Kudos to Kia Motor, qpegop and lalala (timofei.agafonov on r/KaiOS Discord server) on the 4PDA forum, and gleb_prokop on r/KaiOS Discord server for their valuable findings, which immensely contributed to the documentation of this device.
Blackview Hong Kong released the Blackview N1000 in April 2024. It has a USB-C port for charging and data transfers, 1GB of RAM, 3300mAh battery and a strong servicable flashlight at the top, which many forum users found to be very useful.
This phone was certified MIL-STD-810H and was rated IP69 for water jet resistance.
*#*#0574#*#* (*#*#0lri#*#*): Open the MTKLogger app.*#2886# (*#auto#): Open KaiOS MMI Test, an internal tool for OEMs to test the hardware components of a KaiOS device.*#8378269# (*#testbox#): Open the legacy Testbox engineering menu to test hardware components; can also be manually opened using Luxferre's CrossTweak*#*#33284#*#* (*#*#debug#*#*): Toggle debugging mode, granting ADB and DevTools access to the phone (see ADB and WebIDE). A bug icon will appear in the status bar letting you know debugging mode is on. Debugging mode may also be activated under Settings, Device, Developer, Debugger, ADB and DevTools.Exit these modes by removing and re-inserting the battery, or following the instructions at the end of each mode.
Press and hold the Power/End call button and the * key while the phone is powered off. (TBD: how can one navigate in this menu?)
In this mode, you can run automatic test or manual test of all hardware components (1 and 2), test a single component (3), access previous test reports (4), debug a component (5), wipe all data and factory reset the device (6), view version information (7) or restart the phone back to normal mode (8).

To exit Factory mode, select the last option in the menu.
During the boot process, the phone's preloader (first-stage bootloader) may briefly show up on a Linux computer as /dev/ttyACM0 for a few seconds, as it waits for a connection handshake from a flashing tool like SP Flash Tool. Sending the ASCII bytes FASTBOOT at 115200 baud to the phone during that window makes the phone boot into a limited Fastboot mode.
On a computer with Python 3 installed, create a Python virtual environment, then install pyserial from PyPI. Download and run this script to send commands to /dev/ttyACM0:
# Create a new Python virtual environment in the current directory
python3 -m venv .venv
# Activate the new virtual environment (to exit later, just run `deactivate`)
source .venv/bin/activate
# Install pyserial from PyPI
pip3 install pyserial
# you might need extra privileges, run this command again with "sudo" prepended
python3 mtk-bootseq.py FASTBOOT /dev/ttyACM0
Switch off the phone, then connect it to the computer while it is powered off. The phone should boot into a blank screen.
Reading/dumping or writing/flashing partitions in this mode are not allowed.
One command, fastboot oem reboot-recovery, restarts the phone to a black screen with an exclamation mark, where pressing buttons doesn't do anything and there is no output to dmesg -w. After a minute or so, it restarts to normal mode.
Editor's note: As we've seen with other devices in this situation (such as the Nokia 2780 Flip), it might be necessary to press a combination of buttons together to actually open the Recovery menu.
Per lalala (timofei.agafonov on r/KaiOS Discord server), sending the
METAMETAbytes causes the phone to boot into a state where it gets stuck at the splash screen. ADB access is available at this point, albeit inunauthorizedstate and requires an ADB vendor key.
To exit Fastboot mode, type and run fastboot reboot.
Developer menu is hidden from Settings by default, as is common with many production KaiOS phones. However, unlike other devices, the secret code to toggle debugging mode *#*#33284#*#* does nothing on the N1000. Attempting to open the Developer menu with W2D will immediately close it.
ADB access is available in Factory mode and MAUI mode, albeit requires an authorised vendor key.
To access the Developer menu and allow ADB and DevTools access, you need to unlock the bootloader and patch the boot partition with the use of bkerler's mtkclient.