Factory Reset Protection

Factory Reset Protection (FRP) is a built-in Android security feature that requires the original Google account credentials to set up a device after a factory reset. FRP prevents unauthorized individuals from reactivating stolen or lost devices.

How FRP Works

Before factory reset can be completed, the device requires authentication with a Google account that was previously registered on the device. This prevents anyone who steals a device from simply wiping it and setting it up with their own account.

MDM Integration with FRP

MDM platforms can work with FRP to provide additional security. Organizations can configure FRP policies that specify which Google accounts are permitted on devices. In enterprise enrollment, the organization’s account is protected by FRP.

Corporate Use Cases

For corporate-owned devices, FRP provides important protection against theft and unauthorized use. Combined with MDM remote wipe capabilities, FRP adds an additional layer of security.

User Impact

For legitimate users, FRP can be inconvenient if they forget their Google account credentials. Organizations should have support procedures to help users who are locked out by FRP.

FRP Bypass

In some circumstances, FRP can be bypassed, particularly if the device owner has account recovery options configured. However, FRP remains a significant deterrent to casual theft and unauthorized device reactivation.

Configuration and Management

Modern Android Enterprise allows administrators to configure FRP policies through the MDM platform. Organizations can choose to require FRP, disable it, or allow it based on their security requirements.