Custom HA Projects
Echo Hack · Before you start

The device & tools

Confirm you have the right Show, then gather the handful of things the procedure needs. Nothing here is exotic, but two of them (a micro-USB data cable and a Linux live USB) are easy to overlook.

Is it the right Echo?

Flip the Show over. The label on the bottom carries a model number. The one that was ordered reads C76N8S, the first character a C, which is the 2021 second-generation Echo Show 5, codename cronos. That is the model techo5's author uses daily and the one this whole site is written for.

Model on the labelWhat it istecho5
C76N8SEcho Show 5, 2nd gen, 2021 (cronos)Best supported. Use this site as written.
H23K37Echo Show 5, 1st gen, 2019 (checkers)Works, but needs the checkers exploit and ROM, tested on one unit.
C7H6N3Echo Show 8, 1st gen, 2019 (crown)Works, newest port.
anything elseShow 5 3rd gen (2023), Show 8 2nd gen or later, Show 10, Show 15No public unlock. Cannot be used.

In software: Settings, Device Options, About, and read the device name and the Fire OS version. The version matters for the next page.

What is inside

PartDetail
Screen5.5 inch, 960 × 480 IPS, capacitive touch
ProcessorMediaTek MT8163, four Cortex-A53 cores at up to 1.3 GHz
MemoryAbout 1 GB usable RAM, 8 GB eMMC storage
AudioOne speaker on a MAX98396 amplifier, two-microphone array captured at 16 kHz with hardware echo cancellation
Camera2 MP front camera with a mechanical privacy shutter
RadiosMediaTek MT7668 Wi-Fi (2.4 and 5 GHz) and Bluetooth
ButtonsVolume up, volume down, microphone mute. After the unlock these also select boot modes.
PortsBarrel power jack (its own 15 W adapter) and a micro-USB port on the back
SensorAmbient light sensor, used for auto-brightness
The mute button is also the power button on this hardware. Several steps say "hold Mute"; that is the button with the microphone-slash icon on top. Its mute is a hardware latch: when it is engaged the microphones are physically cut and the camera is disabled, and only pressing it again releases them. techo5 respects that.

Tools and supplies

ItemWhy
The Echo Show 5 and its own power adapterThe unlock and every flash must run on mains power, never on a USB supply.
A micro-USB data cableCharge-only cables are common and will look like "device not detected". Any cable that syncs a phone or a camera is fine.
A PC with a USB-A port booted from a Linux live USB (Ubuntu on an 8 GB thumb drive), or a Windows PCThe exploit re-enumerates USB midway. techo5's author says a Mac or a virtual machine tends to lose the device at that moment; a live Linux boot on any spare laptop is the reliable path. Windows works with the Kindle Fire USB driver installed.
Python 3, git, and Android platform tools (adb and fastboot)For the techo5 installer. On the Mac: xcode-select --install then brew install android-platform-tools. The installer itself can run from the Mac; only the unlock wants Linux.
Home Assistant with the ESPHome integrationAlready running at ha.daha.us; ESPHome is installed.
Wi-Fi password for the 2.4 or 5 GHz network the Show will live onEntered twice: once in Fire OS to update it, once in LineageOS so techo5 inherits the connection.

Nothing needs to be opened, soldered or shorted on this model. The 2021 exploit is triggered entirely from the buttons and the USB cable.

Downloads to have ready

FileWhereNotes
amonet-cronos zip (the newest attached)First post of the XDA unlock thread (needs a free XDA account to download attachments)techo5 requires v2.0.1 or newer. An older package can leave the bootloader locked while everything looks fine.
LineageOS 18.1 for cronos, v0.4 or neweramazon-oss/releases on GitHub, tag lineage-18.1-cronos-v0.4 or laterEarlier builds lose audio after a few days. No Google apps package is needed; techo5 replaces Android anyway.
techo5 repositorygit clone https://github.com/HuskerMinion/techo5The installer downloads the matching release (boot image plus root filesystem) by itself and checks its hash.