to “adt-bundle-mac-x86_64-20140321>SDK>Platform Tools”
3. Turn off phone
4. Reboot phone while holding the [Power] and [Volumn Down] simultaneously
5. Select “fast boot”
6. Connect phone to Mac using a USB cable (Screen should say FASTBOOT USB)
7. Go to “adt-bundle-mac-x86_64-20140321>SDK>Platform Tools>fastboot>right click Get Info>copy Where file is located”
8. Open Terminal
9. Type “cd [paste Where file is located], enter
10. Type “./fastboot devices”, enter (the phone should be detected and identified)
11. Type “./fastboot flash recovery recoveryfilename.img”, enter (the recovery should install on the phone.
12. Select hoot
13. Select Boot into Recovery – Should see TWRP Recovery on screen.
Now you are ready to flash ROMs. Please post any comments. Good Luck!
On the Verizon HTC M8
1. Make sure any pattern lock, password lock or facial lock are turned off. (slide up to unlock is okay)
2. Disable “Fast Boot”
a. Setting>Power>Uncheck Fast Boot
3. Enable “USB Debugging”
a. Settings>About>Software Information>More>Tap 6-8 times on Build Number to enable Developer Options
b. Settings>Developer Options>Check USB Debugging
4. Download jcase’s “Weaksauce” Temporary Root Exploit at [Root] WeakSauce APK - 1.0.1 - xda-developers. The downloadable file is located at the bottom of https://developer.android.com/sdk/index.html?hl=skInstall “Weaksauce” app which can be found in the Downloads Folder
5. Download and install “SuperSU” or “SuperUser”
6. Reboot Device and wait until it says that “Root is activated”
On the Mac
1. Download and install HTC Sync Manager
a. HTC Sync Manager
b. Close the HTC Sync Manager after the program is installed
2. Download and install the Android SDK
a. https://developer.android.com/sdk/index.html?hl=sk
b. Select “Downloads for Other Platforms” at the bottom of the page
c. Under ADT Bundle, Select “Mac OS X 64 bit” to download
d. In the downloads folder, select the “adt-bundle-mac-x86_64-20140321” folder
e. Go to SDK>Platform Tools>adb
f. Right click adb and select Get Info>Where and copy where the adb file is located
g. Open a Terminal Window and type “cd [paste where the file is located]”, Enter
h. Connect the phone to the Mac using a USB cable
i. Then type “./adb devices” and the Mac should detect the phone
3. Download Firewater
a. firewater s-off
4. Copy “Firewater” from the Downloads folder to the adt-bundle-mac-x86_64-20140321>SDK>Platform Tools folder
5. Open Terminal Window
6. Copy and enter the following commands to the terminal window
a. ./adb reboot (this command is very important)
b. ./adb wait-for-device push firewater /data/local/tmp
c. ./adb shell
d. su
e. chmod 755 /data/local/tmp/firewater
f. /data/local/tmp/firewater (6 beers will be chugged)
7. Type “Yes” to agree to the Terms and Conditions
8. Confirm S-Off and Unlock Bootloader was achieved
a. Go to adt-bundle-mac-x86_64-20140321>SDK>Platform Tools>adb>right click Get Info>copy Where file is located
b. Open Terminal
c. Type “cd [paste Where file is located], enter
d. Type “./adb reboot-bootloader”, enter – the screen on the phone should show that the bootloader is unlocked and that we have S-Off.
TO FLASH TEAM WIN RECOVERY PROJECT (TWRP v2.7.0.2) – Fast Boot Method
1. Download TWRP Recovery .img file
a. TeamWin Projects - TWRP 2.7 - HTC One m8 2014 Verizon | TeamWin
2. Copy the .img file from Downloads to “adt-bundle-mac-x86_64-20140321>SDK>Platform Tools”
3. Turn off phone
4. Reboot phone while holding the [Power] and [Volumn Down] simultaneously
5. Select “fast boot”
6. Connect phone to Mac using a USB cable (Screen should say FASTBOOT USB)
7. Go to “adt-bundle-mac-x86_64-20140321>SDK>Platform Tools>fastboot>right click Get Info>copy Where file is located”
8. Open Terminal
9. Type “cd [paste Where file is located], enter
10. Type “./fastboot devices”, enter (the phone should be detected and identified)
11. Type “./fastboot flash recovery recoveryfilename.img”, enter (the recovery should install on the phone.
12. Select hoot
13. Select Boot into Recovery – Should see TWRP Recovery on screen.
Now you are ready to flash ROMs. Please post any comments. Good Luck!
Last edited: