[Verizon HTC One (M7)] npjohnson:
Hey all,

For starters, disclaimer:

I am not responsible for thermonuclear war, bricks, and or your parents grounding you for said brick.

This method is VERY finicky, and very hard to reproduce. I cannot promise anything. It worked for me.

You need to download the following apks:

- KingRoot (Newest available on kingroot.net)

- KingUser (Newest available on kingroot.net)

- SunShine (3.0+, available @ theroot.ninja)

Once you have downloaded all of these apk files, follow the below steps:

1. Go to Settings ==> Security ==> Check "Allow Installation of Apps from Unknown Sources" and agree to the prompt.

2. Go to Settings ==> About ==> Software Info ==> Tap "Build Number" 12 Times.

3. Go to Settings ==> Developer Options ==> Check "USB Debugging"

4. Now install all the APK files by clicking on them.

5. Ensure you are connected to a reliable WiFI network.

6. Ensure you have Location Services/GPS and High Accuracy turned on in Settings.

7. Open KingRoot and select "Try to Root" when prompted.

8. Now, wait for it to complete. We don't expect KingRoot to succeed! We only expect it to display a prompt and then fail! If it reboots, you need to reopen KingRoot and try again.

Keep closing (through your Recent Apps Menu) and re-opening/re-running KingRoot until you get a prompt that says "Google cannot verify this app, would you like to Install KingUser?" click "Install" any similar message will work, i.e. "Google recommends you not install this app, would you like to install KingUser?" but a similar message must display, if it doesn't display, re-run KingRoot.

9. After the message goes away, and KingRoot fails, close the app, and open KingUser.

10 Verify that KingUser says you are rooted.

At this point, you are temp-rooted. You cannot write to the /System partition. You can only use apps that don't require /System access (very few).I recommend you cough up the $25 for SunShine. Only follow the instructions from here if you have $25 and want to unlock your boot loader, go S-OFF, and get Permanent Root & R/W /System Access.

11. Now, open SunShine and follow the on screen prompts, grant it SU access when prompted. It will reboot (Do not re-open SunShine as instructed after reboot!!!).

12. Repeat the steps 7-9 outlined above to re-gain temp-root.

13. NOW re-Open Sunshine and follow the on-screeen prompts.

Congrats! You are S-OFF, Unlocked, and your warranty bit returns an "OFFICIAL" status in bootloader mode. Now to install TWRP.

14. Download TWRP from here: http://android.cmphys.com/twrp-m7vzw/ ON YOUR PC/MAC/LINUX BOX

Make sure to use this and not the stock TWRP build! The stock TWRP build doesn't have full Lollipop encryption support (as of 5/29/15).

15. Reboot to bootloader with the volume buttons, or use ADB to reboot to bootloader.

16. Plug your phone into your PC and verify you see it when you run "fastboot devices" from CMD/Terminal.

17. Run "fastboot flash recovery /pathtotwrpimghere/nameoftwrpimg.img".

18. Run the volume buttons to select "Recovery".

19. Download the flashable SuperSU .zip for 2.46 and transfer it to your phone while in TWRP.

20. Install the SuperSU .zip from TWRP and reboot.

21. Uninstall KingUser.

You are rooted and S-OFF. Enjoy your ROMs/Kernels freely.

This method is highly finicky. It worked for me, and it can for you! it took me about an hour to get KingRoot to display the message asking to install KingUser. Just keep trying!

Good Luck!!!