Published on June 18th, 2013 | by Tim Schofield


How to Gain S-OFF on the HTC One with Revone

This video will show you the necessary steps to obtain S-OFF on the HTC One with Revone. This Revone exploit is said to have worked on the latest WWE & EU RUU, T-Mobile, AT&T, and Sprint HTC One’s. With S-OFF you will be able to flash radios, lock your bootloader, and many other modifications. S-OFF will allow for SuperCID, which will allow for the user to flash any RUU on their device. I will make a video in the future explaining this.




Revone Download:

Big thanks to the Revolutionary dev team. The original thread can be found here.

Written instructions:

  • Download the Revone file above and transfer it to your phone (or download on your phone)
  • Use a root file explorer and paste the file inside the /data/local/tmp folder
  • Open a terminal emulator and type of the following:

su (enter)
cd /data/local/tmp (enter)
chmod 755 revone (enter) (IF revone doesn’t work, type revone.bin)
./revone -P (enter)

  • Reboot
  • Open terminal again and type:

su (enter)
cd /data/local/tmp (enter)
./revone -s 0 -u (That would be a ZERO) (enter)

  • Reboot
  • That’s it! To get rid of the tampered, or relock, follow instructions below

To remove “tampered”

open terminal

cd /data/local/tmp
./revone.bin -t

These are other commands that you can fill in above to 

-u – Unlock the device
-l – Lock the device (as if it was never unlocked)
-r – Relock the device (mark the device as relocked)
-t – Reset the device’s tamper flag.


Tags: , , , , , , , , , ,

About the Author

Tim Schofield

Tim Schofield is the owner of and the YouTube channel QbKing77. He has a love for all things tech and Android!

Loading Facebook Comments ...

50 Responses to How to Gain S-OFF on the HTC One with Revone

  1. joshua nickens says:

    Will locking the device or bootloader or any of these things help with play movies and other apps that require an unrooted phone to work?

  2. Rob says:

    Thanks for the great videos Tim! I have used them to unlock the bootloader and root my HTC One dev edition and will use your s-off method as soon as there is a flashable T-mobile radio for my phone. I’ve had the HTC One for 3 weeks and with no available LTE in my area and no 3G freqs on the HTC I have been suffering with EDGE 2G. Love the videos they are informative and simple to follow! Keep up the great work!

  3. Michael Millington says:

    FYI to regain S-ON

    1) ./revone -l
    2) Re-boot to bootloader > fastboot
    4) Connect HTC ONE to PC
    3) (on PC) open command prompt in OneDrivers_Fastboot/Fastboot folder
    4) Type “fastboot oem writesecureflag 3” & hit enter

    This method worked for me. I have a faulty battery and needed to return my handset to get a new one. Coupling this with the “How to Unroot the HTC One,” I was able to return my phone to factory settings so as not to “void” the warranty and swap out my faulty handset for a new one.

    Thanks Tim, you’ve made my life easier!

    • Amil says:

      Hi, I just recently got an HTC One a week ago. I want to know something just for future reasons as my HTC One (ATT) is currently rooted. This comment you posted… does it mean that your HTC One is back to “LOCKED” and “S-ON”? Also, you have gotten the “TAMPERED” to go away right?

      • Michael Millington says:

        That is correct. I had to remove the tampered flag first though, then I was able to lock the bootloader with Revone and enter the fastboot command to gain back s-on.

        • Amil says:

          Ok, unfortunately, I see 3 stuck pixels on my unit; I just noticed it today when working with max brightness on a black background (when viewing wallpapers). My understanding is that when you “LOCKED” the device with revone, you are still rooted right? In other words, revone just changes the flag/mark I am assuming. I am saying this because if it was actually “LOCKED” at that point, then you wouldn’t be able to go back to the rom you are in and turn s-off to s-on again.

          • Michael Millington says:

            That’s right. The phone is now Locked, but still rooted. I wanted to unroot it, just in case there might have been an issue with my carrier not replacing the unit. It is up to you what you want to do. I unrooted my device first and found that even after rooting it said “S-ON” and that freaked me out a little because I needed to get a new unit and I didn’t want anything to get in the way of that so I spent a day re-rooting and figuring out how to gain S-ON before I Unrooted. There is a great video on how to unroot the One right HERE on this site . Make sure you use the right variant for your carrier! Tim has doen a great job of making it easy for guys like us!

          • Amil says:

            So I followed this video (including the removing the tampering). The, I did the following:

            1) used to command to lock the device to how it came out of the box (./revone -l)
            2) rebooted into the bootloader, went on fastboot, and turned s-boot off
            3) Then I rebooted, it said LOCKED (that’s good), but I couldn’t proceed to my Android revolution (cause it was locked?)

            Then, I was stuck in an infinite bootloader loop.

            I unlocked the device again, and I’m safe now. But I am back to where I was in the beginning (tampered, and unlocked)

            I really want to have my device so it says LOCKED and have no TAMPERED flag, and be on official stock factory OS, basically 100% factory default.

            Where did I make the mistake? Sorry, I’m new to rooting and all.

          • Amil says:

            Nevermind, I got everything working now. Back to 100% stock.

          • Michael Millington says:


          • sagarsamtani says:

            Guys thanks for help.. Just a question…
            After locking the bootloader to origional factory state as it was never unlocked , can i run AT&t RUU to get back to out of the box stock locked , unrooted 4.1.2 ?

          • wymers24 says:

            Yes. The RUU is basically HTC’s failsafe to unbrick it’s phones. The only way to brick your phone is with s-off.

          • Veillantif says:

            But how? You just kept trying?

  4. Okuley Glover says:

    hi qb. using the HTC one. and my network is 3 in the UK. I have the tampered and relocked on my bootloader screen. want to update to android 4.2. how do I go about.

  5. dhsteiner says:

    I do not see a data/local/tmp directory on my phone via file explorer. Do I need to create this specific path in order for this to work?

  6. anon says:

    error = -6
    what to do
    on -P command

    • Connel Hooley says:

      I just fixed it,

      run after you run the chmod command

      chown root:root revone

    • Hai says:

      so doing a search on Google “rootzwiki xboarder56” should give you a link to the [S-off/downgrade]

      on xda, download the One all in one kit for HTC One.

      relock the bootloader, run the RUU from factory can be found in the unbrick video here

      Then run the RUU to downgrade

      Then start over again, with unlocking the bootloader, flash recovery, SU, revone (which should work now)

      Hope it works!

    • Jemmas Dad says:

      Anyone know if this is fixed yet?

  7. Ryan Moraes says:

    Hi there, I am using Easy File Explorer to move the revone file, however there is no /Data/local/temp file on my phone. I get to sdcard/data but I either see com.keramidas.tita and flixter or device/data/ its empty. Do I have to create the local/temp folder and then paste it in? What the dilly….yo?

  8. Greg Stark says:

    i got an error code =2
    help plz

  9. Connel Hooley says:

    I am also getting the -6 error. Is there anyway to fix this? thanks

  10. dahhyk says:

    how do i gain s-on again?

  11. AJ says:

    I’m getting the following error:

    /data/local/tmp # ./revone -P
    revone v0.2.1

    revone failed (error code = 1)

  12. Anirkhe says:

    I am also getting the -6 error. Is there anyway to fix this?

  13. Kao Vang says:

    error = -6, please help.

  14. You are an ass hat says:

    Way to literally take my post from xda word for word and make it your own.

  15. tech_difficulties429 says:

    error code = -1 🙁

  16. Felix Cedeño Febus says:

    How to gain s on to HTC one sprint

  17. Felix Cedeño Febus says:

    How to gain s—off to s—on sprint HTC one

  18. Veillantif says:

    Revone can’t get rid of the **TAMPERED** flag on bootloader. Every time I try the -t command, the response is “Revone failed. Error code=-2”

    All the other commands work: -P, -l, -u.

  19. Sam says:

    error= 2 on -P command, what do I do? Please and thank you.

  20. Joseph Chagan says:

    When I run the ./revone -P command my device freezes for a second and the screen just goes black. I’ve tried it a few times and it just stays that way. I have to eventually hold the power button down till it reboots. Seems like no harm done but it’s not working either.

  21. Sravanth Polanki says:

    hey, i am getting [email protected] instead of @android…..its ok or its not ok
    please help

  22. Valupaq says:

    Hey Tim, love your stuff. I recently tried to install the maximus hd rom and hadn’t realized it was for a different variation of my HTC one m7. I soft bricked it stuck in Stock bootloader screen and had to run the stock ruu to get it back. My bootloader now says I am “relocked” not locked, and still s-off. Twrp isn’t there anymore, and neither is root privilege. How can I get this back to normal or what is the next step to achieve my final goal of the wifi tether that will hopefully work.

  23. rar1994 says:

    i can’t find the /local/tmp folder in /data to paste the revone file

  24. baushaus says:

    error code = -1 please help

  25. sokka says:

    How do I get S-on again?
    I got rid of the tamperd flag
    device is locked
    but still S-off

  26. Andrian says:

    Gaining root access (thanks to Dan’s motochopper)…[-] Failed to open framebuff
    er device.
    [-] Failed to open framebuffer device.

Leave a Reply

Your email address will not be published. Required fields are marked *

Back to Top ↑