Install TWRP on Samsung Note 10.1
Note 10.1 (2014) has its bootloader unlocked by default, just like most if not all devices annouced pre-Lollipop.

Under Windows, the actual installation is as simple as described in the TWRP device page:


  You will need to download and install Odin on your PC. Once you have Odin installed, download the proper .tar file for your device from the download link above. Power off your device. Turn on your device using the proper key combo to get into download mode and attach the device to your computer via a USB cable. Use the PDA tab or button to browse to and select the tar file that you downloaded and flash the device.


Under Linux, Heimdall is required instead, and steps are somewhat different: download the .img file, get into download mode, (optionally) verify connection with heimdall detect, then execute heimdall flash --no-reboot --RECOVERY /path/to/recovery.img to flash it to the device.

Do note that there are multiple, very different variants of this device. The WiFi version (P600) and LTE version (P605) are based on different SoCs and therefore use different recoveries and ROMs, while the Verizon variant (P605V) has a locked (and non-unlockable) bootloader which means you can't flash anything on it.