Skip to content 
Factory Reset Protection (FRP)
A company phone is reset, packed and sold. At the new owner's, it starts up and asks for the former employee's Google account. That is the FRP lock. It protects against theft but quickly becomes an obstacle at retirement.
In brief
Factory Reset Protection (FRP, often called "FRP lock") is an anti-theft safeguard of Android devices that, after a reset, requires sign-in with the last linked Google account. Without this sign-in, the device cannot be set up again. In IT retirement, companies must release FRP before handing devices over, otherwise the devices are neither usable nor sellable.
How the FRP lock works
Google introduced Factory Reset Protection with Android 5.1. As soon as a Google account is set up on a device and a screen lock is active, the device remembers the link. If it is then reset without authorization, for example via the recovery menu, the setup wizard asks for this account. Anyone who does not know it gets no further.
| Situation | Consequence |
|---|---|
| Reset via settings after unlocking the device | FRP is generally not triggered |
| Reset via the recovery menu or remotely | FRP applies, sign-in with the previous account required |
| Google account removed from the device beforehand | FRP is deactivated |
| Company device with enterprise management | Administrators can specify which accounts may release the device |
Similar locks exist at other manufacturers, for example the Activation Lock on Apple devices. On Samsung, manufacturer-specific functions are added, see Samsung Knox.
What to note when retiring devices
- Remove accounts: Sign the Google account out of the device before the factory reset .
- Release enterprise management: Remove devices from mobile device management and from automatic enrollment programs such as the Android Zero-Touch enrollment.
- Use release accounts: If an enterprise account is stored for release, administrators can unlock locked devices themselves.
- Keep a list: Record which devices have been released. Locked devices can usually only be recovered as spare-parts donors or for recycling.
Important: The factory reset alone is not verifiable data erasure. More on this in the guide Retiring company phones and erasing data.
Rule of thumb: First sign out the account and remove it from management, then reset. In the reverse order, the FRP lock arises.
FRP lock and Second IT
Second IT erases smartphones and tablets with Blancco and issues a digitally signed erasure certificate for every device. So that devices can be refurbished and remarketed after erasure, account and management locks must be released beforehand. It is best to clarify this when requesting an offer. More on certified data erasure for mobile devices.
Frequently asked questions about the FRP lock
How do I remove the FRP lock on a company phone?
Most simply before it takes effect: sign out the Google account, remove the device from management, then reset. If the lock is already active, signing in with the previous account or a stored enterprise account helps. Bypass methods from the internet are not a solution for companies.
Does a factory reset erase all data?
On current encrypted devices, the keys are removed, and the data is then practically unreadable. However, there is no evidence per device. For companies, a documented erasure with a certificate therefore makes sense.
What happens to devices that stay locked?
They cannot be set up again and therefore cannot be resold. Usually the only option is recovery as spare-parts donors or recycling. This significantly reduces the proceeds.
Since when has there been the FRP lock on Android?
Google introduced Factory Reset Protection with Android 5.1. As soon as a Google account is set up on a device and a screen lock is active, the device remembers the link.
What is the difference between FRP and Activation Lock?
FRP is the anti-theft safeguard of Android devices with a Google account. Activation Lock is the similar lock on Apple devices. With both, the device cannot be set up again after a reset without the sign-in of the previous account.
Retiring company phones: erased, released, with a certificate per device.
Send us your device list. You will receive your offer in 48 hours on average.