Android Factory Reset Protection

Factory Reset Protection (FRP) is an Android security feature that prevents unauthorized access after a factory reset.

Restriction These instructions only apply to Android Enterprise fully managed devices.

When a Google account is set up on a device, the account credentials are required to unlock the device after it was reset to its factory settings.

Android Enterprise fully managed devices aren’t secured by FRP by default because there’s no Google account set up on the device. To use FRP for these devices, configure one or more Google accounts to be assigned to all of your devices. When a device is reset with FRP turned on, it can only be unlocked by one of these accounts.

When you have configured FRP, devices are protected as follows:

  • Local reset:

    When the device is reset in the Settings app or by using the device hardware buttons, FRP is turned on by default. To change this behavior for individual devices, use the Set Factory Reset Protection device action.

  • Remote reset:

    When the device is reset remotely in Sophos Mobile Admin, FRP is turned off by default. To perform a remote reset with FRP turned on, select Turn on Factory Reset Protection in the wipe confirmation dialog.