How does the SMS verification process work technically on Xiaomi phones?

Xiaomi phones use MIUI-specific SMS handling that requires proper permissions and settings to receive OTPs reliably. The verification process depends on SMS interception, permission grants, and sometimes disabling MIUI's SMS filtering features.

Overview of SMS Verification on Xiaomi

SMS verification is a widely adopted method for user authentication, where a one-time password (OTP) is sent via SMS to the user's phone number. Xiaomi phones, running the MIUI customized Android firmware, employ a slightly different handling mechanism for SMS messages compared to stock Android devices. This influences how OTPs are delivered, intercepted by apps, and displayed to users.

When a user requests an OTP on Xiaomi phones, the SMS message is routed through the MIUI SMS app and filtered using built-in spam detection and permissions. Apps that rely on reading incoming SMS for automatic OTP verification must navigate these layers carefully.

MIUI SMS Permission Model

MIUI enforces a strict permission model for SMS access to enhance user privacy and security. Unlike vanilla Android, where users are prompted once for SMS read and receive permissions, MIUI often requires manual configuration through the system settings.

• SMS Permission: Apps must be explicitly granted permission to receive and read SMS messages.
• Auto-Start Permission: MIUI restricts background app activity by default, so apps handling OTPs should be allowed to auto-start.
• Notification Access: To display OTPs or to detect them automatically, notification access may also be necessary.
• Battery Optimization: MIUI aggressively kills background processes unless excluded from battery saver settings.

Failure to configure these permissions often results in delayed or missed OTP messages, causing user frustration during verification flows.

OTP Reception and Auto-fill Technical Details

The technical process for OTP reception on Xiaomi phones involves several components:

• SMS Delivery: The OTP SMS is sent from the verification service to the cellular network and then to the Xiaomi device via the telephony stack.
• SMS Filtering: MIUI's built-in SMS filtering scans incoming messages for spam and may quarantine suspicious OTPs.
• Broadcast Reception: Apps that handle OTP must register as receivers for SMS_RECEIVED broadcasts and have proper permissions.
• Auto-fill Integration: Xiaomi supports Android's SMS Retriever API, allowing apps to automatically detect OTPs without needing SMS read permission, but MIUI permissions still apply.

To enable automatic OTP detection, developers can leverage the SMS Retriever API. This API does not require full SMS read permissions, reducing friction in Xiaomi's permission-heavy environment.

Common Issues and How to Fix Them

Xiaomi users and developers often face these challenges during SMS verification:

• Delayed SMS Delivery: Battery saver or network optimization might delay SMS app background processing.
• Blocked OTPs: Messages classified as spam are quarantined or deleted silently.
• Missed Broadcasts: Apps not allowed to auto-start or lacking SMS_RECEIVED permission miss OTP notifications.

To resolve these:

• Manually grant SMS and auto-start permissions to the verification app in Settings > Apps > Permissions.
• Disable battery optimization for the app via Settings > Battery > Battery optimization.
• Whitelist the OTP sender number in the MIUI SMS app to prevent filtering.
• Use the SMS Retriever API to avoid SMS read permission and improve auto-fill reliability.

Best Practices for Developers Targeting Xiaomi

When implementing SMS verification solutions that support Xiaomi phones, consider these best practices:

For developers and users alike, understanding MIUI's SMS handling nuances is essential to ensure smooth SMS verification on Xiaomi devices.