Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=frp

Android Factory Reset Protection

Restriction

These instructions only apply to Android Enterprise fully managed devices.

Factory Reset Protection (FRP) is an Android security feature that prevents unauthorized access after a factory reset. To unlock a device after resetting it to its factory settings, you must enter the credentials of the Google account associated with the device before the reset.

Configure FRP

For Android Enterprise fully managed devices, you must configure one or more Google accounts that can unlock a device protected by FRP. See Configure Android Factory Reset Protection.

After configuring FRP globally, you can disable it for individual devices with the Set Factory Reset Protection device action. See Turn Android Factory Reset Protection on or off.

Turn on FRP

When FRP is configured for a device, the following reset methods turn it on:

  • The Wipe device action in Sophos Mobile Admin, if you select Turn on Factory Reset Protection in the wipe confirmation dialog.
  • Automatic reset when the user enters the wrong device password too many times.
  • Reset via Android Recovery Mode, which you enter by pressing the power and volume buttons in a device-specific sequence.
  • Reset via Android Debug Bridge (ADB).
  • Any other method that doesn’t require the user to enter their credentials before resetting the device.

FRP isn’t turned on when the user resets the device with Erase all data (factory reset) in the Settings app.