LG G4 (LG-H811) root guide - ChimeraTool help

You are able to root your LG-H811 devices, just follow our insturctions step by step.

Disclaimer:
Bootloader unlocking and rooting has an unavoidable possibility of bricking your device. Following our guide and making a mistake, or having an unexpected future android firmware with different security standards can lead to such.
We can not give guarantees, so do it at your own risk. We won’t be held responsible if you end up with a damaged device after doing the following procedure.

Tested with: Android 6.0, TWRP 3.2.3-0 for G4, SuperSU v2.82

## Step 1: Unlock the bootloader. ##

Goal of this step:
To get your phone into a state, when the bootloader is unlocked. The bootloader can be either locked and unlocked.
Unlocking the bootloader disables the system's integrity checks, so the system can be modified, for example rooted, without bricking the phone.

Note: Unlocking the bootloader voids warranty

Requires:
- ADB
- fastboot

1.1.: Boot normally to android, go into setting. If developer mode is not enabled, go into "General -> About Phone -> Software info", and tap Build number 7 times.

1.2.: Enable OEM unlocking: Check "General -> Developer options -> Enable OEM unlock"

1.3.: Enable ADB: Check "General -> Developer options -> USB debugging". 

* If the option is grayed out, unplug the USB cable first.

1.4.: Open a terminal where you can run ADB commands.

* You need an adb.exe in your current directory or path for that. Try to run "adb devices" to make sure there  is one.

1.5.: Type "adb reboot bootloader" in the terminal and press enter. The phone should reboot into "fastboot mode".

  * If you have problems doing this, your ADB may not be able to see your phone

- Check if you accepted the ADB authentication message on the phone. "adb devices" command will show "unauthorized" state if you did not.
- Check if your phone's USB connection type is not "charge only". We recommend setting it to "MTP device"
 - Check if all drivers are properly installed

1.6.: Open a terminal where you can run fastboot commands

* You need a fastboot.exe in your current directory or path for that. Try to run "fastboot devices" to make sure there is one.

1.7.: run "fastboot getvar unlocked" command to see is your phone is unlocked. If you get "unlocked: yes" result, you can skip to step 2, your phone is already unlocked. If you see "unlocked: no", continue.

1.8.: run "fastboot oem unlock" to open the bootloader. Use "fastboot getvar unlocked" afterwards to be sure if it now says "unlocked: yes".

WARNING:
- Trying to root a phone or install TWRP while the bootloader is locked WILL result in a brick. Only continue if you are sure you checked that your bootloader is now unlocked.
- Do not ever "re-lock" your bootloader while your system is modified. Install stock firmware first.

Ways to check if the bootloader is unlocked:
- During normal bootup, when the LG logo is displayed, there is a text in the top left corner saying "Bootloader State: Bootloader unlocked!!"
- Boot into fastboot mode with "adb reboot bootloader" command, then in fastboot mode, use to "fastboot getvar unlocked" command the read the current bootloader state. If it says "unlocked: yes", you are unlocked.

## Step 2: Install TWRP ##

Goal of this step:
Install a tool called TeamWin Recovery Project aka TWRP that will help you install root.
TWRP will be installed to the recovery partition, meaning any time your phone is booted into recovery, or a factory reset is started, it will instead boot into TWRP.
From the TWRP menu you can still do a factory reset, backup data, flash partitions, and much more.

Note: if you fail to properly install TWRP, you may accidentally delete your userdata, because to start TWRP you have to do the same thing as when you were to do a factory reset. Backup your data!

Requires:
- Unlocked bootloader
- ADB
- fastboot
- latest G4 TWRP image file ( recommended source: https://twrp.me/lg/lgg4h811.html )
- Enable OEM unlock (see step 1.2)

Have your TWRP image downloaded, and placed in the same folder as fastboot. It can be named anything, but name it "twrp.img" so that you don't have to modify the commands in this tutorial.

Installation is different for different android version, be sure to pick the right one for you.:

# Installation for Lollipop (5.x) and Marshmallow (6.x) #

2.A.1.: Run the adb command "adb reboot bootloader" in the terminal. The phone should reboot into "fastboot mode".

* If you have problems doing this, your ADB may not be able to see your phone

- Check if you accepted the ADB authentication message on the phone. "adb devices" command will show "unauthorized" state if you did not.
 - Check if your phone's USB connection type is not "charge only". We recommend setting it to "MTP device"
- Check if all drivers are properly installed

2.A.2.: Run "fastboot boot twrp.img". This will reboot the phone into TWRP temporally, but not install it.

2.A.3.: When the TWRP is booted, and the USB connected, an MTP device named "LG-H811" or similar should appear on your PC. Copy the "twrp.img" onto it with a file explorer of your choice anywhere, just remember where.

2.A.4.: On the TWRP menu on the phone select "install", tap "install image", then navigate to "/sdcard", and from there wherever you copied the "twrp.img". Tap it.

2.A.5.: Under "Select Partition to Flash Image:", select the radio button labeled "Recovery". Make sure its selected properly, and only that, then swipe the "Swipe to confirm Flash" text.
This will install TWRP on recovery, but booting into normal android will remove it and put the stock recovery back, so we still need to make it stays there.

2.A.6.: In the TWRP, tap back until you get to the main menu. Select Reboot -> Recovery, or while still in TWRP, run the command "adb reboot recovery".

The phone should reboot right back into TWRP, meaning its now successfully and permanently installed. If it does not boot into TWRP this way, start over from step 2.A.1.

# Installation for Nougat (7.x) #

2.B.1.: Back up all your userdata. They may be lost!

2.B.2.: Run the adb command "adb reboot bootloader" in the terminal. The phone should reboot into "fastboot mode".

* If you have problems doing this, your ADB may not be able to see your phone

- Check if you accepted the ADB authentication message on the phone. "adb devices" command will show "unauthorized" state if you did not.
- Check if your phone's USB connection type is not "charge only". We recommend setting it to "MTP device"
- Check if all drivers are properly installed

2.B.3.: Run "fastboot flash recovery twrp.img". This will install TWRP to recovery, but if you boot into android before TWRP it will be overwritten!

2.B.4.: The only way to boot into TWRP from Nougat without booting up android is the key combination for factory reset. If TWRP is installed correctly it will start it instead of the actual factory reset after pressing "yes" two times.
Take out the battery and unplug the USB cable. Put back the battery. The phone sould still be powered down. Now press and hold volume down first, then power. Keep both pressed until you see the LG logo.
The moment you see the logo, release and press again the power button. Keep the volume down button pressed at all times. When the "Factory data reset" screen appears, you can release both. Now press "yes" two times.
After this, you should see TWRP, meaning its now successfully and permanently installed. If a factory data reset actually starts, it means your TWRP installation failed, and you need to start over from step 2.B.2.

## Step 3: installing root exploit and root manager ##

Goal of this step:
Installing a root exploit and optionally a root manager, so you can grant root access to apps and ADB shells on your phone.

Requires:
- Unlocked bootloader
- ADB
- latest stable SuperSU flashable/installable zip file (or root expliot of your choice known to be compatible with this model)

You can use TWRP to install any root you want. We recommend the latest SuperSU to be installed.

3.1.: Get the flashable zip onto the device's internal storage. There are many ways to do this, you can do it differently. Boot into TWRP.

3.2.: When the TWRP is booted, and the USB connected, an MTP device named "LG-H811" or similar should appear on your PC. Copy the flashable zip onto it with a file explorer of your choice anywhere, just remember where.

3.3.: On the TWRP menu on the phone select "install", then navigate to /sdcard, and from there wherever you copied the flashable zip. Tap it. Swipe the "Swipe to confirm Flash" text. The process may take some time, and should finish without any errors.

3.4.: Boot into normal android. From TWRP tap Reboot -> System, or run "adb reboot"

3.5.: In the android, a new app should appear. In our case "SuperSU". This is your root manager, you can use this application to set what gets root access. Start it. It should not display any errors.

3.6.: Connect the phone to USB, and run "adb shell". An interactive shell terminal should be opened to the phone. Type "id" then press enter. You should see something like this "uid=2000(shell) gid=2000(shell) groups=2000(shell) ..."

3.7.: Unlock and watch the screen of the phone. Still in the interactive shell on the PC, type "su", press enter.
Depending on your root manager's settings, on the phone a popup should appear, telling that "Shell" wants superuser access. Tap "Grant".

3.8.: Now on the PC, you should see a different shell prompt. Type "id" and press enter. This time you should see something like "uid=0(root) gid=0(root) groups=0(root) ..." confirming that you have root access.

Remember, that any time root is required for a Chimera procedure, you might need to watch the phone's screen and tap "Grant" if you have not done it before.